After clients have been updated with Java 7 Update 25 (or more recent) a Forms application running on an intranet now fails with an error message titled "Application Blocked for Security" and stating: There is a setting, “Perform signed code certificate revocation checks on”, which can be changed by clicking on “Do not check (not recommended)”. That will disable the revocation check and allow end users to log into the application. There have been reported issues where users trying to access Oracle Forms 12c applications results in the following error:
NOTE: The problem does not happen if you are using Forms Standalone Launcher (FSAL). This is only occurring with the Java browser plug-in (the Internet Explorer method) or with Java Web Start (JWS). The reason for this error is that Oracle Forms applications which are using the Certificate Revocation List (CRL) in Java are now getting blocked starting today. Oracle has released more information and has created a patch as noted in Doc ID 2801480.1 in My Oracle Support. The patch is available for anyone using Oracle Forms 12.2.1.3.0 and 12.2.1.4.0. In addition to the patch, a workaround may be applied by disabling the certificate revocation checks (full details noted in Oracle Support Doc ID 1579850.1). WorkaroundThe workaround can be applied in each end user’s Java Control Panel (javacpl.exe) under the Advanced tab. There is a setting, “Perform signed code certificate revocation checks on”, which can be changed by clicking on “Do not check (not recommended)”. That will disable the revocation check and allow end users to log into the application. PatchFor users using Forms 12.2.1.3.0 and 12.2.1.4.0, you may download and install Oracle Patch 33263102 from https://updates.oracle.com/download/33263102.html. Please make sure you download the the patch for your corresponding Forms version and operating system of your server running Oracle Forms and Reports. You may apply the patch by performing these steps:
Please note that the patch is only available to Oracle Forms 12.2.1.3.0 and 12.2.1.4.0 customers. Any Oracle customer who is using older versions of Oracle Forms 12c or even Oracle Forms 11g will need to either use the workaround or consider upgrading to Oracle Forms 12.2.1.4.0. If you are interested in upgrading your Oracle Forms application to the latest version, please do not hesitate to contact PITSS today. |