Https ssl config Oracle AS, webcache, portal...almost works

Hi,
I have searched the forums and I havent found anything that works for me.
I have Oracle infrastructure on one server, and Oracle App server/portal on another server. I can get as far as the http server showing the "welcome to oracle" page in https form. When I try to access a page in the portal (plsql) I get a blank page. It does convert the "https://myserver:xxxx//pls/portal/url/page/IRWEB/HOME
" to "https://myserver:xxxx/portal/page?_pageid=73,86254,73_86264:73_86316:73_8632...." but nothing comes up.
Also, it uses the Infrastructure server for single-sign-on...so I need to make the app server do the single sign-on. I've tried by adding /pls/orasso entry in DADS.conf of http server..
So as far as I can tell...the http server IS operating in https/ssl, but the single-sign-on and the pages in the portal are not.
I have to do everything manually since I am using 10.1.2 (no Oracle Collab Suite installed, so no SSLConfigTool and other assistants)
Here is what I've done to get https://myserver:xxxx/ to come up ok.
server 1: Oracle Infrastructure and Oracle database release 1 10.1.2.0.0
server 2: Oracle Application Server / Portal with webcache release 2 10.1.2
using Oracle Wallet for certificate,
http server -> process management "ssl-enabled",
http server -> advanced -> ssl.config: SSLWallet file:, SSLWalletPassword, virtual host for ssl
webcache -> added settings for ssl (I used the current entries for non-ssl as a guide for the ssl entries)
Interesting issue...with the ports in the ssl.conf file example:
Port 4459
Listen 4459
VirtualHose myserver.blah.edu:4450
Port 4458
When I get the blank page trying to use ssl and 4459, I can manually change the url in my browser to 4458 (or maybe its the other way around) and get this message: "Error: The portlet could not be contacted"
Is this a problem with webcache? Do I have to do any ssl config on the server with the database?
I've even tried disabling the webcache, both with the oracle sql script and through web interface but neither made a difference...same problem.
Any help would be greatly appreciated..I feel as if I'm almost there.
If I did not post enough info for accurate help, please ask what you need to know to provide help! Thanks in advance.

Hi,
Yes you can go for SSl configuration without re-installing any of the components.
Regards,
access_tammy

Similar Messages

Use TLS instead of SSL in Oracle AS WebCache 10g (10.1.2)

Hi,
We use Oracle AS Webcache as a reverse proxy for all our OAS/ADF web applications.
Our sysadmin blocked SSL v3 icw POODLE vulnerability. Is there any way we can use TLS (1.2) instead of SSL in the Oracle Webcache 10g?
Many thanks,
Abraham

We are having the same issue on production environment.
Since Thursday 20th november 2014, Google Chrome does not allow connections to websites using SSLv3. This is because the POODLE vulnerability as described here: https://www.us-cert.gov/ncas/alerts/TA14-290A
I've already followed the configuration on My Oracle Support (Doc ID 1936300.1) without success. But i didn't applied the Critical Patchs Updates yet as the presented note Doc ID 405972.1.
I'm wondering if you found any workarround for this problem or if we can help each other. I believe we are not alone.
Thanks,
Jeison.

Implement Oracle Aplication Server Portal - Starting work

Hi everyone
I work with java and Oracle database, manager oracle application server, but i need to learn Oracle Aplication Server Portal, i just to know some tips to start.
How can i do that?
Thanks
José Vieira

Hi José,
The link :
http://www.oracle.com/appserver/portal_home.html
has a small text to the right that reads " Download Oracle Application Server 10g ". The first link in the download page is for " Application Server 10g Release 2 " - the installer for this allows you to install the Ifrastrcuture and the MiddleTier.
During the installation of Oracle Application Server 10g Release 2 (10.1.2.0.2), you would have notice three options :
1. J2EE & WebCache
* Oracle Enterprise Manager 10g Application Server Control
* Oracle HTTP Server Oracle Application Server Containers for J2EE (OC4J)
* Oracle Application Server Web Cache
2. Infrastructure
* Oracle Database Server 10g (10.1.0.4.2)
* Oracle Internet Directory
* Oracle Application Server Single Sign-On
* Oracle Application Server Directory Integration Provisioning
* Oracle Application Server Delegated Administration Services
* Oracle Application Server Certificate Authority
3. MiddleTier.
* Oracle Application Server Portal
* Oracle Application Server Wireless
* Oracle Sensor Edge Server
* Oracle Application Server Forms Services
* Oracle Application Server Reports Services
* Oracle Application Server Personalization
* Oracle Business Intelligence Discoverer
You can also install other tools & services like :
* Oracle Security Developer Tools
* Oracle Application Server Guard
* OracleAS Backup and Recovery Tool
Thus, while installing, you need to install the Infrastructure ( which will contains the OID , SSO, etc. ), and the Middletier ( Portal, etc. ) later. The Portal MiddleTier depends on the Infrastructure.
Oracle Portal allows you to collect disparate sources of information and applications and present it on a single page. A Portal is a Web site or service that offers a broad array of resources and services, such as email, forums, search engines, and on-line shopping malls. It's more like a "doorway" to the Internet or a portion of the Internet, targeted towards one particular subject.
You can develop an application & post it on a Application Server - but, publishing it on Portal allows you to collect many such similar applications. Portal is usually used as a sinlg epoint of access for many similar / related kinds of applications.
Good Luck !
Regards,
Sandeep

SSL config in PORTAL

To all the Portal Guru's out there....I have a two simple questions....
I have two servers - one that holds the MR (repository) and one that holds the OID Infrastructure and Portal tiers (2 different mount points)
This is a new install - and upgraded to 10.1.4. With the OID and portal tiers on the same server, it is possible to SSL enable access to the portal (i.e. HTTPS in place of currently HTTP) - without having to re-install.......the entire stack.....
Is it also wise to go ahead and do this - in other words, does religiously adhering to Sec 5.2 of the Oracle® Application Server Portal Configuration Guide
10g Release 2 (10.1.4) B19305-03 - get me to enable SSL through out the portal?
Thanks

Hi,
Yes you can go for SSl configuration without re-installing any of the components.
Regards,
access_tammy

HTTPS/SSL and portal-based apps -- alternatives to 'all or nothing' ?

hi,
I've been told by oracle support via metalink that it is not possible to have one or two pages in a portal application accessible though HTTPS and all the others through HTTP. They said that Portal as a whole must use only HTTPS or only HTTP.
This is frankly quite unbelievable, but I double checked two or three times, and they assured me that this is the case. Having just one or two pages in a large site be SSL -- for credit card submission or whatever -- is obviously an incredibly common real-world use case, and others must have already faced this problem and come up with alternatives.
We thought about going outside portal for the two pages that we need to be SSL, but this isn't possible because the processing that needs to occur on those pages is too dependent on Portal.
What have others done to get around this problem and use HTTPS only for select pages?
thanks,
calvin

Hello ,
I have to do the same thing : only protect certain URLs of my portal with SSL.
Checking my.oracle.com, you can see they do this :
1. Home page in HTTP mode
2. post login/password in HTTPS
3. login successful page in HTTP mode
Opening the source, you can see :
1. function Javascript doLogin() rewriting form.action.value using https://.. as follow :
function doLogin(form) {
if (!isValidUsername(form)) {
return;
form.action = "https://login.oracle.com/pls/orasso/orasso.wwsso_app_admin.ls_login";
2. The post is not done to the login procedure from portal schema, but to a proc of orasso schema : we skip the redirection and cookie positioning. So how can this work. Checking further in the code you see :
if (!parent.frames.s2pFrame) {
form.site2pstoretoken.value = "v1.2~1356~3BDF1F08432CD55....";
} else {
var hw = parent.frames.s2pFrame.window;
var hd = hw.document;
var s2p = hd.forms.freshTokenForm.site2pstoretoken.value;
form.site2pstoretoken.value = s2p;
3. The site2pstoretoken is already in the page as a Javascript variable , but how is this value retrieved? Playing with Etherreal, we see that there is an hidden frame : parent.frames.s2pFrame calling the procedure /pls/moc/moc.wwptl_login.show_site2pstoretoken, returning a simple html page :
<HTML>
<FORM NAME="freshTokenForm">
<INPUT TYPE="hidden" NAME="site2pstoretoken" VALUE="v1.2~1356~FB597....">
</FORM>
</HTML>
This tokenId is then picked by the javascript function before login/password action submit.
Checking in my portal schema (9.0.2.3), i don't see this procedure wwptl_login.show_site2pstoretoken
My portal middle tiers are in 10g , but the infrastructure database is installed on a remote host and is a 9.0.2.3 iAS release.
my.oracle.com seems to be full AS 10g :
My question is : does this procedure exist in a 10g portal schema.
Or is this procedure a special patch for my.oracle.com portal.
I'm blocked again today as i want only protect 2 or 3 pages but to the whole site.
This shows there is a hope for what we want to do.
Hope too my.oracle.com or Portal security/Login Server specialists will answer....
Laurent

Do oracle HTTP servers support https/SSL failover??

Dear all,
my company plans to use a load balancer (F5) to distribute the workload to multiple
oracle http servers and oc4j servers (in different machines).
we prefer to put the ssl encrypt/decrypt to the http server (ssl pass throuhgh, not put
on the load balancer due to some reasons).
so i want to know if using https / ssl, will the ssl state replicate to multiple oracle http
servers so that when one http server / machine down, the existing ssl traffic can
transparently rout to other servers?
if yes, how can i achieve that ??
thanks.
lsp

I now have the standalone version of the Oracle HTTP server 10g.
I also have a signed certificate that I have been using on the old 9i Oracle HTTP server (with the parameters mentioned above).
It seems on the 10g version I have to use a wallet file.
I go into Oracle Wallet manager but I can't import a certificate request, I can only create a new one. Then when I import the signed user certificate I already
have, it tells me it doesn't match the certificate request file. I need to be able to create a wallet for my existing signed certificate.
cheers
Robert

How to Setup SSL on Oracle Application Server 10g Release 2 (10.1..2)

Hi All,
Can anybody tell me How to setup the SSL on Oracle Application Server 10g Release 2 (10.1.2).
I have all the required documents like
1. Oracle Application Server Portal Server Configuration Guide.
2. Oracle Application Server Web Cache Configuration Guide.
3. Oracle Application Server SSO Administration Guide.
I tried to follow all this documents but still i am not able to set SSL for Oracle Portal Server.

The Portal Configuration Guide, available on OTN at http://www.oracle.com/technology/documentation/appserver1012.html does provide some very specific information on how to set up OracleAS Portal.
Section 6.3.2.1 Configuring SSL for OracleAS Portal describes various configurations, such as:
SSL to OracleAS Single Sign-On
SSL to OracleAS Web Cache
SSL Throughout OracleAS Portal
External SSL with Non-SSL Within Oracle Application Server
For larger enterprise configurations, you can refer to the Enterprise Deployment Guide.
Can you give a bit more background on what you are trying to set up? Which scenario, what sort of hardware, software versions, and so on.
Regards,
Pete

Enabling SSL for Oracle Enterprise Manager 10.1.3.1 is Failing!!!

Hi All,
I have followed the steps described in
http://download-uk.oracle.com/docs/cd/B31017_01//core.1013/b28940/em_app.htm#BABCEEAH.
However when I am trying to start the application server using 'opmnctl startall' the server is not starting and some timeout is getting generated in the log file.
Is it that enabling SSL will only make the EM console secured? Then how to enable SSL for other soa components like - BPEL,ESB,OWSM? Are there any documentations available?
Also please let me know how can I enable SSL for Oracle Application server console?
Please any advice will be appreciated. I am in the middle of a project delivery.
Thanks

Hi,
Let me first highlight the installation that I have done. I have installed SOA components with 'basic installation' mode.
The log file under <ORACLE_SOA_HOME>/opmn/config/ has generated the following stack:-
08/07/25 11:03:34 Start process
08/07/25 11:03:37 WARNING: XMLApplicationServerConfig.overwriteSiteConfigPort Port assignment is ignored: web-site not found in the server OC4JServiceInfo id: default-web-site protocol: http hostname: null port: 8890 description: null
08/07/25 11:03:37 WARNING: XMLApplicationServerConfig.overwriteSiteConfigPort Port assignment is ignored: web-site not found in the server OC4JServiceInfo id: secure-web-site protocol: https hostname: null port: 1156 description: null
08/07/25 11:03:47 log4j:WARN No appenders could be found for logger (wsif).
08/07/25 11:03:47 log4j:WARN Please initialize the log4j system properly.
08/07/25 11:03:53 WARNING: OC4J Service: ascontrol-web-site with protocol: https and port: 1156 was not declared in opmn.xml
08/07/25 11:03:53 Oracle Containers for J2EE 10g (10.1.3.1.0) initialized
08/07/25 11:03:53 WARNING: OC4J will not send ONS ProcReadyPort messages to opmn for service: OC4JServiceInfo id: default-web-site protocol: http hostname: null port: 8890 description: null
08/07/25 11:03:53 default-web-site hostname was null
08/07/25 11:03:53 WARNING: OC4J will not send ONS ProcReadyPort messages to opmn for service: OC4JServiceInfo id: secure-web-site protocol: https hostname: null port: 1156 description: null
08/07/25 11:03:53 secure-web-site hostname was null
On the command prompt I am getting the following error:-
opmn id=CALTP8BB32:6203
0 of 1 processes started.
ias-instance id=home.CALTP8BB32.cts.com
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
ias-component/process-type/process-set:
default_group/home/default_group/
Error
--> Process (index=1,uid=301928631,pid=2944)
failed to start a managed process after the maximum retry limit
Log:
D:\product\SOASuite\opmn\logs\\default_group~home~default_group~1.log
--------------------------------------------------------------+---------
ias-component | process-type | pid | status
--------------------------------------------------------------+---------
OC4JGroup:default_group | OC4J:home | N/A | Down
ASG | ASG | N/A | Down
Please let me know where am I going wrong?
Thanks,
Mandrita.

Analyze link generated by Portal not working after SSL Configuration

Hi,
We've installed OracleAS Portal 10.1.4 and Oracle Discoverer Version 10.1.2.48.18 on the same machine. We recently configured SSL on OracleAS Portal for SSO server only. Discoverer was not SSO enabled.
Now after successful SSL configuration we are facing one problem. The Analyze link that is generated by Portal to analyze the worksheet in Single Worksheet Viewer is no longer working. when we click on the analyze link we get the "HTTP 500 Internal Server Error" and a message that Page cannot be displayed.
Please advise...

Hi Andrew
It sounds like you need to enable SSO for Discoverer too.
Best wishes
Michael

WebDAV over HTTPS/SSL

Will Oracle Portal support WebDAV using HTTPS/SSL?

Jeff, while OraDAV does suppot SSL, some WebDAV clients do not. For example, on NT/Windows 2000 Web Folders, IE, and Mozilla (Netscape 7.0) support SSL. Dreamweaver and GoLive do not. On Unix, Linux and the Mac OS, Mozilla and Cadaver support SSL.

SSL-Config: Oc4J does not reload keystore/truststore at runTime

Hi all, i have a little question about the SSL-Config into OC4J.
I have a webApp bound to a secure web site that requires mutual-authentication. If I add at run-time (without stopping OC4J) a trusted entry (a CA) to the keystore the secure-web-site is related to, OC4J does not "reload" the keystore with the new entry. Thus, i have to restart the OC4J to be able to accept SSLconnection that are authenticated by means of that new CA. The qeustion is: Does it exist a conifguration that has to be performed to reload at run-time a keystore in OC4J or it's necessary to restart OC4J each time a new entry to a keystore mapped for a given secure-web-site is added?
I hope someone can give me a tip,
Best Regards

Hi I tried this with latest 10.1.3 Developer Preview 4 and it worked great and I could start OC4J standalone in https mode. Can you please download the latest version of OC4J 10.1.3 DP4 stand-alone and try in there ? The OC4J version embedded with JDev 10.1.3 Preview is pretty old and there have been many bugs fixed since then
http://www.oracle.com/technology/tech/java/oc4j/index.html
-Debu

SSL on Oracle Apps 11

Hi All,
I am trying to configure SSL on Oracle Apps 11i. I am referring the Metalink Doc 123718.1. I did not use Third party for certificates.
I have used self signed certificate with Applications genereted by OpenSSL for WebSever and configured SSL with HTTP Server. I am able to login to application using url https://<hostname>:4479 .
I have enabled FormsLsnrServlet using txkrun.pl -script=SetAdvCfg -appsuser=apps -appspass=apps -enable=FormsLsnrServlet.
I am able to access http://hostname.domain:port/dev60cgi/f60cgi but below its showing the error java.lang.ClassNotFoundException:oracle.forms.engine.Main
But i am not able to open forms. Its not giving any error. I ran Autoconfig. Do i need to do any other configuration steps?
Please let me know a solution for this.
Thanks,
Manikandan
Edited by: Manikandan on Nov 16, 2010 5:33 AM

Hi Haswan,
I am able to access http://hostname.domain:port/dev60cgi/f60cgi but below its showing the error java.lang.ClassNotFoundException:oracle.forms.engine.Main.
error_log says
[Tue Nov 16 17:52:54 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:54 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:55 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:55 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:56 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:56 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:57 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:57 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:58 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:58 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:58 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:58 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:52:59 2010] [error] mod_ssl: SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[Tue Nov 16 17:52:59 2010] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[Tue Nov 16 17:53:19 2010] [error] [client 192.168.0.12] File does not exist: /u01/applmgr/estrhi7comn/portal/ESTRHI7_rihand7/favicon.ico
[Tue Nov 16 17:53:21 2010] [error] [client 192.168.0.12] File does not exist: /u01/applmgr/estrhi7comn/portal/ESTRHI7_rihand7/favicon.ico
[Tue Nov 16 17:54:02 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:03 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:04 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:05 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:05 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:06 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:06 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:06 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 17:54:06 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 18:56:01 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 18:59:11 2010] [error] mod_ssl: SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows)
[Tue Nov 16 18:59:11 2010] [error] System: Connection reset by peer (errno: 104)
[Tue Nov 16 19:01:27 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 19:01:27 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 19:01:27 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 19:01:27 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 19:01:27 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[Tue Nov 16 19:01:28 2010] [error] mod_ssl: SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
ssl_engine_log says
rver name or identical to CA!?]
[16/Nov/2010 17:52:54 17711] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:54 17711] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:55 17716] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:55 17716] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:56 17713] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:56 17713] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:57 17712] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:57 17712] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:58 17714] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:58 17714] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:58 17715] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:58 17715] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:52:59 17717] [error] SSL handshake failed (server rihand7.estuate:4479, client 192.168.0.12) (OpenSSL library error follows)
[16/Nov/2010 17:52:59 17717] [error] OpenSSL: error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate [Hint: Subject CN in certificate not server name or identical to CA!?]
[16/Nov/2010 17:54:02 16535] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16528] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16534] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16554] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16605] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16639] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16640] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16645] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:03 16529] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:04 17695] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:05 17700] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:05 17701] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:06 17702] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:06 17704] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:06 17705] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 17:54:06 17703] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 18:56:01 16646] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 18:59:11 16529] [error] SSL handshake interrupted by system [Hint: Stop button pressed in browser?!] (System error follows)
[16/Nov/2010 18:59:11 16529] [error] System: Connection reset by peer (errno: 104)
[16/Nov/2010 19:01:27 16534] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 19:01:27 16554] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 19:01:27 16639] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 19:01:27 16640] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 19:01:27 16645] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
[16/Nov/2010 19:01:28 16535] [error] SSL handshake timed out (client 192.168.0.231, server rihand7.estuate:4479)
access_log.1289865600 says
192.168.0.12 - - [16/Nov/2010:17:54:29 +0530] "GET /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE&akRegionApplicationId=0&navRespId=20420&navRespAppId=1&navSecGrpId=0&transactionid=1552263075&oapc=2&oas=VDB71pm6pAWm1JwiWz3yxQ.. HTTP/1.1" 200 91352
192.168.0.12 - - [16/Nov/2010:17:54:30 +0530] "GET /OA_HTML/RF.jsp?function_id=95&resp_id=20420&resp_appl_id=1&security_group_id=0&lang_code=US&oas=9BQH1hcOWQm0YN53s3oAfQ..&formsLink=yes HTTP/1.1" 302 376
192.168.0.12 - - [16/Nov/2010:17:54:31 +0530] "GET /pls/ESTRHI7/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPDCQ&other_params= HTTP/1.1" 302 5
192.168.0.12 - - [16/Nov/2010:17:54:31 +0530] "GET /dev60cgi/f60cgi?&appletmode=nonforms&HTMLpageTitle=&HTMLpreApplet=&code=oracle/apps/fnd/formsClient/FormsLauncher.class&width=400&height=100&archive=/OA_JAVA/oracle/apps/fnd/jar/fndforms.jar,/OA_JAVA/oracle/apps/fnd/jar/fndformsi18n.jar,/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar,/OA_JAVA/oracle/apps/fnd/jar/fndswing.jar,/OA_JAVA/oracle/apps/fnd/jar/fndbalishare.jar,/OA_JAVA/oracle/apps/fnd/jar/fndaol.jar,/OA_JAVA/oracle/apps/fnd/jar/fndctx.jar,/OA_JAVA/oracle/apps/fnd/jar/fndlist.jar&gp14=jinit_appletcache&gv14=offjinit_appletcache=off&gp2=resp_app&gv2=SYSADMIN&gp3=resp&gv3=SYSTEM_ADMINISTRATOR&gp4=sec_group&gv4=STANDARD&gp5=function&gv5=FND_FNDCPDCQ&gp6=other_params&gv6=&gp7=forms_url&gv7=https%3A%2F%2Frihand7.estuate%3A4479%2Fpls%2FESTRHI7%2Ffnd_icx_launch.runforms%3FICX_TICKET%3D%26resp_app%3DSYSADMIN%26resp_key%3DSYSTEM_ADMINISTRATOR%26secgrp_key%3DSTANDARD%26start_func%3DFND_FNDCPDCQ%26other_params%3D&encoding=UTF-8&gp8=error_url&gv8=https%3A%2F%2Frihand7.estuate%3A4479%2FOA_HTML%2Fjsp%2Ffnd%2Ffnderror.jsp%3Fdbc%3Destrhi7&gp12=port&gv12=6945&gp13=dbc&gv13=estrhi7&gp15=icx_ticket&gv15=1651410630 HTTP/1.1" 200 40795
192.168.0.12 - - [16/Nov/2010:17:54:41 +0530] "GET /OA_HTML/OA.jsp?OAFunc=OAHOMEPAGE&akRegionApplicationId=0&navRespId=20420&navRespAppId=1&navSecGrpId=0&transactionid=1552263075&oapc=2&oas=VDB71pm6pAWm1JwiWz3yxQ.. HTTP/1.1" 200 91352
192.168.0.12 - - [16/Nov/2010:17:54:43 +0530] "GET /OA_HTML/RF.jsp?function_id=90&resp_id=20420&resp_appl_id=1&security_group_id=0&lang_code=US&oas=1ZXm4khw_sIFVj5oz4FIIg..&formsLink=yes HTTP/1.1" 302 380
192.168.0.12 - - [16/Nov/2010:17:54:43 +0530] "GET /pls/ESTRHI7/fnd_icx_launch.launch?resp_app=SYSADMIN&resp_key=SYSTEM_ADMINISTRATOR&secgrp_key=STANDARD&start_func=FND_FNDCPQCR_SYS&other_params= HTTP/1.1" 302 5
192.168.0.12 - - [16/Nov/2010:17:54:43 +0530] "GET /dev60cgi/f60cgi?&appletmode=nonforms&HTMLpageTitle=&HTMLpreApplet=&code=oracle/apps/fnd/formsClient/FormsLauncher.class&width=400&height=100&archive=/OA_JAVA/oracle/apps/fnd/jar/fndforms.jar,/OA_JAVA/oracle/apps/fnd/jar/fndformsi18n.jar,/OA_JAVA/oracle/apps/fnd/jar/fndewt.jar,/OA_JAVA/oracle/apps/fnd/jar/fndswing.jar,/OA_JAVA/oracle/apps/fnd/jar/fndbalishare.jar,/OA_JAVA/oracle/apps/fnd/jar/fndaol.jar,/OA_JAVA/oracle/apps/fnd/jar/fndctx.jar,/OA_JAVA/oracle/apps/fnd/jar/fndlist.jar&gp14=jinit_appletcache&gv14=offjinit_appletcache=off&gp2=resp_app&gv2=SYSADMIN&gp3=resp&gv3=SYSTEM_ADMINISTRATOR&gp4=sec_group&gv4=STANDARD&gp5=function&gv5=FND_FNDCPQCR_SYS&gp6=other_params&gv6=&gp7=forms_url&gv7=https%3A%2F%2Frihand7.estuate%3A4479%2Fpls%2FESTRHI7%2Ffnd_icx_launch.runforms%3FICX_TICKET%3D%26resp_app%3DSYSADMIN%26resp_key%3DSYSTEM_ADMINISTRATOR%26secgrp_key%3DSTANDARD%26start_func%3DFND_FNDCPQCR_SYS%26other_params%3D&encoding=UTF-8&gp8=error_url&gv8=https%3A%2F%2Frihand7.estuate%3A4479%2FOA_HTML%2Fjsp%2Ffnd%2Ffnderror.jsp%3Fdbc%3Destrhi7&gp12=port&gv12=6945&gp13=dbc&gv13=estrhi7&gp15=icx_ticket&gv15=1984433721 HTTP/1.1" 200 40803
192.168.0.231 - - [16/Nov/2010:18:56:01 +0530] "GET /dev60cgi/f60cgi HTTP/1.1" 200 40607
192.168.0.231 - - [16/Nov/2010:18:56:01 +0530] "GET /OA_JAVA/oracle/apps/media/forms_logo.gif HTTP/1.1" 200 54200
192.168.0.231 - - [16/Nov/2010:18:56:24 +0530] "GET /dev60cgi/f60cgi HTTP/1.1" 200 40607
Thanks,
Manikandan

How to connect oracle application server portal to MS access DataBase

Hello,
I am facing one problem here.
Our client is having their database in MS access and they want to implement the oracle application server portal for their organization then how to connect the MS access DB to oracle Application server portal

There is a worked example of how to connect oracle to an Excel spreadsheet, which is easily modifyable to read from an Access Database.
http://asktom.oracle.com/pls/ask/f?p=4950:61:::::P61_ID:4406708207206#18830681837358
I had some concurrency problems - only one person could use the link at any one time, so I used it to load the data into oracle tables.
Tak

Configuring Apache HTTP Server with Oracle Weblogic Server plugin

Hello friends,
I have a scenario of OIM 9.1.0.2 on Oracle Application Server 11g and Weblogic Server Apache HTTP Server.
Oracle WebLogic Server is configured in cluster (node1 and node2), also use the Oracle Weblogic Server plugin for integration with Apache.
One of the tests is to lose one of the nodes for the apache plugin redirects the node that has less overhead.
When the mode is node1 and node2 stop start mode and try to access the management console of Oracle Identity Manager, the plugin sometimes redirects to the other active node, and on another occasion shows the oracle management console identity manager without the colors of the basic look and feel.
Deputy of the Apache HTTP Server log, do you expect your comments to solve this case?
*************************************************log****************************************************
Server Details are:
OrigHostInfo [192.168.1.200]
isOrigHostInfoDNS [0]
Host [192.168.1.200]
Port [7002]
SecurePort [7004]
Mon Jan 30 22:10:43 2012 <2600713279794431> Initializing lastIndex=0 for a list of length=1
Mon Jan 30 22:10:43 2012 <2600713279794431> initJVMID: Trying to locate Primary or Secondary using SrvrInfo with JVMID [-872106207]
Mon Jan 30 22:10:43 2012 <2600713279794431> initJVMID: Found Primary 192.168.1.200:7002:7004
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2600713279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2600713279794431> getPreferredFromCookie: Found 1 servers
Mon Jan 30 22:10:43 2012 <2600713279794431> attempt #0 out of a max of 5
Mon Jan 30 22:10:43 2012 <2600713279794431> trying connect to PRIMARY '192.168.1.200'/7002/7004
Mon Jan 30 22:10:43 2012 <2600713279794431> getPooledConn: No more connections in the pool for Host[192.168.1.200] Port[7002] SecurePort[7004]
Mon Jan 30 22:10:43 2012 <2600713279794431> New SSL URL: match = 0 oid = 22
Mon Jan 30 22:10:43 2012 <2600713279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2600713279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2600713279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2600713279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2600713279794431> Local Port of the socket is 39186
Mon Jan 30 22:10:43 2012 <2600713279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2600713279794431> created a new connection to preferred server '192.168.1.200/7004' for '/xlWebApp/images/spacer.gif', Local port:39186
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: CA certificate missing basicConstraints, validation failed
Mon Jan 30 22:10:43 2012 <2600713279794431> ERROR: SSLWrite failed
Mon Jan 30 22:10:43 2012 <2600713279794431> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2600713279794431> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2600713279794431> Marking 192.168.1.200:7004 as bad
Mon Jan 30 22:10:43 2012 <2600713279794431> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0, line 794 of ../nsapi/URL.cpp]: at line 3160
Mon Jan 30 22:10:43 2012 <2600713279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431>
================New Request: [GET /images/cab.gif HTTP/1.1] =================
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: SSL is configured
Mon Jan 30 22:10:43 2012 <2598413279794431> SSL Main Context not set. Calling InitSSL
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: SSL configured successfully
Mon Jan 30 22:10:43 2012 <2598413279794431> Using Uri /images/cab.gif
Mon Jan 30 22:10:43 2012 <2598413279794431> After trimming path: '/images/cab.gif'
Mon Jan 30 22:10:43 2012 <2598413279794431> adding prepend path: /xlWebApp/
Mon Jan 30 22:10:43 2012 <2598413279794431> The final request string is '/xlWebApp/images/cab.gif'
Mon Jan 30 22:10:43 2012 <2598413279794431> Host extracted from serverlist is [192.168.1.100]
Mon Jan 30 22:10:43 2012 <2598413279794431> Host extracted from serverlist is [192.168.1.200]
Mon Jan 30 22:10:43 2012 <2598413279794431> Initializing lastIndex=0 for a list of length=2
Mon Jan 30 22:10:43 2012 <2598413279794431> getListNode: created a new server node: id='192.168.1.100:7004,192.168.1.200:7004' server_name='OIMSERVER', port='443'
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferred: availcookie=[JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> Found cookie from cookie header: JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE
Mon Jan 30 22:10:43 2012 <2598413279794431> Parsing cookie JSESSIONID=6RGCPnbTFRG7LBrTRpFnv1QLnQHkxkqr4pjGhhGJyrJWJ1rv86NK!-872106207!NONE
Mon Jan 30 22:10:43 2012 <2598413279794431> getpreferredServersFromCookie: [-872106207!NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> primaryJVMID: [-872106207]
secondaryJVMID: [NONE]
Mon Jan 30 22:10:43 2012 <2598413279794431> No of JVMIDs found in cookie: 1
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Start Position is 0, listLen is 2
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Either JVMIDs not set or they are stale. Will try to get JVMIDs from WLS
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Iterating SrvrList from position 0
Mon Jan 30 22:10:43 2012 <2598413279794431> ======internal request /bea_wls_internal/WLDummyInitJVMIDs======
initJVMID: Trying Host[192.168.1.100] Port[7004] SecurePort[7004] useSSL [1] ioTimeout [30] socketTimeout [2]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 0
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 146, msg 'Connection refused'
Mon Jan 30 22:10:43 2012 <2598413279794431> Error connecting to host 192.168.1.100:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> *******Exception type [CONNECTION_REFUSED] (Error connecting to host 192.168.1.100:7004 errno = 146) raised at line 1723 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Failed to retrieved JVMID for 192.168.1.100:7004:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Marked server as BAD
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2598413279794431> ======internal request /bea_wls_internal/WLDummyInitJVMIDs======
initJVMID: Trying Host[192.168.1.200] Port[7004] SecurePort[7004] useSSL [1] ioTimeout [30] socketTimeout [2]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 0
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2598413279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2598413279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2598413279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2598413279794431> Local Port of the socket is 39188
Mon Jan 30 22:10:43 2012 <2598413279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Certificate validation succeeded
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Negotiated to cipher: 3
Mon Jan 30 22:10:43 2012 <2598413279794431> SSLWrite sent 171
Mon Jan 30 22:10:43 2012 <2598413279794431> SSLWrite completed, sent 171
Mon Jan 30 22:10:43 2012 <2598413279794431> Reader::fill() SSLRead returned: 0 290
Mon Jan 30 22:10:43 2012 <2598413279794431> URL::parseHeaders: CompleteStatusLine set to [HTTP/1.1 404 Not Found]
Mon Jan 30 22:10:43 2012 <2598413279794431> URL::parseHeaders: StatusLine set to [404 Not Found]
Mon Jan 30 22:10:43 2012 <2598413279794431> parsed all headers OK
Mon Jan 30 22:10:43 2012 <2598413279794431> Parsing cluster list: -872106207!182584374!7002!7004
Mon Jan 30 22:10:43 2012 <2598413279794431> parseJVMID: Parsing JVMID '-872106207!182584374!7002!7004'
Mon Jan 30 22:10:43 2012 <2598413279794431> parseJVMID: Actually parsing '-872106207!182584374!7002!7004'
Mon Jan 30 22:10:43 2012 <2598413279794431> ServerInfo struct for JVMID '-872106207' populated
Server Details are:
OrigHostInfo [192.168.1.200]
isOrigHostInfoDNS [0]
Host [192.168.1.200]
Port [7002]
SecurePort [7004]
Mon Jan 30 22:10:43 2012 <2598413279794431> Initializing lastIndex=0 for a list of length=1
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Trying to locate Primary or Secondary using SrvrInfo with JVMID [-872106207]
Mon Jan 30 22:10:43 2012 <2598413279794431> initJVMID: Found Primary 192.168.1.200:7002:7004
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Mon Jan 30 22:10:43 2012 <2598413279794431> .....internal request /bea_wls_internal/WLDummyInitJVMIDs.....processed
Mon Jan 30 22:10:43 2012 <2598413279794431> getPreferredFromCookie: Found 1 servers
Mon Jan 30 22:10:43 2012 <2598413279794431> attempt #0 out of a max of 5
Mon Jan 30 22:10:43 2012 <2598413279794431> trying connect to PRIMARY '192.168.1.200'/7002/7004
Mon Jan 30 22:10:43 2012 <2598413279794431> getPooledConn: No more connections in the pool for Host[192.168.1.200] Port[7002] SecurePort[7004]
Mon Jan 30 22:10:43 2012 <2598413279794431> New SSL URL: match = 0 oid = 22
Mon Jan 30 22:10:43 2012 <2598413279794431> Connect returns -1, and error no set to 150, msg 'Operation now in progress'
Mon Jan 30 22:10:43 2012 <2598413279794431> EINPROGRESS in connect() - selecting
Mon Jan 30 22:10:43 2012 <2598413279794431> Setting peerID for new SSL connection
Mon Jan 30 22:10:43 2012 <2598413279794431> 0ae2 0436 0000 1b5c ...6...\
Mon Jan 30 22:10:43 2012 <2598413279794431> Local Port of the socket is 39189
Mon Jan 30 22:10:43 2012 <2598413279794431> Remote Host 192.168.1.200 Remote Port 7004
Mon Jan 30 22:10:43 2012 <2598413279794431> created a new connection to preferred server '192.168.1.200/7004' for '/xlWebApp/images/cab.gif', Local port:39189
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: CA certificate missing basicConstraints, validation failed
Mon Jan 30 22:10:43 2012 <2598413279794431> ERROR: SSLWrite failed
Mon Jan 30 22:10:43 2012 <2598413279794431> SEND failed (ret=-1) at 793 of file ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> *******Exception type [WRITE_ERROR_TO_SERVER] raised at line 794 of ../nsapi/URL.cpp
Mon Jan 30 22:10:43 2012 <2598413279794431> Marking 192.168.1.200:7004 as bad
Mon Jan 30 22:10:43 2012 <2598413279794431> got exception in sendRequest phase: WRITE_ERROR_TO_SERVER [os error=0, line 794 of ../nsapi/URL.cpp]: at line 3160
Mon Jan 30 22:10:43 2012 <2598413279794431> INFO: Closing SSL context
Thanks

"One of the tests is to lose one of the nodes for the apache plugin redirects the node that has less overhead."
Note that the plug-in does a round robin load balancing, for example, in the case of three server (1,2,3) it does 1-2-3-1-2-3-1...
with server 3 going down it does 1-2-1-2-1...
An example configuration (with SSL off) looks as follows:
LoadModule weblogic_module   "/home/oracle/weblogic12.1.1/apache/modules/mod_wl.so"
<IfModule weblogic_module>
     ConnectTimeoutSecs 10
     ConnectRetrySecs 2
     DebugConfigInfo ON
     WLSocketTimeoutSecs 2
     WLIOTimeoutSecs 300
     Idempotent ON
     FileCaching ON
     KeepAliveSecs 20
     KeepAliveEnabled ON
     DynamicServerList ON
     WLProxySSL OFF
</IfModule>
<Location /LoadTest6>
     SetHandler weblogic-handler
     WebLogicCluster 172.31.0.175:7002,172.31.0.113:7003
</Location>Also see the complete example here: http://middlewaremagic.com/weblogic/?p=7795
"the plugin sometimes redirects to the other active node"
This is somewhat strange, do you have session binding turned off?
"and on another occasion shows the oracle management console identity manager without the colors of the basic look and feel."
This could happen due to mime types (not really sure just a hunch). Here is a general story on this concept: https://developer.mozilla.org/en/Properly_Configuring_Server_MIME_Types
and the apache module: http://httpd.apache.org/docs/2.2/mod/mod_mime.html

Configuring SSL in Oracle Apps 11.5.10.2

Hi,
I am in the process of configuring SSL in oracle apps 11.5.10.2.
I am a bit confused with the Note ID: 123718.1. Could you please clarify me on the below things?
1. SSL can be implemented at three levels,
(a) Oracle Web/Apache Server Level
(b) Oracle Form Server Level
(c) Oracle Database Level
Can Implement SSL on any one or any two component levels? As per Note:123718.1, we MUST configure SSL for both the Oracle HTTP Server and Oracle Forms Level and these cannot be configured independently.
2. As per the Note ID: 123718.1, Option 2.1. Certificate Provisioning for Oracle HTTP Server
Point b in point 2 says to execute "$OPENSSL_TOP/bin/openssl sha1 or* > $HOME/.rnd"
But which will be the OPENSSL_TOP?
Please advise on these above two queries.
Thanks in advance
Regards,
Sravan

Thanks Hussien,
I have completed SSL configuration at all level including database. Forms are not getting launched. I am getting below error in the Java Console.
Java Plug-in 1.6.0_23
Using JRE version 1.6.0_23-b05 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\sdalav
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>
proxyHost=null
proxyPort=0
connectMode=HTTPS
Exception in thread "thread applet-oracle.forms.engine.Main-2" java.lang.NoClassDefFoundError: oracle/security/ssl/OracleSSLSocketFactory
     at oracle.forms.net.HTTPSStream.<init>(Unknown Source)
     at oracle.forms.net.HTTPConnection.connect(Unknown Source)
     at oracle.forms.engine.Runform.initConnection(Unknown Source)
     at oracle.forms.engine.Runform.startRunform(Unknown Source)
     at oracle.forms.engine.Main.createRunform(Unknown Source)
     at oracle.forms.engine.Main.start(Unknown Source)
     at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
     at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.ClassNotFoundException: oracle.security.ssl.OracleSSLSocketFactory
     at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
     at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
     at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
     at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
     at java.lang.ClassLoader.loadClass(Unknown Source)
     ... 8 more
Caused by: java.io.IOException: open HTTP connection failed:https://sandispa.bp.com:8443/OA_JAVA/oracle/security/ssl/OracleSSLSocketFactory.class
     at sun.plugin2.applet.Applet2ClassLoader.getBytes(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader.access$000(Unknown Source)
     at sun.plugin2.applet.Applet2ClassLoader$1.run(Unknown Source)
     at java.security.AccessController.doPrivileged(Native Method)
     ... 13 more
Thanks,
Sravan

Https ssl config Oracle AS, webcache, portal...almost works

Similar Messages

Maybe you are looking for