Got problem when using SSL connection when using my own web server

hi all,
I need to create a SSL connection to a website, i'm using Java 5 so i just append use the following code,
System.setProperty("https.proxyHost","90.0.0.122");
          System.setProperty("https.proxyPort","3128");
          URL verisign = new URL("https://www.verisign.com");
          //URL verisign = new URL("https://localhost");
          //URL verisign = new URL("https://90.0.0.30");
          BufferedReader in = new BufferedReader(
                    new InputStreamReader(
                              verisign.openStream()));
          String inputLine;
          while ((inputLine = in.readLine()) != null)
               System.out.println(inputLine);
          in.close();
     }Here when i run the program with arg https://www.verisign.com it works fine, when i replace it with https://locahost it shows the follwing error
Exception in thread "main" java.io.IOException: HTTPS hostname wrong: should be <localhost>
     at sun.net.www.protocol.https.HttpsClient.checkURLSpoofing(HttpsClient.java:493)
     at sun.net.www.protocol.https.HttpsClient.afterConnect(HttpsClient.java:418)
     at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(AbstractDelegateHttpsURLConnection.java:170)
     at sun.net.www.protocol.http.HttpURLConnection.getInputStream(HttpURLConnection.java:913)
     at sun.net.www.protocol.https.HttpsURLConnectionImpl.getInputStream(HttpsURLConnectionImpl.java:234)
     at java.net.URL.openStream(URL.java:1007)
     at URLReader.main(URLReader.java:93)i dono why this happening any can pls help me out to solve the problem

HI all ,
I find a solution from the post
http://forum.java.sun.com/thread.jspa?threadID=521779&start=0
Thanks

Similar Messages

Using SSL from EJB to non-WLS web server

I have a need for an EJB that I am writing (for WLS 6.0) to communicate with
another web server via SSL. The other web server requires that I pass a Client
Certificate to authenticate myself. The remote web server is NOT a WebLogic
server. I see no references in the Bea documentation to how to achieve this.
I have tried to create a new URL with "https://...". I call openConnection() on
the URL instance, and my EJB gets back an instance of
weblogic.net.http.HttpsURLConnection. This class doesn't appear to be
documented. Does anybody have any ideas how I can use this class to pass my
Client key and Cert chain?
When I tried to use the URLConnection class returned, it threw an exception when
I tried to open a stream. The stack trace shows lots of classes that lead me to
believe that support exists for this functionality. Here is a snippet from the
stack dump:
java.net.SocketException: Connection aborted by peer: socket write error
at java.net.SocketOutputStream.socketWrite(Native Method)
at java.net.SocketOutputStream.write(SocketOutputStream.java:83)
at
java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:72)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:130)
at weblogic.security.SSL.SSLSocket.sendRecord(SSLSocket.java:964)
at
weblogic.security.SSL.SSLSocket.sendChangeCipherSpec(SSLSocket.java:926)
at weblogic.security.SSL.SSLSocket.clientInit(SSLSocket.java:477)
at weblogic.security.SSL.SSLSocket.initialize(SSLSocket.java:245)
at weblogic.security.SSL.SSLSocket.<init>(SSLSocket.java:194)
at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:45)
at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:156)
at weblogic.net.http.HttpClient.<init>(HttpClient.java:85)
at weblogic.net.http.HttpsClient.<init>(HttpsClient.java:34)
at weblogic.net.http.HttpClient.New(HttpClient.java:119)
at
weblogic.net.http.HttpURLConnection.connect(HttpURLConnection.java:99)
at
weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:146)
The only documentation I have found is under the 5.1 docs, referencing how you
can use the JNDI Environment to establish a connection to a remote WLS JNDI
tree. If URLs are a resource that can be pooled by WLS, I would like to take
advantage of that functionality. Otherwise, I will have to fall back to the
primitives and roll my own SSLSocket classes. I would expect that there is
support buried somewhere in the product, it is just a question of figuring out
how to use it.
Thanks for any and all suggestions!
Joe

Joe,
Apparently weblogic.net.http.HttpsURLConnection isn't documented although 6.0SP2 has a new example called examples/security/sslclient that shows how to use it.
Paul
On Fri, 27 Jul 2001 00:47:17 GMT, [email protected] (Joe Rider) wrote:
I have a need for an EJB that I am writing (for WLS 6.0) to communicate with
another web server via SSL. The other web server requires that I pass a Client
Certificate to authenticate myself. The remote web server is NOT a WebLogic
server. I see no references in the Bea documentation to how to achieve this.
I have tried to create a new URL with "https://...". I call openConnection() on
the URL instance, and my EJB gets back an instance of
weblogic.net.http.HttpsURLConnection. This class doesn't appear to be
documented. Does anybody have any ideas how I can use this class to pass my
Client key and Cert chain?
When I tried to use the URLConnection class returned, it threw an exception when
I tried to open a stream. The stack trace shows lots of classes that lead me to
believe that support exists for this functionality. Here is a snippet from the
stack dump:
java.net.SocketException: Connection aborted by peer: socket write error
at java.net.SocketOutputStream.socketWrite(Native Method)
at java.net.SocketOutputStream.write(SocketOutputStream.java:83)
at
java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:72)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:130)
at weblogic.security.SSL.SSLSocket.sendRecord(SSLSocket.java:964)
at
weblogic.security.SSL.SSLSocket.sendChangeCipherSpec(SSLSocket.java:926)
at weblogic.security.SSL.SSLSocket.clientInit(SSLSocket.java:477)
at weblogic.security.SSL.SSLSocket.initialize(SSLSocket.java:245)
at weblogic.security.SSL.SSLSocket.<init>(SSLSocket.java:194)
at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:45)
at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:156)
at weblogic.net.http.HttpClient.<init>(HttpClient.java:85)
at weblogic.net.http.HttpsClient.<init>(HttpsClient.java:34)
at weblogic.net.http.HttpClient.New(HttpClient.java:119)
at
weblogic.net.http.HttpURLConnection.connect(HttpURLConnection.java:99)
at
weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:146)
The only documentation I have found is under the 5.1 docs, referencing how you
can use the JNDI Environment to establish a connection to a remote WLS JNDI
tree. If URLs are a resource that can be pooled by WLS, I would like to take
advantage of that functionality. Otherwise, I will have to fall back to the
primitives and roll my own SSLSocket classes. I would expect that there is
support buried somewhere in the product, it is just a question of figuring out
how to use it.
Thanks for any and all suggestions!
Joe

Can I use forms Central forms on my own web server.

Or does it have to be business catalyst?

FormsCentral is a cloud service and the forms are hosted on our web servers. However, you can embed our forms on your website using the embed code we provide.
Also, FormsCentral is not related to Business Catalyst.
Randy

Some RST are seen during TCP disconnection when using SSL connection

Some RST are seen during TCP disconnection when using SSL connection
It is expected that the disconnection sequence for a secure connection to be as follow:
client ************************* server
--- alert (warning, close notify) --->
<--- alert (warning, close notify) ---
in any order;
and then:-
--------------- FIN, ACK ------------>
<----------- FIN, ACK ---------------
------------------ ACK ----------------->
Instead of the sequence described above, the TCP connection for a secure connection is closed with an RST.
For instance, Wireshark capture shows that an SSL+SASL TCP connection is closed in the following manner:
client ************************** server
--- alert (warning, close notify) ---->
---------------- FIN, ACK ------------>
<--- alert (warning, close notify) ---
<----------- FIN, ACK ---------------------
------------ RST -----------------> *(This RST message should be investigated, an ACK message was expected)*
Server: OpenLDAP: slapd 2.4.23
Client: (java version "1.6.0_16")
import javax.naming.*;
import javax.naming.directory.*;
import javax.naming.ldap.InitialLdapContext;
import java.util.Hashtable;
import javax.naming.ldap.InitialLdapContext;
import javax.naming.ldap.StartTlsRequest;
import javax.naming.ldap.StartTlsResponse;
class Client {
private static final String DEFAULT_INITIAL_CONTEXT_FACTORY = "com.sun.jndi.ldap.LdapCtxFactory";
public static void main(String[] args) {
//SSL
try {
System.setProperty("javax.net.ssl.keyStore", "c:\\\keystore");
System.setProperty("javax.net.ssl.keyStorePassword", "adminadmin");
System.setProperty("javax.net.ssl.trustStore","c:\\\keystore");
System.setProperty("javax.net.ssl.trustStorePassword","adminadmin");
// Set up environment for creating initial context
Hashtable env = new Hashtable(11);
env.put(Context.INITIAL_CONTEXT_FACTORY, "com.sun.jndi.ldap.LdapCtxFactory");
// Must use the name of the server that is found in its certificate
env.put(Context.PROVIDER_URL, "ldap://1.2.4.4:16415");
env.put(Context.SECURITY_AUTHENTICATION, "simple");
env.put(Context.SECURITY_PRINCIPAL, "cn=manager,dc=operator,dc=com");
env.put(Context.SECURITY_CREDENTIALS, "password");
env.put(Context.SECURITY_PROTOCOL, "ssl");
// Create initial context
InitialLdapContext ctx = new InitialLdapContext(env, null);
// Close the context when we're done
ctx.close();
catch(Exception e)
e.printStackTrace();
Is it a bug ? Can I expect to have a patch for this issue?
Regards,
Olivier
Edited by: 975464 on 6-Dec-2012 11:21 AM

I agree it should be an ACK not an RST but it doesn't really matter. The connection is closed, and as neither the client nor the server has any pending data it is benign. Worth investigating in a later JRE.

I got problem on installing iTunes. When I clicked iTunes out, two windows popped out. One said the procedure entry point CFAttributed String Create Mutable could not be located in the dynamic link library Core Foundation.dll.

I got problem on installing iTunes. When I clicked iTunes out, two windows popped out. One said the procedure entry point CFAttributed String Create Mutable could not be located in the dynamic link library Core Foundation.dll. and one just said *Itunes was not installed correctly. Please re install I Tunes Error 7 (windows error 127) . I've tried uninstalling and reinstalling it. But either way cant work. I really need some of your help! PLS HELP ME!

For general advice see Troubleshooting issues with iTunes for Windows updates.
The error shares a similar pattern to that in the third box, so a similar approach should work. Look for CoreFoundation.dll in C:\Program Files (x86)\Common Files\Apple\Apple Application Support, delete it, then repair Apple Application Support.
The steps in the second box are a guide to removing everything related to iTunes and then rebuilding it which is often a good starting point unless the symptoms indicate a more specific approach. Review the other boxes and the list of support documents further down page in case one of them applies.
Your library should be unaffected by these steps but there is backup and recovery advice elsewhere in the user tip.
tt2

Hello I have an Iphone 3, but I had a problem with the wifi connection when I want to connect the wifi icon is gray and I can choose to access the wifi

hello
I have an Iphone 3, but I had a problem with the wifi connection when I want to connect the wifi icon is gray and I can choose to access the wifi

Read here:
http://support.apple.com/kb/ts1559
If nothing works, you most likely have a hardware issue.

My animate file seems to work fine locally, but the images aren't linked properly when I publish and post them to a web server.

I have an HTML5 animation that I am working on. When I preview it locally, it seems to work fine, but when I publish and post it on our web server, it doesn't seem to be able to find the images. The images are all in the images folder and it all seems to be pointing the right location, but it isn't showing up properly on the web server.
If anyone has any insight, I would greatly appreciate it.

The site runs fine offline. If I am watching it locally, it seems to be OK. The problem only occurs when I copy all of the content to the host. I have also checked to be sure that the images are in the correct folder and uploaded.
Here is one of the images that is definitely live, but is showing as unlinked/missing in the HTML5 version.
https://apps.treca.org/creative/ODE/70%20-%20Misc/images/ODE-Logo.svg
Also, here is the URL of the site for review
https://apps.treca.org/creative/ODE/70%20-%20Misc/ODE-VA-App.html

Signed applet using ssl connection Problem!

Hi all.
The problem is that when I sign my applet and try to connect trough SSL the IAIK throughs ClassCastException when trying to load the client certificate.
1. I added client certificate ( DER format ) to the applet jar.
2. I signed an applet with another certificate so it whould have all permissions.
3. My applet tried to create SSL connection and failed throwing
java.lang.ClassCastException: iaik.asn1.structures.Name

I have found a solution for a similar problem. Check out http://java.sun.com/j2se/1.4.1/docs/guide/security/jsse/JSSERefGuide.html#Troubleshooting

Which data flow source type to use when specifying a connection manager using an ODBC provider

I'm trying to create a SSIS package to connect to an IBM iSeries DB2 database. After running into all sorts of issues seemingly related to data type (issues with packed decimal fields actually having places to the right of the decimal) I decided to
try creating an ODBC data source on my windows server 2008 r2 Administrative Tools - Data Sources ODBC to connect to the iSeries and then create an SSIS connection manager to use the windows ODBC connection. Successfully created the ODBC connection in
windows then successfully added a SSIS connection manger to my project using the windows ODBC connection and tested the connection manager successfully. To create the connection manager I RMB in the connection manager section - select new connection
- select ODBC - select the newly created ODBC connection from the list and operate the ok button. Edited the connection manager specified the userid and pw and connected succcessfully.
Problem is I don't seem to be able to find a Data Flow Source in the SSIS tool box that will let me specify the connection manager using the ODBC connection. The Data Flow Sources in my tool box are "Pointer", "ADO NET Source",
"Excel Source", "Flat File Source", "OLE DB Source", "Raw File Source" and "XML Source".
Can someone kindly show me what Data Flow Source I should be using and how to specify my SSIS connection manager that uses the windows ODBC connection?
Thanks Much in advance for any help, Roscoe

This would help you
http://social.msdn.microsoft.com/Forums/en-US/c688b646-28bb-44b9-b53b-fddf23e15189/how-to-connect-to-odbc-using-ssis?forum=sqlintegrationservices
Abhinav http://bishtabhinav.wordpress.com/

Cannot download a file with internet explorer 6 using SSL connection

Hello,
I am working on a application that uses SSL. But when the clicks a button to donwload a file using IE 6 or IE 7, internet explorer shows a error message saying that "The internet explorer cannot open this site". This error dont occur in Firefox, but i have to use Internet Explorer. And the error occurs only if i use https, with http it works fine.
I search the net and i found that internet explorer has a bug, that when the server sends the http header "Pragma: no-cache" or "Cache-control: no-cache,max-age=0,must-revalidate", then the internet explorer doesnt cache the file, and i cannot open it. See here: http://support.microsoft.com/kb/316431/en-us
My problem is that OC4J appears to send this headers automatically. I am using Oracle Enterprise Manager 10g Application Server Control 10.1.3.3.0. Here, is my code to send the file:
HttpServletResponse response = (HttpServletResponse)
FacesContext.getCurrentInstance().getExternalContext().getResponse();
response.setContentType("application/x-download");
response.setHeader("Content-Disposition", "attachement; filename=\"file.pfx\"");
response.setContentLength((new Long(myFile.length())).intValue());
OutputStream out=null;
try {
out = response.getOutputStream();
fis = new FileInputStream(myFile);
int n;
while ((n = fis.available())> 0) {
b = new byte[n];
int result = fis.read(b);
out.write(b, 0, b.length);
if (result == -1) break;
out.flush();
out.close();
} catch (Exception e){
throw new DownloadException("Erro ao enviar arquivo para o stream de download.");
finally{
FacesContext.getCurrentInstance().responseComplete();
You can see that i not send that headers in this code.
Here, is the headers sent to IE when i use https.
HTTP/1.x 200 OK
Date: Wed, 07 May 2008 17:40:28 GMT
Server: Oracle-Application-Server-10g/10.1.2.0.2 Oracle-HTTP-Server
Pragma: no-cache
Cache-Control: no-store
Surrogate-Control: no-store
Expires: Thu, 01 Jan 1970 12:00:00 GMT
Content-Length: 5208
Set-Cookie: JSESSIONID=ac1002292008f788e14d0d6e40c29f3185f2fc72e5b9.e3eTb3mTb3yKe34SbhqOaxyTe6fznA5Pp7ftnR9Jrl0; path=/actcers; secure
content-disposition: attachement; filename="file.pfx"
Keep-Alive: timeout=15, max=74
Connection: Keep-Alive
Content-Type: application/x-download
I hope that someone can helpme.
Tanks
Message was edited by:
user635088

Hi!
I don't have a solution fou you, just a few ideas =)
You can check what headers response contains with
response.containsHeader( "your_header_here");
http://java.sun.com/j2ee/sdk_1.2.1/techdocs/api/javax/servlet/http/HttpServletResponse.html#containsHeader(java.lang.String)
after that you could set/overwrite those headers that you don't like with, for example:
response.setHeader("Cache-control", "no-cache,max-age=0,must-revalidate");
Aparently Pragma and Cache-control headers should be used in pair, as noted here
http://curl.haxx.se/mail/archive-2005-12/0003.html
quote:"The author of Bad Behavior points out that RFC2616 requires that a
Pragma: header to be accompanied by a Cache-Control: header. From what I
see, it only says "SHOULD" (in section 14.32), but that is still a
strong recommendation and something to be considered, IMHO."
I'm a bit sceptical about you needing to cache the file, but if you feel strong about it, you could read this
http://www.mnot.net/cache_docs/#META
If you're working on SSL there is supposed to be some kind of validation, certificate or something like that. IE6 and 7 both have strong security measures in these regards. Maybe you should look something up in that direction.
Hope I helped.

Could not initiate SSL connection when DS is launched from Eclipse

Hello,
I am wondering whether anyone has faced this issue connecting to the BIP with https when Design Studio is launched from the Eclipse IDE.
The URL is something like : https://myservername.domain.net/dswsbobje/services/Session
We get the following error message when entering the URL : "Could not initiate SSL connection. Check the Web Service Url"
However, when Design Studio is launched directly, the same URL works fine and we can connect to the BIP normally.
I would imagine something is missing in the Eclipse configuration or there is an issue elsewhere. I did not find anything relevant in the SDK guide.
We checked the following SAP notes :
1807142 - How to enable HTTPS/SSL Designer against BIP
-> Web service configured properly, the URL works fine and it works when Design Studio is started without Eclipse
1975475 - Unable to select authentication method in BIP logon dialog of SAP Design Studio
Tried the solution : set to Direct. Tried to remove proxy entries in IE. No improvement. Also, I tried to set the connectivity to Direct in the Eclipse. But, no luck.
Software :
Design Studio 1.2 SP01 + SDK 1.2 SP01
BI 4.0 SP06
Java EE IDE (Kepler) Version: 2.0.1.20130919-0803
Java JRE 1.6.0.35. It's old, I know...
Thanks in advance.
Joel

Hi Joel,
any progress?
do you use a self signed certficate?
Kind regards
Frank

HELP... problem establishing a secure connection when trying to get to Hotmail from browser

I have a Blackberry Curve. I could sign in to Hotmail fine up until the other day when I received the error message "problem establishing a secure connection". When I click details, it says untrusted certificate and unable to determine the certificate orgin. I contact my service provider Wind who were NO HELP at all. Someone, please help me!!???

Hi and Welcome to the Community!
Here is a KB that discusses that error:
Article ID: KB35687 Certificates issued by the GlobalSign Root CA show as untrusted
Hopefully it contains something useful! There also are multiple existing threads on this site that discuss that exact error...your review of those might prove useful, and a search of this site, using the error message, error code, or symptom, should reveal all applicable existing threads to you.
Good luck and let us know!
Occam's Razor nearly always applies when troubleshooting technology issues!
If anyone has been helpful to you, please show your appreciation by clicking the button inside of their post. Please click here and read, along with the threads to which it links, for helpful information to guide you as you proceed. I always recommend that you treat your BlackBerry like any other computing device, including using a regular backup schedule...click here for an article with instructions.
Join our BBM Channels
BSCF General Channel
PIN: C0001B7B4 Display/Scan Bar Code
Knowledge Base Updates
PIN: C0005A9AA Display/Scan Bar Code

Not able to connect with managed server using ssl connection

Hi Guys,
My weblogic server is running on linux. I have setup ssl connction bu using Demo Identity and Demo Trust.In server logs i can find the following infomation that server is running on secure port.
But once i try connect to managed server using client i m facing below error:
<May 27, 2013 2:55:00 PM IST> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<May 27, 2013 2:55:00 PM IST> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<May 27, 2013 2:55:00 PM IST> <Info> <Security> <BEA-090908> <Using default WebLogic SSL Hostname Verifier implementation.>
javax.naming.CommunicationException [Root exception is java.net.ConnectException: t3s://host:port: Destination unreachable; nested exception is:
     javax.net.ssl.SSLHandshakeException: General SSLEngine problem; No available router to destination]
     at weblogic.jndi.internal.ExceptionTranslator.toNamingException(ExceptionTranslator.java:40)
     at weblogic.jndi.WLInitialContextFactoryDelegate.toNamingException(WLInitialContextFactoryDelegate.java:767)
     at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:366)
     at weblogic.jndi.Environment.getContext(Environment.java:315)
     at weblogic.jndi.Environment.getContext(Environment.java:285)
     at weblogic.jndi.WLInitialContextFactory.getInitialContext(WLInitialContextFactory.java:117)
     at javax.naming.spi.NamingManager.getInitialContext(NamingManager.java:684)
     at javax.naming.InitialContext.getDefaultInitCtx(InitialContext.java:307)
     at javax.naming.InitialContext.init(InitialContext.java:242)
     at javax.naming.InitialContext.<init>(InitialContext.java:216)
     at com.akt.client.WLCLIENT.makeConnection(WLCLIENT.java:40)
     at com.akt.client.WLCLIENT.main(WLCLIENT.java:60)
Caused by: java.net.ConnectException: t3s://host:port: Destination unreachable; nested exception is:
     javax.net.ssl.SSLHandshakeException: General SSLEngine problem; No available router to destination
     at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:216)
     at weblogic.rjvm.RJVMFinder.findOrCreate(RJVMFinder.java:170)
     at weblogic.rjvm.ServerURL.findOrCreateRJVM(ServerURL.java:165)
     at weblogic.jndi.WLInitialContextFactoryDelegate$1.run(WLInitialContextFactoryDelegate.java:345)
     at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363)
     at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:146)
     at weblogic.jndi.WLInitialContextFactoryDelegate.getInitialContext(WLInitialContextFactoryDelegate.java:340)
     ... 9 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
     javax.net.ssl.SSLHandshakeException: General SSLEngine problem; No available router to destination
     at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:470)
     at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:321)
     at weblogic.rjvm.RJVMManager.findOrCreateRemoteInternal(RJVMManager.java:260)
     at weblogic.rjvm.RJVMManager.findOrCreate(RJVMManager.java:197)
     at weblogic.rjvm.RJVMFinder.findOrCreateRemoteServer(RJVMFinder.java:238)
     at weblogic.rjvm.RJVMFinder.findOrCreateInternal(RJVMFinder.java:200)
     ... 15 more
But in server logs i can see below message
opt/Oracle/Middleware/wlserver_12.1/server/lib/DemoIdentity.jks.>
<May 27, 2013 2:47:06 PM IST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /opt/Oracle/Middleware/wlserver_12.1/server/lib/DemoTrust.jks.>
<May 27, 2013 2:47:06 PM IST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the jks keystore file /opt/jdk1.7.0_21/jre/lib/security/cacerts.>
<May 27, 2013 2:47:06 PM IST> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on hostname:port for protocols iiops, t3s, ldaps, https.>
<May 27, 2013 2:47:06 PM IST> <Notice> <WebLogicServer> <BEA-000332> <Started the WebLogic Server Managed Server "Server-Test" for domain "base_domain" running in development mode.>
Please suggest
Edited by: 1008140 on May 27, 2013 2:37 AM

Welcome to OTN
This section related to Database question not fusion middle ware Post your question
Oracle Discussion Forums » Fusion Middleware

Web Proxy Server 3.6 with Administration Server using SSL connection

In your manual: Administrator�s Guide Sun� ONE Web Proxy Server Version 3.6 SP3 for UNIX you wrote:
You should also make the administrative connection a mandatory SSL connection
Instead of using http://servername:port_number
I need to use:
https://servername:port_number
How can I do that?
Thanx
Gian Mario

HI
To enable https for the admin,
Create a certifcate for the proxy admin
Next, From 'Admin Preferences', click on 'Encryption on/off'
From the 'Encryption on/off'; screen that appears, click on the 'on' radio button. Select the certficate from the alias list and click on OK to enable encryption for the cerficate you have installed for your admin server.
Now restart you admin server.
You wil now be able to connect to your admin using https
Thanks
Nagendra HK

Problems with an SSL connection

I'm trying to execute a Post request using HTTPS. To achieve that I'm using commons-httpclient v.3.0rc1 and a custom SSLSocketProtocolSocketFactory that can work with untrusted self-signed certificates.
My code works on Windows 2000 Pro, but it fails on Linux (Suse Linux 8.2). However I'm using JDK 1.4.2 both in Windows and LInux, with the same list of security providers set at $JAVA_HOME/jre/lib/security/java.security file.
I've heard about problems with security when upgrading form JDK 1.4.x to JDK 1.5, but it's not the case.
Any idea about this?
This is the exception I get when I run my code on Linux:
Caused by: javax.net.ssl.SSLKeyException: RSA premaster secret error
at com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(PreMasterSecret.java:86)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverHelloDone(ClientHandshaker.java:514)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:160)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:495)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:433)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:815)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1025)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.writeRecord(SSLSocketImpl.java:619)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:59)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at org.apache.commons.httpclient.HttpConnection.flushRequestOutputStream(HttpConnection.java:825)
at org.apache.commons.httpclient.HttpMethodBase.writeRequest(HttpMethodBase.java:1920)
at org.apache.commons.httpclient.HttpMethodBase.execute(HttpMethodBase.java:1002)
at org.apache.commons.httpclient.HttpMethodDirector.executeWithRetry(HttpMethodDirector.java:382)
at org.apache.commons.httpclient.HttpMethodDirector.executeMethod(HttpMethodDirector.java:168)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:393)
at org.apache.commons.httpclient.HttpClient.executeMethod(HttpClient.java:324)
at com.gd.define.orion.mailets.AbstractHttpMailet.send(AbstractHttpMailet.java:451)
... 6 more
Caused by: java.security.NoSuchAlgorithmException: Cannot find any provider supporting RSA/ECB/PKCS1Padding
at javax.crypto.Cipher.getInstance(DashoA12275)
at com.sun.net.ssl.internal.ssl.JsseJce.getCipher(JsseJce.java:90)
at com.sun.net.ssl.internal.ssl.RSACipher.<init>(RSACipher.java:35)
at com.sun.net.ssl.internal.ssl.RSACipher.getInstance(RSACipher.java:69)
at com.sun.net.ssl.internal.ssl.PreMasterSecret.<init>(PreMasterSecret.java:82)
... 24 more

I've read in other forums that server and client running on same machine can cause problems using SSL. Is that real? Could it happen even when server uses JDK 1.5 and client uses JDK 1.4.2? May JDK version conflicts appear?
Thanks in advance

Got problem when using SSL connection when using my own web server

Similar Messages

Maybe you are looking for