How to add ssl to webcache 10.1.3

Hi
We are running oracle webcache 10.1.3 on Solaris connecting to OracleHTTPServer-->OC4J .Now,We have installed a SSL certificate on oracle wallet.
When we are trying to access the server from chrome, we get Error 113 (net::ERR_SSL_VERSION_OR_CIPHER_MISMATCH): Unknown error.
We changed webcache.xml and disabled SSLV2,
<LISTEN IPADDR="ANY" PORT="443" SSLENABLED="SSL" PORTTYPE="NORM">
Also changed httpd.conf at OracleHTTPServer,
<IfModule mod_ossl.c>
# SSLOptions +StdEnvVars
SSLOptions ExportCertData StdEnvVars
</IfModule>
Still does not work.Any idea how to get SSL up on Webcache 10.1.3.
Thanks
AK

FOR HISTORY
Oracle does not support wild-carding certificares (wildcards)!!!
Here is a FAQ from metalink:
Per Metalink Note:291774.1:
Question 2:
Using the same SSL certificate for multiple Name-Based Virtual Hosts is
sometimes used on the Internet. This is referred to as 'certificate
sharing', or 'wild-carding certificates', and requires a special
certificate from the Certificate Authority. Is this supported?
Answer 2:
No, sharing certificates for multiple Name-Based Virtual Hosts is not
supported by Oracle. The use of wildcard certificates could compromise
security, and are not compatible with OWM. If there is a business need
for this, please file an Enhancement Request.

Similar Messages

How to add a Cipher Suite using RSA 1024 algorithm to the 'SSL Cipher Suite Order' GPO

Following a VA test the Default Domain GPO has been set to enable the SSL Cipher Suite Order. Following the change Symantec Endpoint Protection Manager doesn't work properly as the the Home, Monitors and Reports pages are blank and an Schannel error is
logged in the SEPM server's event log.
I have spoken to Symantec and I have been told that we need to allow the RSA 1024 bit algorithm but they can't tell me which cipher suite this would be. I have looked in the GPO setting and can't see an RSA 1024 suite but have found some in this article:
http://tools.ietf.org/html/draft-ietf-tls-56-bit-ciphersuites-01
I want to know how to add an additional cipher suite into the setting safely. Am I able to just add the suite into the GPO setting (eg TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA) or do I need to do anything else beforehand?
If anyone has any advice regarding this or cipher suite orders and troubleshooting SSL problems it would be much appreciated,
Thanks
Chris

Hi Chris,
Based on my research, RSA_EXPORT1024_DES_CBC_SHA is a previous cipher suite, which is supported, you can enable it use
SSL Cipher Suite Order policy setting under Administrative Templates\Network\SSL Configuration Settings.
More information for you:
TLS/SSL Cryptographic Enhancements
http://technet.microsoft.com/en-us/library/cc766285(v=WS.10).aspx
Best Regards,
Amy

Add ssL in my Web site

Hi all,
I built a samall web site , using tomcat + MS sql 2000, I want to add ssL into my Web. How to begin. My Jdk is dk1.4.2_08is that means I don't need to download any software ?
please off some link or suggestion!
thank you

By "ssL" do you mean "SSL", i.e. Secure Sockets Layer, aka HTTPS? I'm just not sure about the funky capitalization.
If you do mean SSL: when I google for "tomcat ssl" the first hit I get looks promising: "The Tomcat 4 Servlet/JSP Container - SSL Configuration HOW-TO".

How to disable SSL v3 for sun os 5.6 (OAS 4.0.8), I am facing POODLE vulnerability issue?

my Website is hosted on Sun OS 5.06 (OAS 4.0.8) and using web server : Oracle_Web_Listener/4.0.8. Website is configured to use https for secure pages and it was working fine from last 10 years but suddenly i am getting complaints from my customers that they can not browse site on chrome version 40 and above and firefox 34 and above.
I searched for this issue and found that there is POODLE attack which may causing this issue. now the only solution i can see is to disable SSL v3 on server.
Can any help me out with the process or an idea, How to disable SSL V3 on this Olde server? its sun microsystem server.

Hi Aamir,
   This is old software, been a while since I saw one of these.
    Normally when SSL was setup there were two listeners, one with SSL and one without, in a different port, so you could try to find this second port, which may work without any need to change the configuration.
    Else, try to check on the OAS manager (Usually on port 8888), the HTTP listener -> WWW -> Network, if there is a setup only for the SSL port, you will need to add a new line, with the same configuration, but a different port and the security disabled.
    Also, there may be some setting on the application itself for the url path. If so, when you navigate in the application it will try to redirect you back to the SSL port. In that case you will need to figure out where to change that, which depend on the application itself.
   Found this page on google with the process to setup SSL on OAS 4.0, you need to do the inverse of step 5.
WoSign Support: SSL Certificates Installation Instruction - Oracle Web Server (OAS 4.0.8)
Regards,
Luis

How do I ssl enable targets and EM in 10.1.2

How do I ssl enable targets and EM in 10.1.2 in
"Standalone console" (is this the correct forum?)
These are the steps I followed
1) emctl secure em
This enabled ssl for EM.
Problem is with monitoring a target - Oracle Reports
2) The I SSL Enabled reports. Added a port in webcache and gave default wallet directory. Following works
https://host:port/reports/rwservlet?getserverinfo
3) In sysman/emd/targets.xml , for reports target I changed http protocol to https and also changed port
(Report uses HTTP Fetchlet for getting metrics)
But I am not able to monitor Oracle Reports successfully.
I get the following in EM logs
emias.log
<MetricGetError ERRMSG="Error connecting to <host:port> return status = -1 " ERRID="32" ERRCODE="3">
emagent.trc
2005-01-05 18:29:07 Thread-2228 ERROR ssl: nzos_Handshake failed, ret=29024
2005-01-05 18:29:07 Thread-2228 ERROR http: 652: Unable to initialize ssl connection with server, aborting connection attempt
2005-01-05 18:29:08 Thread-2228 ERROR engine: [oracle_repserv,Ben.<host>_Reports_Server:rep_strep13,ServerPerf] : nmeegd_GetMetricData failed : Error connecting to <host>:4447 return status = -1
Any idea how to do SSL enable targets (in particular Oracle Reports) in 10.1.2 ?

Open and close iPhoto or GarageBand and relaunch FCP X. Sometimes just relaunching FCP X works also. You can trash FCP X preferences as well if the above doesn't work.

How to setup SSL for Business Objects

Dear colleagues,
can you help with the following issue: we want to setup SSL for BO and have dedicted information for the implementation of certificates and know that sapcryptolib needs to be used. But there is no information provided how to inform BO about the location of the sapcryptolib. Can anybody provide a hint for this? Many thanks in advance.
Best regards,
Detlef Kreiss (HP Outsourcing services)

Detlef,
The SAP Crypto library is not required if you are simply trying to secure the webserver using SSL.
Securing IIS (.NET infoview, or IIS fronting a Java application server) is pretty simple as you would follow the same steps to SSL secure it as you would any IIS server (there is an add certificate button in the properties of IIS).
If you are using a Java Application server solely and want to SSL secure that, there is an SAP note to describe the steps required to add an SSL certificate to the (Tomcat) Java keystore.
Please see:
1299147 - How to setup SSL on Tomcat in Business Objects Enterprise XI 3.1?
https://bosap-support.wdf.sap.corp/sap/support/notes/print/1299147
-Brian

How used single ssl for tow exchange server without clustering

how used single ssl for tow exchange server without clustering
exchange 2003 std fron-end server
used for add new server for owa failover or standby

Olivia, hopefully by now you have solved your issue but just for the sake of answering that question here so that people having the same issue can later find it I'll go through the motions:
there are a couple of ways you can achieve this.
A. get a certificate for free out there
B. generate your own self signed "fake" certificate.
certutil will certainly let you do this, here's how:
1. First, create a file/directory layout to store your certificates
mkdir -p /path/to/certificates/selfsignedCA2. Initialize a database for the certificate you want to create
certutil -N -d /path/to/certificates/selfsignedCA -P "ca-"3. Create a self-signed CA certificate
certutil -S -x -n "ca-cert" -s "cn=SelfSigned CA Certificate,dc=yourSuffix" -t CTPu -v 120 -d /path/to/certificates/selfsignedCA -P "ca-" -5Note: when prompted, select choice (5) SSL CA and 'y' for critical extensions
4. Export the your newly created self-signed CA certificate in PEM format
certutil -L -d /path/to/certificates/selfsignedCA -P "ca-" -n "ca-cert" -a > /path/to/certificates/selfsignedCA.pemthat should get you going
-=arnaud=-

How to add fields to already loaded cube or dso and how to fill records in

how to add fields to already loaded cube or dso and how to fill it.can any one tell me the critical issues in data loading process..?

This is sensitive task with regards to large volumes of data in infoproviders.
The issue is to reload of data in case of adjusted structures of infoproviders.
Indeed there are some tricks. See following:
http://weblogs.sdn.sap.com/cs/blank/view/wlg/19300
https://service.sap.com/sap/support/notes/1287382

How to add a library (libSomeRandomlib.so) to a project....??

Ok, so I've been trying to get CERN's ROOT program/libraries to work in an xcode project for a while, but I'm running into one really weird error, and I think I may just not know how to add a library to a project correctly.
Suppose I create a new Xcode C++ command line tool project. I hit Build and go, and it gives me a nice little Hello World! in the console, just as it should. If I then click on the project in Groups & Files, go to Project>Add to Project..., and choose, say, libCint.so, from my root/lib directory, and click ok, then click Build & Go, I get an error in the console:
dyld: Library not loaded: @rpath/libCint.so
Referenced from: /Users/paulthompson/Documents/Programming/Build Products/Debug/LibraryIncludeTest
Reason: image not found
sharedlibrary apply-load-rules all
Data Formatters temporarily unavailable, will re-try after a 'continue'. (Cannot call into the loader at present, it is locked.)
My assumption is that either I'm missing a step in the process of adding a library, or else there is something jacked up with the libraries themselves. Anyone have any advice?
Thanks,
Paul
EDIT* Oh, I should mention that the actuall binary that gets built after adding the library WILL execute properly in the Finder, or from terminal, just not with the Build & Go, or Go commands from within xcode.
Message was edited by: TraxusIV

TraxusIV wrote:
Results of otool:
LibraryIncludeTest:
@rpath/libCint.so (compatibility version 0.0.0, current version 0.0.0)
/usr/lib/libstdc++.6.dylib (compatibility version 7.0.0, current version 7.9.0)
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 123.0.0)
Macintosh-9:Debug paulthompson$ otool -L /Applications/CERNRoot/root/lib/libCint.so
/Applications/CERNRoot/root/lib/libCint.so:
@rpath/libCint.so (compatibility version 0.0.0, current version 0.0.0)
/usr/lib/libSystem.B.dylib (compatibility version 1.0.0, current version 125.2.0)
/usr/lib/libstdc++.6.dylib (compatibility version 7.0.0, current version 7.9.0)
I honestly don't know much about @rpath. I found this page that explains it a bit more: http://blogs.sun.com/dipol/entry/dynamiclibraries_rpath_andmac
So, since I don't want to deploy with the environment variable set, I should ask, what IS the correct, MacOS X way to do it?
The best way to find that is to look at how Apple does it. They put frameworks in /System/Library/Frameworks and regular shared libraries in the standard places. You can do the same. Put your frameworks into /Library/Frameworks and your shared libraries into /usr/local-based paths.
If you want to create stand-alone executables that can be installed via drag-n-drop, you can put shared libraries inside the application bundle. If your shared libraries/frameworks are elsewhere, you will need some sort of installer to get them installed.
I've been sifting through Apple's developer documentation but I have yet to find a concise, straightforward explanation of how to add shared libraries. I'm horribly confused at this point. Is there a good tutorial available anywhere for both the general unix case of linking to dylibs and .so's, and the Mac specific case?
Hopefully someone else knows an answer for this one.
*EDIT* I do already have the variable defined both in ~/.MacOS/environment.plist and also in Xcode as an additional user variable.
I'm not sure about the whole RPATH thing. Setting environment.plist will define environment variables for use in the Finder, but that is really a hack. There are better ways to do it, but if you are porting some open-source programs, that may be the only way. You should be able to define those variables in Xcode. You have to selected the debug executable under "Exectuables"

How to add A single row at the middle of the table in a Webi report

Hi,
I created a Webi report using Universe(Created universe using bex query).Now i have a requirement to display a row at the middle of a report. Can you please tell me ,how to add a sigle row at the middle of a Webi report.
Thanks in advance
Regards
Monika

Hi Monika,
It is not really possible to add a row (I assume you mean of unrelated data) to the middle of a table in a report. You can add a new table with a single row between two tables. For instance you could add a new one row table, or even single cells which are positioned relatively between two tables. Possibly a block on top of another. But this gets tricky.
Can you explain in more detail what you are trying to do?
Thanks

How to create a job card and how to add waranty card in sales order

I have one scenario for CS.the scenario is realted to automotive industry. Basically its a trading industry of HCV,MCV,LCV apart from that they will do servicing also. First the customer comes for a service.he is having free services. he will have waranty for spare parts of the vehicle. once he comes for servicing first the executive will take complains from the customer after that a Job card will be issued to the customer. there his chasis no ,engine no and registration no will be there. once enter the chasis no entire customer details has to come. how many free services he is having for how many kilo meters.then job card will go to the spare parts dept.that dept will issue the spare parts.then they will invoice the customer. he will pay the payment.and finally the gate pass will be given to the customer to deliver the vehicle.
painful area is how to create a job card and how to add waranty in sales order.
Regards,
Venkat

Hi,
Have u resolved it then Please let me know !!! It is a very interesting problem and owuld like to know the solution...
Regards
Krishna

How to add apache to an exisitng BOXI31 presently running on IIS

Hi Tim,
I know its rude that I directly mailed you but i am not able to post on the SAP forum due to some reasons I don't know. So please if you can help me I would be highly indebted.
I have a multiple server installation.
Number of Servers : 4
Number of CMS : 2
Application tier on 2 servers.
Web tier on 2 servers.
The problem is when i login my .NET infoview works fine but my Java infoview doesn't.
I found the error that the CCM doesn't have Tomcat Apache Server.
So my guess is thats the reason why the java infoview is not working.
Please help how to add the Apache to the CCM.
Regards
Sid

Hi,
You need to run custom installation to install Java Web components on your server box and choose to install
tomcat app server
- Subhodeep

How to add description of a column of a table in SQL Azure

Hi
I have some tables in my application database where there are descriptions added against certain columns. Needless to say they were done by using sp_addextendedproperty.
Now I am trying to migrate the Database to SQL Azure. SQL Azure does not support sp_addextendedproperty.
Hence I am not able to figure out how to add descriptions to those columns.
Any help would be much appreciated.
Thanks
Soumyadeb

Hello,
Just as Latheesh post above, Windows Azure SQL database are not support extended stored procedures. That’s one of the limitations on SQL database, and I don’t know there is another way to achieve the same on Azure.
Regards,
Fanny Liu
Fanny Liu
TechNet Community Support

How to add more fields at level task for importing to MsProject

Hi everyone,
We would like to have the same number of fields either for importing as exporting; or at least, the fields that we need.
The problem is when we are configurating the fields for exporting from cProjects to MsProject, we found 81 available fields and then we don't find the same amount for importing (34). So, in some cases we don't find fields which were configurated for exporting and it is no posible to upload the information back because the field is no available for importing.
Does anyone knows how to add more fields for importing at the cProjects side?
Thanks a lot,
CAMILO URIBE

Some fields can not be migrated because of MsProject designe. The above is the reason why cProjects' customizing does not offer the
mapping of the same nuember of fields.

How to ADD field in iview ?

hi,
in portal-iview i want to add a field.
when i go to 'portal-content -> open the iview with right click -> preview' and then
do ctrl-alt-right-mouse click i got to the customizing of the fields.
i know how to HIDE fields there, but i don't know how to add fields ? in the list
of the fields the necessary fields are available, BUT i only have to options:
hide -> YES or NOT PERSONALIZED
any ideas ?
reg, Martin

Gopal,
the root element of this fields does NOT have the option 'decorate'.
it is the quoata overview of ESS : sap.com/ess~quotas
the top of the tree has option 'decorate', but this is above the necessary table where
i select the data.
my adrl is
martin.svik(at)denzel.at
maybe we can 'change' some screenshots where you can send me yours and i can
send you mine to explain it in a better way
reg, Martin

How to add ssl to webcache 10.1.3

Similar Messages

Maybe you are looking for