How to disable SSLv3 on SSL enabled NodeManager (wls12.1.1 with jRockit)

how to disable SSLv3 on SSL enabled NodeManager (wls12.1.1 with jRockit)

Hi,
Add the following Java option in the StartNodemanger.sh file
Steps to disable SSLv3 protocol on Weblogic:
1. The weblogic.security.SSL.protocolVersion command-line argument lets you specify which protocol is used for SSL connections.
2. After enabling/configuring the SSL for weblogic server, append the following option to the JAVA_OPTIONS variable
-Dweblogic.security.SSL.protocolVersion=TLS1
NOTE: If you don’t specify the above property, by default it takes SSLv3.
Check the below Links for more information
http://www.ca.com/us/support/ca-support-online/product-content/knowledgebase-articles/tec1046921.aspx
http://docs.oracle.com/cd/E17904_01/web.1111/e13707/ssl.htm#SECMG494
CVE-2014-3566 - Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in Java SE
Additional Info
Poodle Vulnerability CVE-2014-3566
CVE-2014-3566 - Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in Java SE
Hope it helps

Similar Messages

How to disable SSLv3 and RC4 on Lync Server Access Edge?

We use Lync Server 2013.
How to disable SSLv3 and RC4 on Lync Server Access Edge?
This solution https://technet.microsoft.com/en-us/library/security/3009008.aspx doesn't work

Hi dizen,
To completely disable RC4, you can create the following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 128/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 40/128]
"Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\RC4 56/128]
"Enabled"=dword:00000000
For more details, please check out this KB.
http://support.microsoft.com/kb/2868725
Best regards,
Eric

How do you link a ssl certificate to your website created with adobe muse?

I would like to know how you can link a ssl certificate to a website created with Muse especially when you have created an ecormmerce website.

In Business Catalyst as well, SSL certificates cannot be added separately.
However (if you are looking to create payment mode secure), the payment pages in Business Catalyst already uses secure URL for the payment and you do not require a SSL certificate for them.
Hope this helps.
Regards,
Sachin

How to disable the printer's color management in Photoshop CS5 with Mavericks?

Hi there, does anyone know how to disable the printer's color management in Photoshop CS5 with Mavericks? There doesn't seem to be an option. Could you help? Many thanks

Just select Photoshop Manages Color, and the printer driver color options should be disabled.

How to disable SSLv3 on jRockit

Is there a patch release for disabling SSLv3 on jRockit JDK?
simliar to Sun JDK fix as below:
CVE-2014-3566 - Instructions to Mitigate the SSL v3.0 Vulnerability (aka "Poodle Attack") in Java SE

Hi
JRockit is shipped with the same JDK as Java SE. The January release of JRockit, R28.3.5, is based on 6u91 and contains the same fix.
Kind Regards
/Mattis

How to disable automatic launch of WIE in startup configuration with no options to do so?

Thinkpad T400 2764CTO running Windows 7 Home Premium 64
PC only 2 weeks old, very little on it, but getting slower and slower. Finally found the configuration for the startup menu and disabled several things I knew I didn't want at startup. One problem that I can't seem to figure out, is how to disable Windows Internet Explorer from being launched at startup? I have tried disabling every Microsoft option, and it still launches. Is there a specific Lenovo option [that does not obviously have anything to to with WIE] in the startup menu that, if disabled, will stop the WIE browser from being launched? How do I know which options are not safe to disable when attempting to slim down startup configuration for faster/more reliable performance?
Thanks,
Ann

Either I *completely* misread your instructions; that fix is major overkill for what I was trying to do; that fix does not apply to my problem; that fix is only for XP or Vista and not W7; or my PC is already so messed up (despite clean hardware diagnostics, no viruses, no malware, and it is only 2 weeks old), that it performed unexpected and unwanted actions when trying to use the Windows features on/off program control panel options.
Opened Control Panel, went to Programs, and finally found the option on the left for turning Windows features on and off. Unchecked the box for IE8, which required a restart. The restart time was 4-5 times longer than usual, even when launching superfluous programs from the startup menu, since it had to "reconfigure Windows." After restarting, WIE did not automatically launch, and its toolbar icon was gone too. Tried to turn it back on like you said, which also required a restart, which didn't make sense to me, since I expected the browser to launch again following another extra long restart once the box was re-selected. Although, surprisingly, it didn't, so for a moment thought it had somehow worked. Then I realized that my WIE icon was still missing from the toolbar, so there was no way to launch it even if I wanted to. Went back into the Control panel and checked every Windows feature box possible; another extra-long restart; still no toolbar icon for WIE. Had to go into the computer files to find WIE so that I could create a desktop shortcut icon so I could manually launch the browser from that. However, when I clicked on the shortcut, it went into a browser setup mode, as if it was being set up for the first time. Finished setup and tried to go to a webpage, but kept getting a connection error.
Diagnosed it, and it said that the Local Area Connection had no valid IP address. Waited on hold with Mediacom for a hour before being disconnected, trying to find out what the IP address was and where to re-enter it, since unchecking the IE8 box in the Windows features part of the Control Panel, doesn't just temporarily disable the function, but apparently actually deletes the toolbar icon, as well as the IP address. Took several more attempts over several hours to get ahold of Mediacom reset the signal to get the IP address back and get back online. So that really does not seem like a viable solution for trying to save time and resources by removing something from the startup menu, if it just quadruples startup time, deletes WIE toolbar icon and IP address permanently, requires creating a desktop shortcut, and then requires several more hours on phone with ISP for signal reset to get the IP address back. Would have been much faster and done less apparent damage than just going ahead and letting it launch at startup and then just closing it. *sigh*
I know that just having an icon in the toolbar does not mean that that particular program will launch at startup, as I have several others that have toolbar icons that I have been able to uncheck in the startup menu, so I can use the toolbar icons to launch each program manually. There just doesn't seem to be any program active in the startup menu that would be launching the browser, and still concerned about unchecking something necessary in startup that could screw it up even more.
Is there any way to get my toolbar WIE icon back without a full system restore, so that I have less shortcut clutter on my desktop?

How to start managed server on Weblogic 9.1 Admin console with jRockit

I configured a new 9.1 domain with jRockit as the JVM. Under Server Start, I used -server -Xgcprio:pausetime -Xpausetarget=400ms -Xms:256m -Xmx:384m -Xns:81m -Xgcpause in the Argument field. When I tried to start the server, I am getting the following error:
<May 24, 2006 11:16:55 AM> <Info> <NodeManager> <Starting WebLogic server with command line: C:\bea\jrockit90_150_04\bin\java -Dweblogic.Name=jdevext -Dbea.home=C:\bea -Djava.security.policy=c:\bea\weblogic91\server\lib\weblogic.policy -Dweblogic.management.server=http://144.111.155.145:7001 -Djava.library.path=C:\bea\WEBLOG~1\server\bin;.;C:\WINDOWS\system32;C:\WINDOWS;C:\bea\WEBLOG~1\server\native\win\32;C:\bea\WEBLOG~1\server\bin;C:\bea\JROCKI~1\jre\bin;C:\bea\JROCKI~1\bin;C:\bea\WEBLOG~1\server\native\win\32\oci920_8;C:\oracle\ora92\bin;C:\Program Files\Oracle\jre\1.3.1\bin;C:\Program Files\Oracle\jre\1.1.8\bin;C:\Program Files\ThinkPad\Utilities;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\Program Files\Support Tools\;C:\Program Files\Intel\Wireless\Bin\;C:\Program Files\ThinkPad\ConnectUtilities;C:\Program Files\QuickTime\QTSystem\ -Djava.class.path=C:\bea\weblogic91\server\lib\weblogic.jar;C:\bea\jrockit90_150_04\lib\tools.jar;c:\bea\weblogic91\server\lib\wamapps\commons-logging.jar;c:\bea\weblogic91\server\lib\wamapps\log4j.jar;c:\bea\weblogic91\server\lib\wamapps\xalan.jar;c:\bea\weblogic91\server\lib\wamapps\xercesImpl.jar;c:\bea\weblogic91\server\lib\wamapps\xml-apis.jar -Dweblogic.system.BootIdentityFile=C:\bea\user_projects\domains\jdev\servers\jdevext\data\nodemanager\boot.properties -Dweblogic.nodemanager.ServiceEnabled=true -Dweblogic.security.SSL.ignoreHostnameVerification=false -Dweblogic.ReverseDNSAllowed=false java -server -Xgcprio:pausetime -Xpausetarget=400ms -Xms:256m -Xmx:384m -Xns:81m -Xgcpause -verbose weblogic.Server >
<May 24, 2006 11:16:55 AM> <Info> <NodeManager> <Working directory is "C:\bea\user_projects\domains\jdev">
<May 24, 2006 11:16:55 AM> <Info> <NodeManager> <Server output log file is "C:\bea\user_projects\domains\jdev\servers\jdevext\logs\jdevext.out">
Usage: java [-options] class [args...]
(to execute a class)
or java [-options] -jar jarfile [args...]
(to execute a jar file)
where options include:
-jrockit     to select the "jrockit" VM
-client     to select the "client" VM
-server     to select the "server" VM [synonym for the "jrockit" VM]
The default VM is jrockit.
-cp <class search path of directories and zip/jar files>
-classpath <class search path of directories and zip/jar files>
A ; separated list of directories, JAR archives,
and ZIP archives to search for class files.
-D<name>=<value>
set a system property
-verbose[:class|gc|jni]
enable verbose output
-version print product version and exit
-version:<value>
require the specified version to run
-showversion print product version and continue
-jre-restrict-search | -jre-no-restrict-search
include/exclude user private JREs in the version search
-? -help print this help message
-X print help on non-standard options
-ea[:<packagename>...|:<classname>]
-enableassertions[:<packagename>...|:<classname>]
enable assertions
-da[:<packagename>...|:<classname>]
-disableassertions[:<packagename>...|:<classname>]
disable assertions
-esa | -enablesystemassertions
enable system assertions
-dsa | -disablesystemassertions
disable system assertions
-agentlib:<libname>[=<options>]
load native agent library <libname>, e.g. -agentlib:hprof
see also, -agentlib:jdwp=help and -agentlib:hprof=help
-agentpath:<pathname>[=<options>]
load native agent library by full pathname
-javaagent:<jarpath>[=<options>]
load Java programming language agent, see java.lang.instrument
<May 24, 2006 11:16:57 AM> <Info> <NodeManager> <Server failed during startup so will not be restarted>

It looks like your command line is broken. You have:
java <lots of -Dprop=value> java <JRockit flags> weblogic.Server
That second "java" shouldn't be there.
-- Henrik

How to disable listenPort? (SSL only)

Hi,
          how can I disable listenPort and enable only SSLListenPort?
          Thanks.


There is no way to do this in WLS 5.1. You can use firewalls to prevent access to
          this port...
          Darrel Cox wrote:
          > Did you ever get an answer to this question? If so, what was it? And can it be
          > done without bringing down the instance?
          >
          > Darrel
          >
          > Papaya Head <[email protected]> wrote:
          > >in wls5.1... thanks.
          > >
          > >Papaya Head wrote:
          > >
          > >> Hi,
          > >>
          > >> how can I disable listenPort and enable only SSLListenPort?
          > >>
          > >> Thanks.
          > >

How to disable Gateway for intranet, enable Gateway for extranet

We are upgrading from Plumtree 4.5 to Plumtree 5.04 (.NET), and are having issues with web cards going through the gateway space. The requirement is for intranet users to NOT use the gateway space to access content, and for extranet users to use the gateway - since they could not access the content without the gateway from outside the firewall.
In Plumtree 4.5, we created a custom file that checked to see if the user was on the intranet or extranet. Basically, if intranet then redirect to the content file - else if extranet, go through gateway.asp to open the file.
In Plumtree 5.04, the gateway setting is on the web service for the data source and it is either always gateway the content or never gateway the content. Is there a way to allow extranet users to utilize the gateway, but turn the gateway off for intranet users???? I saw a couple of posts for the AccessingFromIntranetuser info setting - if that setting is set to true, does that turn off the gatewaying? Set to false, it allows the gateway to continue?
We need to turn the gateway off for intranet users due to our content sitting on a web server farm behind a foundry/load balancing switch. With gateway turned on, all of the traffic to the content servers comes from the three web servers and not the client browsers - so all traffic is routed to one content server, overloading it, instead of being load balanced across the content server farm. We can't turn off the gateway entirely, since users have to be able to get to the content from the extranet via the Portal.
This is for the standard "World Wide Web" data source, so it is not a custom CWS (not a NT file crawler).
Thanks in advance for your help! This is a showstopper for our implementation!

Hi Richa,
As "Agent proxy not enable" is a default rule which comes from microsoft SCOM 2007R2 or 2012 R2 you cannot disable it or override it by saying don't trigger on
the SCCM agent. If you are overriding a rule or monitor you need to first disable it and tell SCOM trigger only on these agents and add the agents one by one. As you cannot disable this so it is not possible possible.
Any ways you can try this as per the below screen shot and let me know if it works.
Add the SCCM server to a group by creating a new group from the groups in Authoring tab and make that SCCM a member of the new group.
Once done Go to rules and search for that alert. You may get many alerts of the same name but classes may represent different. Any ways select any one among them.
And right click and select the options as per the below screen shot highlighted in RED.
Once you have selected "For objects of another class" Select the group you created and click ok. Once you do it you will get the below window.
As per the below screen shot change the value to False (It will be true by default). As per the below screen shot and click ok and you are done.
Gautam.75801

How to disable SSLv3 and keep only TLS for LDAP connection.

Hi,
I'm planning to keep only TLSv1.2 for LDAP connections.
I tried to set LDAP_OPT_SSL_INFO in LDAP Session Options using a SecPkgContext_ConnectionInfo Structure with dwProtocol SP_PROT_TLS1_2_CLIENT(as described here - https://social.msdn.microsoft.com/Forums/en-US/7544226d-97e1-4dae-a377-e382c2281e91/how-to-set-up-tls-in-ldap-connection?forum=vcgeneral),
but it returns LDAP_PARAM_ERROR.
I tried to call this function directly after ldap_sslinit/ldap_init and before ldap_connect() - without success, I tried to use other parameters with default values, I tried to initialize them by 0/other possible values - and also no success.
How I can do this?
Thanks for your advices.

LDAP_PARAM_ERROR
https://msdn.microsoft.com/en-us/library/aa367026(v=vs.85).aspx

How to disable wireless for Version 4 G LTE Broadband Router with Voice?

How can I disable wireless on the Version 4 G LTE Broadband Router with Voice?

Gothcha! Thanks so much for following up and providing this information, James2014. I've provided a link with the instructions to turn off the wireless radio on the device. Check it out here, http://vz.to/VEHZt0
YosefT_VZW
Follow us on Twitter @VZWSupport

How to disabled the activation of deployed Test VMs from templates with SCVMM 2012 R2

Hello,
I have created templates with key for deploying windows 8 VMs,But i wants do not activate these VMs as it is just a test VM.
Is it possible through SCVMM to deploy VM with key without activation ?
Thanks
RICHA KM

Thanks for the reply.
My network architecture is exactly like the one described on your paper, with 2 differences:
1. I only have one host in the Production group and one host in the Gateway group
2. The first host has one physical NIC, the second host has 2 NICs, one internal and one with an Internet (routable) IP
After applying the logical switches on the hosts, I lost Internet connectivity on the gateway host (I have no idea why there is no logical Gateway Switch !!!). VMM completed the jobs with no error.
Any thoughts?

Steps to make iPlanet SSL enabled-URGENT

Hi
I want to know how to make iPlanet server SSL enabled . I have already installed the server certificate on the iplanet . Is there anything else i need to do to access a servlet on iplanet thru Https .Basically what are the next steps involved after installing certifictae in iPlanet ?
I tried accessing the servlet thru a sample java client ...it gives me Malformed URL Exception .
As far as i know there wouldnt be any code change inside the servlet to make it Https Enabled..
Can someone help me ....Pls let me know....This is URGENT ..
Thanks
varahan

After you successfully installed the server certificate you only need to set encryption to "on" in the preferences tab (iPlanet 4.1 or earlier). No other changes are necessary.
Did your sample Java client also talk "https"?

How to disable trace files in oracle version 11g

Senario : trace file are growing
How to disable trace files in oracle version 11g
pls guide with best practice

SHANOJ wrote:
Senario : trace file are growing
How to disable trace files in oracle version 11g
pls guide with best practiceIn 11g, there is an extensive tracing that happens for the reasons best known to Oracle only. But if you want to disable it, Coskan had published a small post mentioning an undocumented parameter(which means you must think twice before using it) to disable it- disablehealth_check* . You may want to read the complete post here,
http://coskan.wordpress.com/2009/06/03/too-many-trace_file-on-11g/
Aman....

How to disable geotagging on 4s

Settings...general...doesn't appear to have a way to disable geotagging (on 4S). I want to disable geotagging on my photos.

Information that is outdated needs to be updated. The "update" was for those persons with an iPhone 4s that has been updated to iOS6 that want to know how to disable geotagging. It always pays to keep up with the current technology.

How to disable SSLv3 on SSL enabled NodeManager (wls12.1.1 with jRockit)

Similar Messages

Maybe you are looking for