# Smart Client WebStart start issue - certificate check failed **URL:** \ **Category:** Classic Servoy\ **Created:** [October 30, 2014, 4:17pm UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237 "2014-10-30T16:17:52Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![LXS](https://avatars.discourse-cdn.com/v4/letter/l/ecb155/32.png) [@LXS](https://forum.servoy.com/u/LXS)\ **Post date:** [October 30, 2014, 4:17pm UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/1 "2014-10-30T16:17:52Z")
Hi there, i’ve a SmartClient Webstart issue with two customers (different Servoy Servers). Both called me today that they can’t start their SmartClient after a restart anymore (and both already worked with the SmartClient today). They get an error message from Java WebStart. The message says, that the certificate can not be validated (see attachment). - we use a Java Code Signing Certificate from GlobalSign, valid until 2017, signed the whole Servoy Server with it - customers are using Mac OS X (10.9.3 and 10.10) - Java Version: 1.6.0\_43 and 1.6.0\_65 - Servoy Versions: 5.2.15 and Servoy 3.5.x Because both customers have this issue, i don’t think it’s a thing with their Servoy Servers or installed programs / firewalls. Does anybody else have these problems until today? Here is the stacktrace: java.security.cert.CertificateException: java.security.cert.CertPathValidatorException: OCSP response error: INTERNAL\_ERROR at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(TrustDecider.java:715) at com.sun.javaws.security.AppPolicy.grantUnrestrictedAccess(AppPolicy.java:295) at com.sun.javaws.LaunchDownload.checkSignedResourcesHelper(LaunchDownload.java:1851) at com.sun.javaws.LaunchDownload.checkSignedResources(LaunchDownload.java:1527) at com.sun.javaws.Launcher.prepareResources(Launcher.java:1283) at com.sun.javaws.Launcher.prepareAllResources(Launcher.java:636) at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:338) at com.sun.javaws.Launcher.prepareToLaunch(Launcher.java:238) at com.sun.javaws.Launcher.launch(Launcher.java:127) at com.sun.javaws.Main.launchApp(Main.java:460) at com.sun.javaws.Main.continueInSecureThread(Main.java:292) at com.sun.javaws.Main$1.run(Main.java:125) at java.lang.Thread.run(Thread.java:695) Caused by: java.security.cert.CertPathValidatorException: OCSP response error: INTERNAL\_ERROR at sun.security.provider.certpath.OCSP.check(OCSP.java:222) at sun.security.provider.certpath.OCSP.check(OCSP.java:120) at com.sun.deploy.security.TrustDecider.doOCSPEEValidation(TrustDecider.java:1002) at com.sun.deploy.security.TrustDecider.isAllPermissionGranted(TrustDecider.java:696) … 12 more Thanks a lot! Alex ![error.PNG](https://canada1.discourse-cdn.com/flex010/uploads/servoy/original/1X/3ceb37e3eb0aa9c972712177dbc3e9a9f30c220a.png) ---
**Author:** ![LXS](https://avatars.discourse-cdn.com/v4/letter/l/ecb155/32.png) [@LXS](https://forum.servoy.com/u/LXS)\ **Post date:** [November 3, 2014, 9:43am UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/2 "2014-11-03T09:43:58Z")
The issue has to do with the GlobalSign certificate. When i sign the server new with an old (not GlobalSign) certificate, then everything works again. Has nobody else problems with it? Alex ---
**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\ **Post date:** [November 3, 2014, 6:55pm UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/3 "2014-11-03T18:55:55Z")
Today we had the same issue with one customer. All clients were still using Java 1.6. I updated them to Oracle Java 7 and tried even 8, and everything was working again ---
**Author:** ![LXS](https://avatars.discourse-cdn.com/v4/letter/l/ecb155/32.png) [@LXS](https://forum.servoy.com/u/LXS)\ **Post date:** [November 4, 2014, 9:08am UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/4 "2014-11-04T09:08:56Z")
Yes, with Java 7/8 there’s no problem. Some of our customers still use Servoy 5 and so it’s no option to jump to Java 7 because of some issues. Yesterday i contacted the GlobalSign Support and they gave me the clue to reimport the root certificate. Don’t know if it helps but i’ll try today. I let you know… Alex ---
**Author:** ![Harjo](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/harjo/32/4873_2.png) [@Harjo](https://forum.servoy.com/u/Harjo)\ **Post date:** [November 4, 2014, 1:44pm UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/5 "2014-11-04T13:44:34Z")
yeah, I believe Apple updated the Java 1.6 in the background, that does break somehow the Globalsign certificate. I don’t know if there is an option in the Java 1.6 control panel, to work-around this. ---
**Author:** ![rieder](https://yyz2.discourse-cdn.com/flex010/user_avatar/forum.servoy.com/rieder/32/4950_2.png) [@rieder](https://forum.servoy.com/u/rieder)\ **Post date:** [November 6, 2014, 8:48am UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/6 "2014-11-06T08:48:26Z")
Hi We have the same problem. But only in our development environment: OS X 10.9.5 Servoy 7.3.1 Java 1.6.0\_65 Customers use Windows. We had no complaints. So far. Regards Birgit ---
**Author:** ![LXS](https://avatars.discourse-cdn.com/v4/letter/l/ecb155/32.png) [@LXS](https://forum.servoy.com/u/LXS)\ **Post date:** [November 6, 2014, 8:57am UTC](https://forum.servoy.com/t/smart-client-webstart-start-issue-certificate-check-failed/18237/7 "2014-11-06T08:57:12Z")
The strange thing is, since tuesday it works again without any changes on the certificate. Don’t know whats going on here… @rieder: Appears the problem today on your Mac? No problems on Windows so far as well.