In-house License Key failure alert

Due to a recent important security patch update on our Apache Server Software running the frevvo License Key Manager, certain customers have experienced license key failures. The security patch was necessary and protects our customers.

The issue is seen on the Live Forms In-house server as a failure to renew the license key. If your frevvo software installation has this issue you will see the following error displayed when you login to your form server. Unfortunately, if you use public forms anonymously without logging into the form server you will not notice this issue until the license 9 day grace period completes.

If your frevvo software installation has this problem, you will see error messages like the one below in your frevvo log file.

20:37:42,452  INFO HttpMethodDirector:439 - I/O exception (javax.net.ssl.SSLException) caught when processing request: java.lang.RuntimeException: Could not generate DH keypair

Solution:

If your Live Forms server has this issue you must fix this immediately before the 9 day grace period. This problem is caused by a known issue in the Java 6 and Java 7 Runtime that was fixed in Java 7 Runtime Update 21. If your frevvo software installation is using Java 6 or Java 7 Runtime update 20 or earlier you must upgrade immediately to solve this issue.

The Java upgrade is highly recommended as it includes numerous security patches. However if for some reason you are not able to upgrade to Java 7 Runtime Update 21 or later, an alternate solution is to try installing BouncyCastle JCE provider to your JRE ((java 6 or java 7u20 or earlier) as follows:

1. Download https://www.bouncycastle.org/download/bcprov-ext-jdk15on-154.jar
2. Follow the instructions here: http://tomee.apache.org/bouncy-castle.html

How can I tell what Java Runtime my frevvo software is using?

One simple test is to login to your Live Forms server. If you do not see the warning message then your frevvo software is not affected. You can also open a command window and enter "java -version" however your machine might have multiple copies of java installed. A 3rd method is to look in the frevvo log files for "java.version". This will tell you for sure what Java Runtime version is in use by the frevvo software.