Problem with creating ssl on wls 10.3

I have oziiden.jks containing private key, which is used on two other weblogic servers(on winxp and aix5.3), and now i'm trying to use this jks to create ssl on wls 10.3 on aix5.3. The configuration is the same for keystrores and sll in all 3 servers, but I'm getting this error when I'm making SSL Listen Port Enabled.
<Apr 17, 2009 11:03:02 AM CEST> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias ozi from the jks keystore file /x/ozi2/user_projects/domains/ozidomain/oziconfig/oziiden.jks.>
<Apr 17, 2009 11:03:02 AM CEST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /x/ozi2/user_projects/domains/ozidomain/oziconfig/ptrust.jks.>
<Apr 17, 2009 11:03:02 AM CEST> <Error> <WebLogicServer> <BEA-000297> <Inconsistent security configuration, java.security.cert.CertificateParsingException: PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.3.14.3.2.29>
<Apr 17, 2009 11:03:02 AM CEST> <Error> <Server> <BEA-002618> <An invalid attempt was made to configure a channel for unconfigured protocol "PKIX: Unsupported OID in the AlgorithmIdentifier object: 1.3.14.3.2.29".>
Thanks for all responses.

What JDK version? I think it was JDK 6 - Update 13
I know that there is an issue that in one release of the JDK Sun added a new CA to a the cacerts that has an algorithm that is not supported.
[http://java.sun.com/javase/6/webnotes/6u13.html|http://java.sun.com/javase/6/webnotes/6u13.html]
Root Certificates Included
Root Certificates are included in this release. The following root certificates have been added:
* Two additional T-systems root CA certs (Refer to 6803022.)
* Two Unizeto root certs (Refer to 6803036.)
If I'm right then the offending certificates are
ttelesecglobalrootclass2ca and ttelesecglobalrootclass3ca
You can remove them by using the keytool:
keytool -delete -keystore $JAVA_HOME\jre\lib\security\cacerts -alias ttelesecglobalrootclass2ca -keystorepass changeit
keytool -delete -keystore $JAVA_HOME\jre\lib\security\cacerts -alias ttelesecglobalrootclass3ca -keystorepass changeit
I'll follow-up internally

Similar Messages

I am having problems with creating my apple id. On the phone it is advising me that the ID is not created and then when i do it online it says that it has been created. Can you advise me on what to do please?

I am having problems with creating my apple id. On the phone it is advising me that the ID is not created and then when i do it online it says that it has been created. Can you advise me on what to do please?

Apple ID FAQ http://support.apple.com/kb/HE37

Problem with create universe on Business Objects XI 3.1 base on SAP Query

Hello,
I have a problem with create universe on Business Objects XI 3.1 base on SAP Query.
The problem is hierarchy. Massage on Busines Objects is :
OWBS_ELEMT__ISTKOSZT(cube ICPC01/BEX_ICOC01):Exception condition "HIERARCHY NOT FOUND" raised.(WIS 10901)
Query in BEX run OK.
Best regards.
Ela.

Hello,
Thanks for response.
When I run BEX QUERY, all works OK.
All hierarchies was created and activated on system BW.
This situation appears after upgrade BW to SAP NetWeaver 7.3.
Before upgrade I created universe without any problems.
Regards Ela

Problem with creating new user in portal = portlet is not visible

Hi,
I've got a problem with creating new users in portal. In the Administer tab of the builder is the user portlet not visible.
How can I make this portlet visible?
Please Help
thank you...
Gilbert

Hi..my problem slightly similar.
I created one new user, and didn't select anything from "Public Groups Assignment" and "Privilege Assignment" for him.
I expect the user will be a public user.
But, when he try to logged in the portal,
He cannot see all the PORTLETS related to database values..
All he can see just LINKS -that all in my portal right now beside the report from database that the user cannot see :)
So, what did i do wrong?
Plz Advise, and thanks.

Problem with creating site from another computer!

Hi
I have WebDB 2.2 and Oracle8i instaled on the same computer. I have a problem to create site from another computer. There is not any process when I try to create site. There is always 0%.
But I have no problem with creating site on the origin computer.
Does anybody know something about it?

I am just not clear what to do once I have made changes and have published the new information.
You shouldn't have to do anything. iWeb will save the information in the Domain.sites file. You can keep this file in a folder, or even on your desktop and iWeb will launch from a double-click on the file.

Problem with creating email account on E72

I have bought E72 and want to use mine company email - but there is a problem with creating email account in mail program.
Restoring to fabric settings doesn't works.
When I'm creating Gmail account it's OK, but phone doesnt want to cooperate with other accouns:/

Try again without using WLAN. I had same problem, but solved it using GPRS.

Problem with creating chapter-markers

Hi everyone,
as the title already says it, I've got a problem with creating chapter markers in Quicktime Pro 7.6.4. There's something wrong with the font, displayed in Quicktime. The problem first appeared a few days ago. Before this, everything went fine and I don't have a clue what causes the problem.
Please click HERE to see a screen-recording of the steps I do to create chapters:
- convert the chapters into unformatted text and save it as Unicode (UTF-16) text file.
- open it in Quicktime and everything (including the german umlauts) is displayed correct.
- export it into a Text-file with description
when I open the new text file in Quicktime, the fonts are displayed in asian letters, but when I view it in the Texteditor, the text is almost correct, BUT the umlauts are not ok. So I go on with...
- correct the umlauts and save a new file as Unicode (UTF-16) again.
After I open the new file in Quicktime, the text is completely gone. As the text file seems to be ok in the Texteditor, I guess there must be something wrong with Quicktime. I tried to reinstall Quicktime 7 from the "Mac OS X 10.6 Snow Leopard" Installation-Disc, but the problem persists.
I' would appreciate any help...
Thanks in advance and best regards,
Michael

I'm having the exact same issue. I have created my movie in IMovie 09 then under the "share " menu I sent the movie to iDVD. Everything looks fine on screen, but all I get on the final product is the movie.
After digging deeper into the tutorials all they show is dragging a movie into the idvd shell, not sharing via imovie.
Thus I'm currently attempting to create a quicktime movie then drag it into the IDVD shell. I think that way the chapter markers and everything should show up and burnt into the final project. I'm guessing the "share" option with the IDVD from iMovie doesn't work properly???

Problem with creating order through order template

Hi experts,
We have problem with creating order by order template. Extensions data available in order template is not sent to order. Extension data are showing upto order submission form. But after sucessful creation of order extension data are no longer available in CRM-ORDEr.
We are using ISA 4.0 with CRM 4.0.
We recently applied patches on CRM server. Before patching it was working fine.
Can you please suggest us to solve this issue?
Thanks in Advance.
Regards,
Murugan Arumugam.

closed.

Problem with Creating Info Record

Hello Gurus,
I've problem with Creating Info Record
i tried to create info record for Plant Specific/Purchase Org
The first Screen General Data is OK
i entered all the data in the next screen ie
Purchase Organization Data screen but i'm getting error
<b>Make an entry in all required fields</b>
but there is Mandatory Textbox ie "VALID TO" which im unable to select Bcos its Disabled
pls help me regarding this
thanks in advance

Hi
Have u given the net price. <b>VALID TO</b> is the date until which the price shown in the info record is valid.
If there is no price that is valid on the current date, the last-valid price is displayed and the date field contains the day before the start of the next validity period (this may be 12.31.9999 if there is no further validity date). If all validit periods lie beyond the current date, the price of the next period is displayed. The date field then contains the end date of this period.
These validity periods we will maintain Purchse data CONDITIONS while creating info record. Check the validity period for the conditions.
Hope this will helps u
Ravi
Ravikumar Bolla

Problem with creating virtual column

Hello,
We've got problem with creating virtual column.
There is table R_T that contain columns R_ID and L_ID, we would like to create virtual column RL_ID that contains sth like 'R_ID-L_ID' (R_ID, L_ID and RL_ID are varchars).
According documentation we've tried:
alter table R_T add column (RL_ID varchar2(60) generated always as (R_ID||'-'||L_ID) VIRTUAL)
but getting
ORA-00904: : invalid identifier
00904.00000 - "%s: invalid identifier"
Have no idea where is the problem.
Table, columns names are little different but contains only capital letters A - Z and underscore "_".
Has anyone idea?
Thanks a lot.

Strange...
This does work for me :
Connected to Oracle Database 11g Enterprise Edition Release 11.2.0.1.0
Connected as dev
SQL>
SQL> create table r_t (
2   r_id varchar2(25),
3   l_id varchar2(25)
4 );
Table created
SQL> insert into r_t (r_id, l_id) values('R','L');
1 row inserted
SQL> alter table r_t add (rl_id varchar2(60) generated always as (r_id||'-'||l_id) virtual);
Table altered
SQL> select * from r_t;
R_ID                      L_ID                      RL_ID
R                         L                         R-L
SQL>

I have problems with creating new projects in iMovie.

I have problems with creating new projects. When i try, the mac says the following "Make sure there is enough disk space and that you have permission to write the projects to the drive." I have 8GB available, so its not that.

thanks for your support
lol

EDSPermissionError(-14120) problems with LDAP, SSL and Directory Utility

Hello everyone,
Apologies for the repost but I think I may have made a mistake by posting this originally in the Installation, Setup and Migration forum instead of the Open Directory forum. At least I think that may be why I didn't receive any responses.
Anyway, I've been trying to get my head around Open Directory and SSL as they are implemented in Mac OS X Server 10.5 Leopard, and have been having a few issues. I would like to set up a secure internal infrastructure based around a local Certificate Authority that signs certificates for other internal services like LDAP, email, websites, etc.
I only have one Mac OS X Server and it is kind of a small office so I have gone against best practice and simply made it a CA (through Keychain Utility). I then generated a self-signed SSL certificate through Server Admin, and used the "Generate CSR" option to create a Certificate Signing Request. This went fine, but I did have some problems signing it with the CA, because the server documentation suggested that once I signed it it would pop open a Mail message containing the ASCII version of the signed certificate - it did not, and it took me a loooong time to realize that I could simply export the copy of the signed certificate it put in my local Keychain on the server as a PEM file and paste this back into the "Add Signed or Renewed Certificate from Certificate Authority" dialog box in Server Admin. Hopefully this can be fixed in a forthcoming patch, but I thought I would mention it here in case anyone else is stuck on this issue.
Once I did this I was able to use this certificate in the web server on the same machine and sure enough I was able to connect to it with with clients who had installed the CA certificate in their system Keychains without getting any error messages - very cool.
However, I haven't had quite as much luck getting it going with LDAP/Open Directory. I installed the certificate there as well, but have run into a number of problems. At first I could not get clients (also running 10.5.2) to talk to the server at all over SSL, receiving an error in Directory Utility that the server did not support SSL. I eventually discovered that the problem seemed to lie in the fact that the OpenLDAP implementation on Leopard is not tied in with the system Keychain, necessitating some command-line voodoo to install a copy of the CA cert in a local directory and point /etc/openldap/ldap.conf at it, as documented here: http://www.afp548.com/article.php?story=20071203011158936
This allowed me to do an ldapsearch command over SSL, and seemingly turn SSL on on clients that were previously bound to the directory, and additionally allowed me to run Directory Utility on new clients and put in the server name with the SSL box checked and begin to go through the process of binding. Once this seemed to work, I turned off all plaintext LDAP communication and locked down the service by checking the "Enable authenticated directory binding," "Require authenticated binding," "Disable clear text passwords," and "Encrypt all packets" options in Server Admin. However, I am now running into a new problem, specifically that I cannot successfully bind a local account to a directory account over SSL.
Here's what happens:
1) I run Directory Utility, (or it auto-runs) and add a server, typing in the DNS name and clicking the SSL box.
2) I get asked to authenticate, and type in user credentials, including computer name (incidentally, should this be a FQDN or just a hostname?)
3) Provided I put admin credentials in here and not user-level credentials, I get taken to the "Do you want to set up Mail, VPN, etc.?" box that normally appears when you autodiscover or connect to an Open Directory server.
4) I click through, and am asked for a username and password on the server, as well as the password for my local account.
5) When I put this information in, I get a popup with the dreaded "eDSPermissionError(-14120)" and it fails.
Checking the logs in Server Admin reveals nothing special, and while I have seen a couple other threads on this error and various other binding problems:
http://discussions.apple.com/thread.jspa?messageID=5967023
http://discussions.apple.com/message.jspa?messageID=5982070
these have not solved the problem. In the Open Directory user name field I am putting the short username. I have tried putting [email protected] and the user's longname but this fails by saying the account does not exist. For some reason it does seem to work if I bind it to the initial admin account I created, but no other user accounts.
If I turn all the encryption stuff off I am able to join just fine, so I am suspecting that the error may lie in some other "under the hood" piece of software that doesn't get the CA trust settings from the Keychain or the ldap.conf file, but I'm stymied as to which piece of software this might be. Does anyone have any clues on what I might be able to do here?
Thanks,
Andrew

Hard to tell what is happening without looking at the application
source, knowing what OS & hardware you're using etc. You might want to
try running with different JVM versions to see if it's actually the VM
that is the problem. If you have a support contract with BEA you could
ask support to help you diagnose this.
Regards,
/Helena
Ayub Khan wrote:
I have an application running on Weblogic 8.1 ( with JRockit as the JVM). This
application in turns talks to an iPlanet Directory server via LDAP/SSL. The problem
seems to happen on loading the machine..the performance progressively gets worse
and after a couple of seconds, all the threads stop responding. I checked the
heap, cpu and the idle threads in the execute queue and there is nothing there
to trigger alarms...there are quite a few idle threads still and the heap and
the cpu utilization seem OK. On doing a thread dump, Is see that all the other
threads seem to be in a state where they are waiting for data from LDAP and it
is basically read only data that they are waiting on.
Does anyone know what it is going on and help point me in the right direction.
-Ayub

Problem with creating a straight line with polygamo lasso

I am having a problem with polygamo lasso. when i create a triangle or a rechtangle in straight line it is turn out the line become not straight. I don't what did i wrong, was always working fine till today. YOu can see the pic the top line lookslike a step.

Ihope I did right, was not sure how to save as channel.

Having a problem with creating/using a primary key on a view

I have a problem with a primary key on a view
I created the view and primary key as follows:
CREATE OR REPLACE FORCE VIEW "MDD"."ROCK_LU" ("DESCRIPTION",
UNIQUE ("DESCRIPTION") RELY DISABLE,
CONSTRAINT "ROCK_LU_PK" PRIMARY KEY ("DESCRIPTION") RELY DISABLE) AS
SELECT DESCRIPTION
FROM MRMC_LU
WHERE ROCK = 'T';
The view with the primary key appears to have been created as there were no error messages. (The above was from the sql tab in sql developer.)
When I try to create the foreign key on my mdd_hr table - I get an error
/* hr_name - foreign key */
ALTER TABLE mdd_hr add CONSTRAINT hr_name_fk FOREIGN KEY (hr_name) REFERENCES rock_lu(description);
Error report:
SQL Error: ORA-02270: no matching unique or primary key for this column-list.
When I lookup the index in sql developer, rock_lu_pk is not there.
All my other foreign keys work - but I don't understand what I am doing wrong with this one. Please help.
glenn
Background - as to why I want to use a view as a lookup table.
The MRMC_LU table that the view is created from is structured like:
DESCRIPTION - MINERAL - ROCK - MODIFIER - COMMODITY
ANHYDRITE - T - T - T
APLITE - T - - T
GRAPHITE - T - - - T
GREYWACKE - - T
DESCRIPTION is a list of all names of minerals, rocks, modifiers and commodities. T is entered in each valid field. Often a description name is used for both a mineral and a rock or a mineral and a commodity or any other combination. Because this database is just starting up, it was more efficient to create one table that could be updated (and thereby automatically update the MINERAL_LU, ROCK_LU, MODIFIER_LY, COMMODITY_LU views) rather than create and maintain four separate but similar tables. A primary key cannot be generated for the MRMC_LU table as there are nulls in each column
except DESCRIPTION.
Perhaps there is a smarter way to do this?

http://download-uk.oracle.com/docs/cd/B10501_01/server.920/a96540/statements_85a.htm#2065512
You can specify constraints on views and object views. You define the constraint at the view level using the out_of_line_constraint clause. You define the constraint as part of column or attribute specification using the inline_constraint clause after the appropriate alias.
Oracle does not enforce view constraints. However, operations on views are subject to the integrity constraints defined on the underlying base tables. This means that you can enforce constraints on views through constraints on base tables.
Restrictions on View Constraints
View constraints are a subset of table constraints and are subject to the following restrictions:
You can specify only unique, primary key, and foreign key constraints on views. However, you can define the view using the WITH CHECK OPTION clause, which is equivalent to specifying a check constraint for the view.
Because view constraints are not enforced directly, you cannot specify INITIALLY DEFERRED or DEFERRABLE.
View constraints are supported only in DISABLE NOVALIDATE mode. You must specify the keywords DISABLE NOVALIDATE when you declare the view constraint, and you cannot specify any other mode.
You cannot specify the using_index_clause, the exceptions_clause clause, or the ON DELETE clause of the references_clause.
You cannot define view constraints on attributes of an object column.
Rgds.

Please do not laugh:( I have a problem with creating i Cloud account. When I download i Cloud and am supposed to sign it uo, I get a message that my This Apple ID is valid, but is not an i Cloud account.

Not everybody are advanced in use of different devices. I have problems with everything, now trying to move my I tunes to my ny PC. I reccon it would be easiest by using i Cloud. But I am even not able to create an account.
Can somebody help?

stf10 wrote:
... trying to move my I tunes to my ny PC. ...
From where are you trying to move your iTunes...

Problem with creating ssl on wls 10.3

Similar Messages

Maybe you are looking for