Avatar

Please consider registering
guest

sp_LogInOut Log In sp_Registration Register

Register | Lost password?
Advanced Search

— Forum Scope —




— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

sp_Feed Topic RSS sp_TopicIcon
Problem while init() my opc ua server
July 18, 2018
12:34, EEST
Avatar
Alex U.
Member
Members
Forum Posts: 4
Member Since:
July 18, 2018
sp_UserOfflineSmall Offline

I create my server like this.

# setApplicationDescription();
# setIdentity();
# setUserTokens();
# setSecurityMode();
# this.init();
# setSafetyLimits();

In my methods I do some methods calls from SDK to configure my opc ua server. After the update to the newest version of SDK and Stack i get a warning inside my init()-Method.,

# 11:28:29.341 [main] WARN o.opcfoundation.ua.utils.XMLFactoryCache – Cannot initialize XML factories to ignore DTD processing, please update java to newer version

I use Java 1.8. What I can do to fix this warning.

July 18, 2018
13:55, EEST
Avatar
Heikki Tahvanainen
Member
Members
Forum Posts: 402
Member Since:
April 17, 2013
sp_UserOfflineSmall Offline

Hi,

Can you still mention what exact version of Java you’re using?

This warning message is caused by the recently released fix for XXE exploits. Please see some general information at https://prosysopc.com/blog/xxe-exploit/

Our blog post mentions “the fix requires also a recent Java Virtual Machine, namely Java 7 update 67, Java 8 update 20, or above”. But now that I tested this myself, I’m not sure if the information is correct here. I was able to reproduce this warning message at least with 8u171.

The XMLFactoryCache initialization will be done by the SDK when calling UaServer.init() so your own code is not necessarily doing anything to influence this.

I’ll mark this into our issue tracker and we’ll start to investigate why the warning logging is done also with newer Java version.

July 19, 2018
12:04, EEST
Avatar
Alex U.
Member
Members
Forum Posts: 4
Member Since:
July 18, 2018
sp_UserOfflineSmall Offline

Hi,

thank you for your answer. I used the java JDK 1.8.0_101.
Now I use the newest Version JDK 1.8.0_181 and I also get this warning.

August 6, 2018
12:31, EEST
Avatar
Heikki Tahvanainen
Member
Members
Forum Posts: 402
Member Since:
April 17, 2013
sp_UserOfflineSmall Offline

This issue is already fixed on a newer development version of the OPC UA Java Stack. The fixed Stack version will be added to the next Java SDK release. Unfortunately the currently newest SDK release version doesn’t contain the fix and actually the above mentioned logging will appear regardless of Java version.

If you want to receive the fixed Stack version right away, please send an email to us at uajava-support prosysopc.com.

There should be no actual problem besides the scary looking log line.

Forum Timezone: Europe/Helsinki

Most Users Ever Online: 1919

Currently Online:
21 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Top Posters:

Heikki Tahvanainen: 402

hbrackel: 144

rocket science: 88

pramanj: 86

Francesco Zambon: 83

Ibrahim: 78

Sabari: 62

kapsl: 57

gjevremovic: 49

Xavier: 43

Member Stats:

Guest Posters: 0

Members: 737

Moderators: 7

Admins: 1

Forum Stats:

Groups: 3

Forums: 15

Topics: 1524

Posts: 6450

Newest Members:

fannielima, kristiewinkle8, rust, christamcdowall, redaahern07571, nigelbdhmp, travistimmons, AnnelCib, dalenegettinger, howardkennerley

Moderators: Jouni Aro: 1026, Pyry: 1, Petri: 0, Bjarne Boström: 1026, Jimmy Ni: 26, Matti Siponen: 346, Lusetti: 0

Administrators: admin: 1