Log In
Register
Forum
Topic RSS
12:34, EEST
July 18, 2018
Offline
I create my server like this.
# setApplicationDescription();
# setIdentity();
# setUserTokens();
# setSecurityMode();
# this.init();
# setSafetyLimits();
In my methods I do some methods calls from SDK to configure my opc ua server. After the update to the newest version of SDK and Stack i get a warning inside my init()-Method.,
# 11:28:29.341 [main] WARN o.opcfoundation.ua.utils.XMLFactoryCache – Cannot initialize XML factories to ignore DTD processing, please update java to newer version
I use Java 1.8. What I can do to fix this warning.
13:55, EEST
Moderators
April 17, 2013
Offline
Hi,
Can you still mention what exact version of Java you’re using?
This warning message is caused by the recently released fix for XXE exploits. Please see some general information at https://prosysopc.com/blog/xxe-exploit/
Our blog post mentions “the fix requires also a recent Java Virtual Machine, namely Java 7 update 67, Java 8 update 20, or above”. But now that I tested this myself, I’m not sure if the information is correct here. I was able to reproduce this warning message at least with 8u171.
The XMLFactoryCache initialization will be done by the SDK when calling UaServer.init() so your own code is not necessarily doing anything to influence this.
I’ll mark this into our issue tracker and we’ll start to investigate why the warning logging is done also with newer Java version.
12:04, EEST
July 18, 2018
Offline
Hi,
thank you for your answer. I used the java JDK 1.8.0_101.
Now I use the newest Version JDK 1.8.0_181 and I also get this warning.
12:31, EEST
Moderators
April 17, 2013
Offline
This issue is already fixed on a newer development version of the OPC UA Java Stack. The fixed Stack version will be added to the next Java SDK release. Unfortunately the currently newest SDK release version doesn’t contain the fix and actually the above mentioned logging will appear regardless of Java version.
If you want to receive the fixed Stack version right away, please send an email to us at uajava-support prosysopc.com.
There should be no actual problem besides the scary looking log line.
Most Users Ever Online: 518
Currently Online: Jouni Aro
26 Guest(s)
Currently Browsing this Page:
1 Guest(s)
Top Posters:
hbrackel: 135
pramanj: 86
Francesco Zambon: 81
rocket science: 77
Ibrahim: 76
Sabari: 62
kapsl: 57
gjevremovic: 49
Xavier: 43
fred: 41
Member Stats:
Guest Posters: 0
Members: 680
Moderators: 16
Admins: 1
Forum Stats:
Groups: 3
Forums: 15
Topics: 1467
Posts: 6261
Newest Members:
sagarchau, elviralangwell4, Donnavek, Eddiefauth, DonaldPooma, fidelduke938316, Jan-Pfizer, DavidROunc, fen.pang@woodside.com, aytuleModerators: Jouni Aro: 1010, Otso Palonen: 32, Tuomas Hiltunen: 5, Pyry: 1, Petri: 0, Bjarne Boström: 983, Heikki Tahvanainen: 402, Jukka Asikainen: 1, moldzh08: 0, Jimmy Ni: 26, Teppo Uimonen: 21, Markus Johansson: 42, Niklas Nurminen: 0, Matti Siponen: 321, Lusetti: 0, Ari-Pekka Soikkeli: 5
Administrators: admin: 1
