HELP - SSL Secure Server Issue (SSL_ERROR_NO_CYPHER_OVERLAP)

My attempts to enable SSL functionality on my app server has failed. When I hit the site from a browser using "https://servername", this error appears in the app server log:
[28/May/2003:11:19:55] SEVERE (11476): HTTP3068: Error receiving request from 10.147.82.44 (SSL_ERROR_NO_CYPHER_OVERLAP: no common encryption algorithm(s) with client)
I have already taken the following steps:
-generate request from web server
-obtain cert from CA
-install cert on web server
-create https listener on web server
-enable ssl on web server
-install CA cert on web browser
-lowered encryption level on app server (SSL2, SSL3 in addition to SSL3/TLS)
Anybody experience something similar? Any tips?

You can check the ssl and tls prefs on the about:config page.
If any ssl or tls pref is bold (user set) then right-click that pref and choose "Reset" to reset the pref to the default value.
Paste this regular expression in the Search bar at the top of the about:config page:
*/security.*ssl|security.*tls/
You can open the about:config page via the location/address bar.
You can accept the warning and click "I'll be careful" to continue.
*http://kb.mozillazine.org/about:config
You can also try to delete the cert8.db file in the Firefox profile folder to remove all intermediate certificates that Firefox automatically stores when you visit a web server.
You can use this button to go to the currently used Firefox profile folder:
*Help > Troubleshooting Information > Profile Directory: Open Containing Folder
*http://kb.mozillazine.org/Profile_folder_-_Firefox

Similar Messages

Need help on SQL server issues

Hello,
We have a table (example: tableA) with approximately 14 million records and many stored procedures uses this table for joins during retrieve on UI.
The data in this table will be populated through an SSIS package, once in every day. Actually, the SSIS package will populate another table (example: tableA_ETL) and then renames the table to the original name (example: from tableA_ETL to tableA and tableA
to tableA_ETL) so that it would not affect the end users during data populate.
Now the issue is that we are getting 'Invalid object name dbo.tableA' error while user try to retrieve on UI. We observed that this is happening when user does a retrieve operation through UI during the table rename (example from tableA_ETL to tableA).
Could anyone please suggest any solution for this?
Thanks
Rakesh

Richard.
What is use of FREEPROCCACHE ? is it really required. You should have also included in your answer the grave afteraffects of running this command. This would clear cache store for proc and proc might start taking longer time to execute.
The issue is simple here IMO its just the object change is not happening correctly or users are trying to access when change is happening
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it
My Technet Wiki Article
MVP

Help with Remote Server Issue

My company recently had an outside company create a homepage
for us and it was turned over to me to create the rest of the
pages. I am new at Dreamweaver and just can't figure out how to fix
this problem. The woman who created the site for us has not been
able to help me, either.
Here is the problem:
When I access the file "index.html" that she created in the
"Files" panel and open it in Dreamweaver, it looks perfect, but
when I hit F12 to view in IE, I lose all of the text in my column
on the left. It seems to be an issue of images or something... we
are not currently live with her hosting yet. Can I just continue to
create pages and hope it will be okay once we go live?
Any help would be appreciated.
Laura

Can't help much without seeing the code.
Can you upload somewhere and post a link?
Or at least post the entire page code.
I am guessing it is an IE only problem having to do with the
widths of your
DIV's not fitting in the container
IE counts differently than let's say Firefox.
"LauraK77" <[email protected]> wrote in
message
news:g7htac$1jp$[email protected]..
> My company recently had an outside company create a
homepage for us and it
> was
> turned over to me to create the rest of the pages. I am
new at
> Dreamweaver and
> just can't figure out how to fix this problem. The woman
who created the
> site
> for us has not been able to help me, either.
>
> Here is the problem:
> When I access the file "index.html" that she created in
the "Files" panel
> and
> open it in Dreamweaver, it looks perfect, but when I hit
F12 to view in
> IE, I
> lose all of the text in my column on the left. It seems
to be an issue of
> images or something... we are not currently live with
her hosting yet.
> Can I
> just continue to create pages and hope it will be okay
once we go live?
>
> Any help would be appreciated.
> Laura
>

Fresh EnterPrise One 9.0 (@MSSQL) installation and security server error

Hello!
I've managed to complete Standalone installation without any issues (Win XP SP2 EN) but I have encountered a problem with first login. After entering the password I'm receiving following message: "waiting for security server" and then: "unable to locate security server". Final one says: "failed to communicate with security server: unable to locate security server" and that's it. I can't log in. I've noticed few things:
jdenet_n.exe is not being started with the system startup - I'm running it manually
I can see it's working on correct port (6012 as entered in JDBJ.ini)
Data Sources seems to be configured fine. I've just switched all words '(local)' and 'localhost' to my PC name in Data Source server name, JDE.ini and JDBJ.ini (at all locations). Someone did advice this step if there are security server issues like mine - it didn't help.
I was following these steps in order to complete the installation, maybe it will help: http://e1tips.com/2011/11/03/jd-edwards-enterpriseone-9-0-standalone-installation/
I've run out of ideas and google is not able to help any more. Have you encountered it before? I will be grateful for any advice!
My best regards
Rafał
Edited by: 932762 on 2012-05-08 04:04

Yes all Oracle9iAS installs will have perl directory.
When you run emctl, please make sure Oracle_HOme variable is set properly
You are running the command as the user who installed Oracle9iAS
The restriction to bring down em during second installs will be addressed in the subsequent releases.
Regards
Pavna Jain
Oracle9iAS Product Management

Can't access SSL-secured web content from Remote Desktop Server

I am running RDS on Windows Server 2008R2. No Remote App or Gateway Services, just straight up Remote Desktop.
After making a RDP connection to the server, when trying to access any SSL-secured website, Internet Explorer displays the error "Internet Explorer cannot display the webpage" with a button labeled "Diagnose Connection Problems." It's the same generic
IE message that appears when DNS lookups fail. This failure to make SSL connections also manifests itself with Exchange autodiscover not working.
Strangely enough, Administrator is able to make SSL connections just fine, just not any other users. The server is otherwise completely functional.

Hi cyborganic,
To narrow down this issue, Would you like to confirm the following questions:
1.
Does this issue exist when accessing all secured web sites or just some of them? Please try to access
https://www.microsoft.com.
Does it work?
2.
Does this issue exist when a user logs on to the console of the problematic server and then access a secure web site? In this way, we can isolate whether the problem is related
to RDS.
3.
You mentioned that administrator can access properly. As a test, can a problematic user be able to access the SSL site properly if you add him/her to the Administrators group
temporarily?
Meanwhile, Please help to make sure the “Cryptographic services” is set to Automatic Start.
Here, There are some suggestions for
General troubleshooting
Suggestion #1:
=====================================================================
Run the Network Diagnostics tool in Internet Explorer
To do this, follow these steps:
1.
Start Internet Explorer, and then try to access the Web page that is displaying the error message.
2.
On the page that displays an Internet Explorer error message, click the
Diagnose Connection Problems link. The Network Diagnostics tool will run. When the tool has finished running, it will report one of the following results:
o
It was unable to find a problem.
o
It has detected a problem. Additionally, the tool will provide guidance about the next steps to take to troubleshoot the problem.
Note
Internet Explorer 6 users click Detect Network Settings
3.
Click
IP Address, and note the IP Address. You may need it for future troubleshooting.
4.
Follow the steps in the Network Diagnostics tool to fix any connection problems.
5.
Start Internet Explorer.
If you receive the same error message, go to the next method.
Suggestion #2:
=====================================================================
Use the Delete Browsing History feature
If resetting the modem or the router did not resolve the problem, deleting your browsing history might help. Follow
these steps to remove your temporary Internet files, history, and form data:
Internet Explorer 8
1.
Start Internet Explorer.
2.
On the
Tools menu, click Internet Options.
3.
Under
Browsing history, click Delete.
4.
Select the check box next to
Preserve Favorites website data.
5.
Select the check box next to
Temporary Internet Files.
6.
Select the check box next to
Cookies.
7.
Select the check box next to
History.
8.
Select the check box next to
Form data.
9.
Select the check box next to
InPrivate Filtering data.
10.
At the bottom of window, click
Delete.
11.
Close Internet Explorer, start Internet Explorer again, and then try to access the Web page.
Suggestion #3:
=====================================================================
Use the Internet Explorer (No Add-ons) mode
To do this, click
Start, point to All Programs, point to
Accessories, point to System Tools, and then click
Internet Explorer (No Add-ons).
Note Internet Explorer (No Add-ons) mode is only available for Internet Explorer 7 and Internet Explorer 8.
If this resolves the issue, follow these steps to isolate the browser add-on that is causing the issue:
1.
Click
Tools, and then click Internet Options.
2.
Click the
Programs tab, and then click Manage add-ons.
3.
Click an add-on in the
Name list, and then click Disable.
4.
Repeat step 3 until you identify the add-on that is causing the issue.
If this issue still persists, Pls refer to the following link for
Advanced troubleshooting
You receive an error message in Internet Explorer: "Internet Explorer cannot display the webpage”
http://support.microsoft.com/kb/956196

SSL & Document Security Server

Hi -
Previously I had successfully implemented a solution to allow me to apply a policy to a PDF remotely. I did this by creating an EJB to interact with the Document Security server. The EJB takes a byte[] as input (which is the unprotected PDF) and returns a byte[] as output (which is the protected PDF). This was working well.
I've now implemented SSL on JBoss/Document Security server and although the certificate seems fine, the application no longer works. At the point where it's writing the data back to the client the following error is presented within the server.log file:
2006-10-17 14:18:54,973 INFO [STDOUT] omniORB: From endpoint: giop:tcp:192.168.1.103:3528. Detected GIOP 1.2 protocol error in input message. Connection is
closed.
2006-10-17 14:18:55,116 INFO [STDOUT] omniORB: From endpoint: giop:tcp:192.168.1.103:3528. Detected GIOP 1.2 protocol error in input message. Connection is
closed.
2006-10-17 14:18:55,137 ERROR [com.adobe.document.PDFManipulation] Service PDFManipulation: Native process (PID=0) /opt/semantico/slot/Adobe/1/LiveCycle_7.0.
2/PolicyServer/jboss-3.2.5/server/all/svcnative/PDFManipulation/bin/PDFManipulation.exe terminated abnormally with error code 1
2006-10-17 14:18:55,140 INFO [com.adobe.service.logging.Logger] $$$/server/service/logging/msg.LogSvcInit=Logger com.adobe.service.logging.Logger initialize
d
The system doesn't actually seem to terminate as my client just sits there waiting for a response that doesn't seem to come.
Has anyone seen this before? Have I done something wrong when implementing the certificate? Is it unrelated to the SSL work that I've been doing?
I'm really confused and can't seem to find any forum topics addressing this issue so am very stuck. If anyone could offer any ideas as to how to solve this issue I'd be most grateful.
The steps I took to implement SSL were:
- generated a new certificate
- generated a CSR to get signed by a trusted authority
- added the signed certificate into my java environment
- performed an 'expert' installation of document security server to incorporate the new certificate (I had to do this as configtool doesn't seem to work on my machine)
- added the certificate to the JBoss installation & configured JBoss
If anyone could help me with this I'd be very grateful.
Anil.

Hi Steve (and anyone that can help!) - I've installed my SSL certificate onto JBoss etc, and when I go to: https://<machine>:8433/edc/Main.do I see the certificate and it is trusted etc. The certificate appears fine. But when I run my application to apply a policy to a PDF (which works without the SSL connection) I get a problem being displayed in the server.log file. It initially says it has a problem retrieving the trust info (I assume that it's related) and then when it tries to do the work I get an SSLHandshakeException. javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure vmcid: 0x0 minor code: 0 completed: No at org.jacorb.orb.iiop.IIOPConnection.to_COMM_FAILURE I'm confused as to why the certificate seems fine for the browser but there is a problem with the system communicating internally in order to apply the policy to the document. ------------- 2006-11-03 16:09:21,409 WARN [com.adobe.document.PDFManipulation] problem retrieving trust info, security functions will not work 2006-11-03 16:09:21,422 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] New jmx UCL with url null 2006-11-03 16:09:21,422 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] setRepository, r=org.jboss.mx.loading.HeirarchicalLoaderRepository3@1944379, ucl=org.jboss.mx.loading.HeirarchicalLoaderRepository3$CacheClassLoader@1002a9d{ url=null ,addedOrder=0} 2006-11-03 16:09:21,422 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] New jmx UCL with url null 2006-11-03 16:09:21,422 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] setRepository, r=org.jboss.mx.loading.HeirarchicalLoaderRepository3@1944379, ucl=org.jboss.mx.loading.UnifiedClassLoader3@71edc8{ url=null ,addedOrder=0} 2006-11-03 16:09:21,432 INFO [com.adobe.document.PDFManipulation] @@@ Starting PDFManipulation Services @@@ 2006-11-03 16:09:21,434 DEBUG [com.adobe.document.PDFManipulation] Service PDFManipulation: Signal READY received 2006-11-03 16:09:21,435 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] New jmx UCL with url null 2006-11-03 16:09:21,435 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] setRepository, r=org.jboss.mx.loading.HeirarchicalLoaderRepository3@1944379, ucl=org.jboss.mx.loading.HeirarchicalLoaderRepository3$CacheClassLoader@1c4ecb7{ url=null ,addedOrder=0} 2006-11-03 16:09:21,435 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] New jmx UCL with url null 2006-11-03 16:09:21,435 DEBUG [org.jboss.mx.loading.UnifiedClassLoader] setRepository, r=org.jboss.mx.loading.HeirarchicalLoaderRepository3@1944379, ucl=org.jboss.mx.loading.UnifiedClassLoader3@7c0754{ url=null ,addedOrder=0} 2006-11-03 16:09:21,490 INFO [com.adobe.document.PDFManipulation] Service PDFManipulation: Exception while allocating a connection. 2006-11-03 16:09:21,494 INFO [com.adobe.document.PDFManipulation] org.omg.CORBA.COMM_FAILURE: IOException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure vmcid: 0x0 minor code: 0 completed: No org.omg.CORBA.COMM_FAILURE: IOException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure vmcid: 0x0 minor code: 0 completed: No at org.jacorb.orb.iiop.IIOPConnection.to_COMM_FAILURE(Unknown Source) at org.jacorb.orb.iiop.IIOPConnection.flush(Unknown Source) at org.jacorb.orb.giop.GIOPConnection.sendMessage(Unknown Source) at org.jacorb.orb.giop.GIOPConnection.sendRequest(Unknown Source) at org.jacorb.orb.giop.ClientConnection.sendRequest(Unknown Source) at org.jacorb.orb.giop.ClientConnection.sendRequest(Unknown Source) at org.jacorb.orb.Delegate.invoke_internal(Unknown Source) at org.jacorb.orb.Delegate.invoke(Unknown Source) at org.omg.CORBA.portable.ObjectImpl._invoke(ObjectImpl.java:457) at com.adobe.service._ControlAgentStub.newRequestHandler(_ControlAgentStub.java:23) at com.adobe.service.ProcessResource.allocateConnection(ProcessResource.java:561) at com.adobe.service.ConnectionResource.getConnection(ConnectionResource.java:39) at com.adobe.service.J2EEConnectionFactoryManagerPeerImpl.getConnection(J2EEConnectionFactor yManagerPeerImpl.java:106) at com.semantico.depp.drm.documentsecurity.server.PolicyApplicationBean.applyPolicy(Unknown Source) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25) at java.lang.reflect.Method.invoke(Method.java:324) at org.jboss.ejb.StatelessSessionContainer$ContainerInterceptor.invoke(StatelessSessionConta iner.java:683) at org.jboss.resource.connectionmanager.CachedConnectionInterceptor.invoke(CachedConnectionI nterceptor.java:185) at org.jboss.ejb.plugins.AbstractTxInterceptor.invokeNext(AbstractTxInterceptor.java:84) at org.jboss.ejb.plugins.AbstractTxInterceptorBMT.invokeNext(AbstractTxInterceptorBMT.java:1 44) at org.jboss.ejb.plugins.TxInterceptorBMT.invoke(TxInterceptorBMT.java:62) at org.jboss.ejb.plugins.StatelessSessionInstanceInterceptor.invoke(StatelessSessionInstance Interceptor.java:72) at org.jboss.ejb.plugins.SecurityInterceptor.invoke(SecurityInterceptor.java:120) at org.jboss.ejb.plugins.LogInterceptor.invoke(LogInterceptor.java:191) at org.jboss.ejb.plugins.ProxyFactoryFinderInterceptor.invoke(ProxyFactoryFinderInterceptor. java:122) at org.jboss.ejb.StatelessSessionContainer.internalInvoke(StatelessSessionContainer.java:331 ) -------------- Can anyone shed any light on what's going on here? I've configured my system as documented by a few people but I don't seem to be able to get it working. Many thanks, Anil.

HT201210 (The iPhone "Named" cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable.) can anyone help me with this issue, every time i try to restore it will come up like this error m

(The iPhone "Named" cannot be restored at this time because the iPhone software update server could not be contacted or is temporarily unavailable.)
can anyone help me with this issue, every time i try to restore it will come up like this error message.

Restore the iPhone when connected to iTunes by cable.
Still the same TS1275?
Is your iPhone jailbroken?
Or
Has your computer ever been used to jailbrake or downgrade (Tinyumbrella) any iPhone?

Advanced Security Server /Entrust-enabled SSL

We are expermenting to configure Advanced Security Server to work with Entrust. I had a quick look on Oracle 9i Advanced Security Server /Administrators Guide, and found a lot more detailed instructions about configuring Entrust-enabled SSL.. In addition, there are samples of how sqlnet.ora will look like. The question: Can we use 9i manual to configure Entrust-enabled SSL for Oracle 817? If we can't use the 9i manual, is there any addendum document to the Chapter 10-Enabling Entrust
Authentication in Oracle8i Advanced Security Administrators Guide, other than CR #281745 ....
null

Hi Justin,
The Visual Basic application software uses Oracle OLEDB Provider 9.2.0.7.0
We use various classes available in OLEDB for acessing the database. For example, the connection string looks like the following:
Provider=oraoledb.oracle; data source=oraserve; user id=myuserid; password=mypasswd;
The application uses ADODB objects to access data.
Hope this clarifies
Regards,
SAM

HT5808 I have an original iPad and there have been no recent iOS updates for it. Am I vulnerable to the recent SSL security issues? Is my iPad safe to use?

I have the original iPad. There have been no recent ios updates for it. Is the SSL security issue a problem? Is my iPad safe to use?

You are OK. The fix is not necessary in iOS 5.1.1.

HT4009 i forget security questions to buy long man dictionary so please help me in this issue

dear all :
i downloaded longman dictioanry and when i tried to activate in apps to get full version asking me for apple security qoutions that i forget them so please help me in this issue. thx

Contact Apple ID support https://www.apple.com//support/appleid/contact/

Help!Electronic noises,server issues,console messages,ethernet -PowerPC G4

I've been searching the internet as well as the Console and Activity Monitor for answers to this scenario, and it looks as though there is some kind of relationship between recent strange sounds I have been hearing over my speakers and server issues (my IP? Apple servers? spyware? )
Immediately below, are some of the log messages I have copied (for terminology examples).
Below them will be the description of the sounds I've been hearing, and potentially related details.
The first of the log examples documents something that happened when no one was home to use the computer. The second describes some kind of process that might be suspicious. The third describes what is happening a lot lately, and it seems to correspond with the sounds I referred to as well as with simultaneous increases in network activity shown on the Activity Monitor
Apr 8 14:01:13 Macintosh kernel[0]: System Sleep
Apr 8 14:01:13 Macintosh mDNSResponder: Couldn't read user-specified Computer Name; using default “Macintosh-000000000000” instead
Apr 8 14:01:13 Macintosh kernel[0]: System Wake
Apr 8 14:01:13 Macintosh kernel[0]: Wake event 0020
Apr 8 14:01:14 Macintosh configd[65]: posting notification com.apple.system.config.network_change
Apr 8 14:01:16 Macintosh kernel[0]: USB caused wake event (EHCI)
Apr 8 14:01:16 Macintosh mDNSResponder: Couldn't read user-specified Computer Name; using default “Macintosh-00112474A206” instead
Apr 8 14:01:17 Macintosh kernel[0]: UniNEnet::monitorLinkStatus - Link is up at 100 Mbps - Full Duplex
Mac OS X Version 10.4.11 (Build 8S165)
2009-04-09 23:06:12 -0400
2009-04-09 23:06:18.315 HPEventHandler[216]: DebugAssert: Third Party Client: (NULL != m_lock && 0 == errno) Can't create semaphore lock[/Volumes/Development(Build System)/HP/Mac-Fontana/mac-software/components/HPEventHandler/Sources/Core/HPTM NotificationManager.cpp:62]
2009-04-09 23:06:25.995 SystemUIServer[207] lang is:en
Will Power On (Wake) Notification occurred.
2009-04-09 11:21:49 EDT - Network transition occurred.
2009-04-09 11:21:49 EDT - Network transition occurred.
2009-04-09 11:21:49 EDT - Network transition occurred.
2009-04-09 11:21:55 EDT - Network transition occurred.
2009-04-09 11:21:55 EDT - Network transition occurred.
2009-04-09 11:21:55 EDT - Network transition occurred.
2009-04-09 12:01:12 EDT - Sleep Notification occurred.
I have recently been getting both a tapping and a buzzing sound through my speakers. Both kinds of sounds come together, intermittently and repeatedly, and each time, the volume rises, peaks, and fades away again (or stays faint until it starts to rise again). Today, once, there was a squeal-ish sound (not like a fax) as well, paralleling the other sound. These episodes vary in duration.
The Activity Monitor has shown increases in the Network window when these sounds have occurred, but I don't remember whether the greater increases were incoming or outgoing--I think, incoming.
When this first started happening, I was also seeing a lot of "Network Transition Occurred" messages in the log. Now I am seeing mostly "Macintosh mDNSResponder: Couldn't read user-specified Computer Name; using default "Macintosh-000000000000” (or “Macintosh-00112474A206)” instead" messages.
It all started happening after I uninstalled a trial version of ProtectMac (at the end of March), as well as set up a separate log-in for my grandson to use (major changes for the first time in years, which also caused me to lose a lot of things like bookmarks, saved music in iTunes, home movies in camera related software, pictures in iPhoto, etc...). Somewhere along the line I also lost iSync and just left it off.
Are these noises servers trying to communicate with my computer, which I somehow happen to be hearing as transmitted static/feedback/or signaling?
I have a 1.42 GHz PowerPC G4. I use a DSL, ethernet.
Thank you.

Hello,
Try these DNS numbers.
Try putting these numbers in Network/Advanced/DNS.
Add these numbers to DNS Servers
208.67.222.222
208.67.220.220
Click OK. These are safer/faster than most ISP's NDS numbers, and have been patched against DNS poisoning.
Go here to test DNS. https://www.dns-oarc.net/oarc/services/dnsentropy
Carolyn

SSL VPN Connection Issue

Having an Issue with an SSL VPN I can't seem to get past. Using Anyconnect software on PC or android phone I am not able to send any traffic thru the tunnel. The Client is able to authenticate beforehand successfully and assigns a private ip via the pool configured as its supposed to but nothing there. I have listed the configuration below along with the debugs. I have omitted any public ip information. The debugs say there is any issue w/ an ACL but everything appears correct. Any help would be most appreciated.
*************Equipment/Software
Cisco 2851 Router Version 15.4(M9) Software
anyconnect-win-3.1.07021-k9.pkg
*************Configuration
ip local pool webvpn1 172.16.100.80 172.16.100.90
ip forward-protocol nd
no ip http server
ip http secure-server
ip access-list extended webvpn-acl
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.60 eq telnet
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.70 eq telnet
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.8 eq telnet
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.8 eq 22
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.8 eq www
permit tcp 172.16.100.0 0.0.0.255 host 172.16.100.8 eq 443
webvpn gateway CCIELAB
hostname Porshe_GT3
ip interface GigabitEthernet0/0 port 443
http-redirect port 80
ssl trustpoint my-sslvpn-ca
inservice
webvpn install svc flash:/webvpn/anyconnect-win-3.1.07021-k9.pkg sequence 1
webvpn context CCIELab
title "Networking Lab"
ssl authenticate verify all
login-message "All Sessions are logged and monitored.Please be respectful and if any questions contact [email protected]"
policy group Labrats
functions svc-enabled
banner "Success, You Made It"
filter tunnel webvpn-acl
svc address-pool "webvpn1" netmask 255.255.255.0
svc keep-client-installed
svc rekey method new-tunnel
svc split include 172.16.100.0 255.255.255.0
default-group-policy Labrats
aaa authentication list webvpn
gateway CCIELAB
inservice
*********************Debugs
*May 2 09:12:50.601: [WV-TUNL-PAK]:[4BB44B08] TxServer, Forwarding the pak 4A2D3B94
*May 2 09:12:50.601: [WV-TUNL-PAK]: IP4 Len =60 Src =172.16.100.87 Dst =172.16.100.8 Prot =6
*May 2 09:12:50.601: [WV-TUNL-PAK]:TCP sport=53571, dport=2001, seq=4091902471 ack=0, bits=SYN
*May 2 09:12:50.601: [WV-TUNL-PAK]:[4BB44B08] TxServer, Pak 4A2D3B94 failed ACL webvpn-acl
*May 2 09:13:19.841: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, KeepAlive Detected. Dropped
*May 2 09:19:57.757: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, Recd DPD Req frame (User RemzRR, IP 172.16.100.87)
*May 2 09:19:57.757: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, Sending DPD Res frame (User RemzRR, IP 172.16.100.87)
*May 2 09:25:27.925: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, KeepAlive Detected. Dropped
*May 2 09:25:58.025: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, KeepAlive Detected. Dropped
*May 2 09:26:28.509: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, KeepAlive Detected. Dropped
*May 2 09:27:00.381: [WV-TUNL-EVT]:[4BB44B08] CSTP Control, KeepAlive Detected. Dropped
*********************Verification
Porshe_GT3#show webvpn policy group Labrats context all
WEBVPN: group policy = Labrats ; context = CCIELab
banner = "Success, You Made It"
idle timeout = 2100 sec
session timeout = Disabled
functions =
svc-enabled
citrix disabled
address pool name = "webvpn1"
netmask = 255.255.255.0
tunnel-mode filter = "webvpn-acl"
dpd client timeout = 300 sec
dpd gateway timeout = 300 sec
keepalive interval = 30 sec
SSLVPN Full Tunnel mtu size = 1406 bytes
keep sslvpn client installed = enabled
rekey interval = 3600 sec
rekey method = new-tunnel
lease duration = 43200 sec
split include = 172.16.100.0 255.255.255.0

The problem is related to either of these issues:
Maximum Transmission Unit (MTU)/Maximum Segment Size (MSS) size
Fragmentation policy during encryption
Perform a sniffer trace from the client to the server side in order to find out which is the best MTU to use.Continue to reduce the value of 1400 by 20 until there is a reply

Cannot connect to security server

Just installed 9.1standalone client. When I tried to launch JD Edwards 9.10 I got an error 'cannot connect to security server'. I have done all possible solutions as written on this site: http://docs.oracle.com/cd/E24902_01/doc.91/e22499/ch_startclient.htm#autoId2
but still it was not able to resolve my issue.
Anybody who can help me?

Hi Ryan,
Based on my research, the issue should occur due to a by design behavior in Threat Management Gateway (TMG). To work around this issue, you can use SSL between the TMG and the SharePoint Web Server.
Hope this helps.
Regards,
Mike Yin
TechNet Community Support

Will not allow me to add caldav account (Calendar couldn't log in to the CalDAV server "webdav.skedge.me"error message)or I get the not a secure server message with the option to continue...but then it sticks it wont continue

I WISH I HAD NOT UPGRADED...THIS IS A NIGHTMARE. I need to sync my appointment scheduler that is embedded in my website to my ical (which was easily done through publishing with the previous version) since I have upgraded I dont have the option to publish...but can add the cal DAV account, which I tried to do but I get a "Calendar couldn't log in to the CalDAV server “webdav.skedge.me”." error message if I go through edit ccount> add other account in system prefereneces otherwise I get a not secure server warning that will not continue when I select continue if I simply try to add an account using the + sign options at the bottom left of the systems preference pop up window
found a potenital fix (that I think would work if I could understand how to do what they are telling me to do) it said to configure webdav sharing for active directory accounts...tried to follow the instructions...could not understand them (very techy instructions).
FYI to any one that may find it in thier heart to answer this...I AM NOT COMPUTER LITERATE I am a veterinarian not a computer programer...so please but things in terms I can understand...i dont know what root access or server admin means...I dont know how to edit config files or even open directories with terminal ...i dont know what pico is or how to open it on my computer. Thanks
If know one can help can someone please tell me how to un-upgrade..this *****!
thanks
Catherine

Check the date and time in the clock on your computer: (double) click the clock icon on the Windows Taskbar.
* https://support.mozilla.com/kb/Secure+Connection+Failed
You can retrieve the certificate and check who issued the certificate and other details like when it is valid.
* Click the link at the bottom of the error page: "I Understand the Risks"
Let Firefox retrieve the certificate: "Add Exception" -> "Get Certificate".
* Click the "View..." button to inspect the certificate and check who is the issuer.

Flex mobile connect to remote secure server!!

Hi guys
I'm a beginner with flex mobile.
i'm trying to create an appllication flex mobile. and i have to connect to remote secured server (apache) to get some services deployed.
i did it and when i try with emulator from flash builderit's worked, a pop up window started to enter a login and password for connect to the remote server. it's okay, i get a result.
but now when i try this application with my mobile phone, application launched correctly but i can't connect to remte server ( i dont have anythig like a popup to enter the login and pssword).
i need your help.
thanks

Did you ever figure this out? I'm having the same issue.

HELP - SSL Secure Server Issue (SSL_ERROR_NO_CYPHER_OVERLAP)

Similar Messages

Maybe you are looking for