Unable to launch ASDM connection to ASA 5505

[Mirek Labuz]

Hello,

I have a problem connecting to ASA 5505 via ASDM. I am able to download and start the application but as soon as I start in put in the IP address it gets stuck on the login page saying "connecting to the device". Java logging shows the errors below. I am using a Win10 machine with java build 1.8.0_161-b12 on it. Tried to play with java settings a bit to no success. Works from other PCs so has to be something local on my machine. Thanks for help.

Local Launcher Version = 1.7.0
Local Launcher Version Display = 1.7(0)
Cannot read profile file C:\Users\miroslaw.labuz\.asdm\data\deviceinfo.conf.
OK button clicked
Exception in thread "AWT-EventQueue-0" java.lang.ExceptionInInitializerError
at javax.crypto.JceSecurity.loadPolicies(JceSecurity.java:378)
at javax.crypto.JceSecurity.setupJurisdictionPolicies(JceSecurity.java:323)
at javax.crypto.JceSecurity.access$000(JceSecurity.java:50)
at javax.crypto.JceSecurity$1.run(JceSecurity.java:85)
at java.security.AccessController.doPrivileged(Native Method)
at javax.crypto.JceSecurity.<clinit>(JceSecurity.java:82)
at javax.crypto.JceSecurityManager.<clinit>(JceSecurityManager.java:65)
at javax.crypto.Cipher.getConfiguredPermission(Cipher.java:2586)
at javax.crypto.Cipher.getMaxAllowedKeyLength(Cipher.java:2610)
at sun.security.ssl.CipherSuite$BulkCipher.isUnlimited(Unknown Source)
at sun.security.ssl.CipherSuite$BulkCipher.<init>(Unknown Source)
at sun.security.ssl.CipherSuite.<clinit>(Unknown Source)
at sun.security.ssl.SSLContextImpl.getApplicableCipherSuiteList(Unknown Source)
at sun.security.ssl.SSLContextImpl.access$100(Unknown Source)
at sun.security.ssl.SSLContextImpl$AbstractTLSContext.<clinit>(Unknown Source)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at java.security.Provider$Service.getImplClass(Unknown Source)
at java.security.Provider$Service.newInstance(Unknown Source)
at sun.security.jca.GetInstance.getInstance(Unknown Source)
at sun.security.jca.GetInstance.getInstance(Unknown Source)
at javax.net.ssl.SSLContext.getInstance(Unknown Source)
at com.cisco.launcher.w.a(Unknown Source)
at com.cisco.launcher.s.actionPerformed(Unknown Source)
at javax.swing.AbstractButton.fireActionPerformed(Unknown Source)
at javax.swing.AbstractButton$Handler.actionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.fireActionPerformed(Unknown Source)
at javax.swing.DefaultButtonModel.setPressed(Unknown Source)
at javax.swing.AbstractButton.doClick(Unknown Source)
at javax.swing.plaf.basic.BasicRootPaneUI$Actions.actionPerformed(Unknown Source)
at javax.swing.plaf.basic.BasicComboBoxUI$Actions.actionPerformed(Unknown Source)
at javax.swing.plaf.basic.BasicComboBoxUI$Handler.actionPerformed(Unknown Source)
at javax.swing.JTextField.fireActionPerformed(Unknown Source)
at javax.swing.JTextField.postActionEvent(Unknown Source)
at javax.swing.JTextField$NotifyAction.actionPerformed(Unknown Source)
at javax.swing.SwingUtilities.notifyAction(Unknown Source)
at javax.swing.JComponent.processKeyBinding(Unknown Source)
at javax.swing.JComponent.processKeyBindings(Unknown Source)
at javax.swing.JComponent.processKeyEvent(Unknown Source)
at java.awt.Component.processEvent(Unknown Source)
at java.awt.Container.processEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.KeyboardFocusManager.redispatchEvent(Unknown Source)
at java.awt.DefaultKeyboardFocusManager.dispatchKeyEvent(Unknown Source)
at java.awt.DefaultKeyboardFocusManager.preDispatchKeyEvent(Unknown Source)
at java.awt.DefaultKeyboardFocusManager.typeAheadAssertions(Unknown Source)
at java.awt.DefaultKeyboardFocusManager.dispatchEvent(Unknown Source)
at java.awt.Component.dispatchEventImpl(Unknown Source)
at java.awt.Container.dispatchEventImpl(Unknown Source)
at java.awt.Window.dispatchEventImpl(Unknown Source)
at java.awt.Component.dispatchEvent(Unknown Source)
at java.awt.EventQueue.dispatchEventImpl(Unknown Source)
at java.awt.EventQueue.access$500(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.awt.EventQueue$3.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue$4.run(Unknown Source)
at java.awt.EventQueue$4.run(Unknown Source)
at java.security.AccessController.doPrivileged(Native Method)
at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(Unknown Source)
at java.awt.EventQueue.dispatchEvent(Unknown Source)
at java.awt.EventDispatchThread.pumpOneEventForFilters(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForFilter(Unknown Source)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.pumpEvents(Unknown Source)
at java.awt.EventDispatchThread.run(Unknown Source)
Caused by: java.lang.SecurityException: Framework jar verification can not be initialized
at javax.crypto.JarVerifier.<clinit>(JarVerifier.java:228)
... 71 more
Caused by: java.security.PrivilegedActionException: java.security.cert.CertificateException: X.509 not found
at java.security.AccessController.doPrivileged(Native Method)
at javax.crypto.JarVerifier.<clinit>(JarVerifier.java:186)
... 71 more
Caused by: java.security.cert.CertificateException: X.509 not found
at java.security.cert.CertificateFactory.getInstance(Unknown Source)
at javax.crypto.JarVerifier$1.run(JarVerifier.java:192)
at javax.crypto.JarVerifier$1.run(JarVerifier.java:187)
... 73 more
Caused by: java.security.NoSuchAlgorithmException: X.509 CertificateFactory not available
at sun.security.jca.GetInstance.getInstance(Unknown Source)
... 76 more
Exception in thread "Thread-3" java.lang.NoClassDefFoundError: sun.security.ssl.SSLContextImpl$CustomizedTLSContext
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Unknown Source)
at java.security.Provider$Service.getImplClass(Unknown Source)
at java.security.Provider$Service.newInstance(Unknown Source)
at sun.security.jca.GetInstance.getInstance(Unknown Source)
at sun.security.jca.GetInstance.getInstance(Unknown Source)
at javax.net.ssl.SSLContext.getInstance(Unknown Source)
at javax.net.ssl.SSLContext.getDefault(Unknown Source)
at javax.net.ssl.SSLSocketFactory.getDefault(Unknown Source)
at javax.net.ssl.HttpsURLConnection.getDefaultSSLSocketFactory(Unknown Source)
at javax.net.ssl.HttpsURLConnection.<init>(Unknown Source)
at sun.net.www.protocol.https.HttpsURLConnectionImpl.<init>(Unknown Source)
at sun.net.www.protocol.https.Handler.openConnection(Unknown Source)
at sun.net.www.protocol.https.Handler.openConnection(Unknown Source)
at java.net.URL.openConnection(Unknown Source)
at com.sun.deploy.util.SecurityBaseline.checkForUpdate(Unknown Source)
at com.sun.deploy.util.SecurityBaseline.access$100(Unknown Source)
at com.sun.deploy.util.SecurityBaseline$1.run(Unknown Source)
at java.lang.Thread.run(Unknown Source)

[Dennis Mink]

have you got the asdm software loaded on disk0?

also  in your ASAs config, does it have an asdm statement to load it?

and is http server enabled?

[Mirek Labuz]

Hi,

Thanks for quick response. I have "http server enable" in the config.

There is ASDM file on disk0:

Result of the command: "show disk0"
--#-- --length-- -----date/time------ path
93 86456832 Feb 23 2018 15:32:56 asa961-lfbff-k8.SPA
94 25819140 Feb 23 2018 15:33:34 asdm-761.bin
95 33 Jul 31 2018 00:20:40 .boot_string
11 4096 Feb 23 2018 15:36:30 log
13 0 Feb 23 2018 15:36:30 log/asa-appagent.log
20 4096 Feb 23 2018 15:37:20 crypto_archive
21 4096 Feb 23 2018 15:37:24 coredumpinfo
22 59 Feb 23 2018 15:37:24 coredumpinfo/coredump.cfg

The other statement you mentioned I don't have but the fact t works perfectly on other PCs connecting to the same ASA makes me think it's local for sure.

Appreciate any ideas.

[Mirek Labuz]

Hi, I basically was not able to resolve this issue an was forced to rebuild the PC. FYI

[rajevemu]

Sometimes ssl encryption will cause to block the asdm access.

Please disable ssl and try to access asdm.

Ex: 

sh run | inc ssl
ssl encryption aes128-sha1 3des-sha1

#no ssl encryption aes128-sha1 3des-sha1

Reconfigure the SSL back on the firewall.

#ssl encryption aes128-sha1 3des-sha1

[Mirek Labuz]

Hi, Much appreciate the feedback - I'll give it a try next time I encounter this.