HTTPS + T3. Is it possible?

Hi All,
This is a question rather for "Weblogic - Security" space, but I have no rights to start discussion there.
WLS 12.1.2
To meet the requirement "Switch to HTTPS, but leave t3" the following steps are performed in admin console for managed server (where the apps reside)
Disable default listen port 7280 (http and t3)
Enable default SSL listen port 7282 (https and t3s)
In order to enable t3, create a custom Channel
Protocol: t3
Port: 7280
“HTTP Enabled for This Protocol“ flag is set to false
In this case, we have issues with deployment of applications.
The deployer fails to start/stop the apps.
The reason is the deployer still tries to send messages to managed server via http.
I turned on the deployment debugging and see the following messages in admin server log.
…<DeploymentServiceTransportHttp> …<HTTPMessageSender: IOException: java.io.EOFException: Response had end of stream after 0 bytes when making a DeploymentServiceMsg request to URL: http://localhost:7280/bea_wls_deployment_internal/DeploymentService>
… <DeploymentServiceTransportHttp> …<sending message for id '-1' to 'my_srv' using URL 'http://localhost:7280' via http>
If I disable the custom t3 Channel, everything is ok. The deployer sends messages to https://localhost:7282, as expected. But in this case, we have no t3 available.
Any help is much appreciated.
Thanks,
Illia

For communicating over http instead of t3 you need to check "Enable Tunnling"
option. In weblogic 7.0 you can reach there by following this path.
mydomain> Servers> myServer >Connections tab>Protocols tab .
"Michael" <[email protected]> wrote:
>
I changed the URL using https:// instead of t3://. So, Weblogic should
tunnel t3
through https.
But instead I get the following error.
javax.naming.CommunicationException.
Root exception is java.net.ConnectException: http://behux101:7001: Bootstrap
unable
to get a http connection to behux101/20.39.192.39
Property settings on server:
weblogic.system.listenPort=7001
weblogic.allow.execute.weblogic.servlet=everyone
weblogic.httpd.enable=true
Is there a property to tell Weblogic that it has to listen http and not
t3.

Similar Messages

Is it possible to redirect https traffic to http in CSM?

Hello,
I have a requirement to redirect https traffic to http. Is it possible to do that in the CSM?
In the CSM documentation all redirect examples/config etc refer only to http traffic so I am wondering if the other way around is supported as well.
BTW I have already tried it on the CSM and it is not working. Everytime I try to reach the https url I get "ERROR_INTERNET_SECURITY_CHANNEL_ERROR" on http watch.
Thanks for any help offered.
Murtaza

I don't have a config in hands for this.
I have done it before and know this is feasible.
The redirect is here :
http://www.cisco.com/en/US/products/hw/modules/ps2706/products_configuration_example09186a00802877f6.shtml
Just change the vip to be only accessible by the SSLM.
Create the appropriate redirect vserver.
On the SSLM, send the decrypted traffic to the vip address and port.
Just as if the Vip was a server.
Gilles.

PI 7.11 - Sync HTTP receiver adapter with response XML file

Hi
We have a File to HTTP scenario in which we need a sync HTTP interface. We send a file to the HTTP address and receive a XML acknowledge. As I read in this forum: sync HTTP interfaces are not possible with the "standard" HTTP adapter. So I found an entry which recommended to use the SOAP adapter instead.
I configured it:
- Do Not Use SOAP envelope
- modules: RequestResponseBeans, CallSapAdapter, ResponseOneWayBean
If i use this scenario, i get following error in the RWB - Message Display Tool:
Delivering the message to the application using connection SOAP_http://sap.com/xi/XI/System failed, due to: com.sap.engine.interfaces.messaging.api.exception.MessagingException: java.lang.NullPointerException: while trying to invoke the method com.sap.engine.interfaces.messaging.api.Message.getMessageId() of an object loaded from local variable 'message1'.
I testet this scenario using CURL and it worked properly. Should this kind of scenario work with the SOAP adapter or do I need to buy/develop an own adapter? Is in NW7.3 possible to configure sync HTTP scenarios?
Thanks in advance
Michael

Hi
actually i use a simple HTTP receiver CC with the setting "XI Payload in HTTP Body" to send a XML datafile to a webpage (java servlet). This part works fine by now. But, this servlet would also send back a status information to the state of the received datafile, which I like to catch.
e.g. HTTP response from the servlet (catched using CURL):
HTTP/1.0 403 Forbidden
Server: Apache-Coyote/1.1
X-Powered-By: Servlet 2.4; JBoss-4.3.0.GA (build: SVNTag=JBPAPP_4_3_0_GA date=200801031548)/Tomcat-5.5
Set-Cookie: JSESSIONID=OALHMomjR9TVgIATi8SrPQ**.ajp13_ls_1; Path=/ls
Content-Type: text/xml
Date: Tue, 06 Mar 2012 16:19:56 GMT
X-Cache: MISS from proxy.xxxx.com
Via: 1.0 proxy.xxxx.com:xxxx (http_scan/4.0.2.6.19)
Proxy-Connection: close
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><!DOCTYPE transportordersfromls [ <!ELEMENT transportordersfromls (userid, clntid, msgid, (transportorderfromls+ | error))> <!ATTLIST transportordersfromls vers CDATA #REQUIRED> <!ELEMENT userid (#PCDATA)> <!ELEMENT clntid (#PCDATA)> <!ELEMENT msgid (#PCDATA)> <!ELEMENT transportorderfromls (refid, status)> <!ELEMENT refid (#PCDATA)> <!ELEMENT status (ok | error+)> <!ELEMENT ok EMPTY> <!ELEMENT error EMPTY> <!ATTLIST error reason (XMLError | SystemNotAvailable | ApplicationError | OTHER) #REQUIRED message CDATA #REQUIRED> ]>
<transportordersfromls vers="1.0">
    <userid/>
    <clntid>XXXXX</clntid>
    <msgid>0</msgid>
    <error reason="OTHER" message="Access denied"/>
</transportordersfromls>
Michael

How do I access https from a non administrator account?

I have my son set up as a user on the home iMac. I enabled parental controls. After installing 10.6.8, his account was unable to access https. I disabled parental controls and restarted. He was still unable to access https. I gave him administrator rights then he was able to access https. I do not want him to have administrator rights and I want to enable parental controls. I also want him to have access to gmail which requires https. Is this possible or was this disabled as part of the update? Note - this has worked fine under 10.5 and 10.6.

Even easier, enable parental controls like you wanted to, then allow unrestricted access to web sites, then use DNS IP addresses 208.67.222.222 (220.220 for 2nd) onthe computer for DNS, then pay $10/yr for an opendns.com account where you restrict access to unwanted sites from your house. that easy.

Plain HTTP Adapter (XML return without namespace)

Hello Experts,
I'm very new at XI.
I'm using XI 7.0 SP9.
I wanna make interface with public website using plain HTTP adapter.
The receiver url is
http://openapi.naver.com/search?key=cdb64b1f218b55acbb73105b3b6f68a9&query=news&target=rank
It returns XML like
<?xml version="1.0" encoding="UTF-8" ?>
<result>
<item>
    <R1>
        <K>CHOICE</K>
        <S>new</S>
        <V>0</V>
    </R1>
</item>
</result>
How I can specify namespace and root document type ?
I learned that I can specify namespace and root document type in JDBC communication channel.
In plain HTTP, Is there any possibility to specify namespace like JDBC?

Ji,
look at this it will help u.
/people/prasad.ulagappan2/blog/2005/06/29/java-mapping-part-i
/people/prasad.ulagappan2/blog/2005/06/29/java-mapping-part-ii
/people/prasad.ulagappan2/blog/2005/06/29/java-mapping-part-iii
/people/stefan.grube/blog/2006/10/23/testing-and-debugging-java-mapping-in-developer-studio
/people/alessandro.guarneri/blog/2007/03/25/xi-java-mapping-helper-dom
Sreeram Reddy

Plain HTTP adapter fort HTTPs

Hi guys,
I use receiver plain HTTP adapter for sending SOAP request. Followinf parameters have tu be entred:
Addressing Type: URL Address
Target Host: <host>
Service Number: <port>
Path Prefix: <path>
Then final address is generated:
http://<host>:<port>/<path>
It's working fine if I use http protocol.
Now I need to send SOAP request to address https://<host>/<path>. I don't know number of port where SSL communication's running.
Is it possible to enforce using of https protocol instead of http? Is it possible to enter empty port number? Or do you have any other idea how to pass around this problem?
Thank you in advance for every advice!
Regards
Zbynek

>>Is it possible to enforce using of https protocol instead of http?
Instead of using URL Addressing option, you need to start using HTTP Destination option. An RFC destination type G should then be created where the similar details of hostname and path should be provided.
>Is it possible to enter empty port number?
Yes it could be empty, but you need to confirm it from the receiver party that would they be able to receive https request or not if no port is provided. This would depend upon the type of implementation they have at their end.
Regards,
Prateek

Publishing PL/SQL package as HTTPS

Hi,
I would like to publish a PL/SQL package procedue as a web service. I found a good article on doing this here: http://www.oracle.com/technology/obe/obe1013jdev/10131/wsfromplsqlpackage/devwsfrom%20plsql.htm
What I would like to know is how to make this web service to function on HTTPS protocol instead of using HTTP. Is it possible?
Regards, Tamas

Tamas,
Yes, it is possible. The following article explains this - it creates a WS based on a Java class, but the steps to secure the WS remain the same for a PL/SQL WS nevertheless.
http://www.oracle.com/technology/products/jdev/101/howtos/securews/index.html
HTH,
Yogesh

Calling an https web service fro Oracle 9i database

I have seen in OTN as well metalink how to call an external web service
From inside PL/SQL functions. Examples use http URL.
My requirements are however to call a web service using https.
Is it possible to do that in Oracle9i. If yes, how? Any pointers
Will be appreciated.
I have read utl_http package can call https. It seems to require Oracle Wallets (I guess that requires Oracle advanced security option).
I will like to get any pointers to call an https web service within Oracle9i.
I will also like to know options in Oracle10g. Right now, I am only interested in calling an external service and not developing one of my own.
Thanks,

With 10g database, the basic steps were posted in
Re: howto callout with https

Https with login page

Hi,
How can I make the default APEX login page secure (https)? The other pages will remain http. Is this possible? or I need to make the whole application https.
I think, in future APEX releases, it will benefit if there are options for declarative control over http/https in the same application.
Thanks.
Andy

Hi Andy,
just having HTTPS for the login page is insecure, because if you use HTTP for all other pages your session cookie can be stolen by a man-in-the-middle attack. Just remember a year or two ago when somebody released a Firebug plug-in to steal the session cookie for Facebook, Twitter, ... when those user are on the same WiFi.
Regards
Patrick
My Blog: http://www.inside-oracle-apex.com
APEX Plug-Ins: http://apex.oracle.com/plugins
Twitter: http://www.twitter.com/patrickwolf

Send parameters to XI by HTTP

Hi friends,
I would like to offer an interface in XI to establish a synchronous communication for adapters HTTP or XI.
Would need to run the service in XI from a URL like:
http://host_xi:port_xi/path_xi/service_xi?parameter1=X&parameter2=Y&...
And capture in XI a message with the parameters through a HTTP request to the URL above.
I have seen examples of this, but sending the message in XML format from the client HTTP.
Is it possible to do what I need?
Thanks,
Jose.

Hi friends,
I think I already have the solution. To enable communication HTTP and send the parameters by GET method from the sender system, performed as follows:
With a BSP application is able to capture the parameters by GET method.
In a Controller of the BSP is assign the class controller that processes requests HTTP. This class inherits from the controller class CL_BSP_CONTROLLER2.
It reimplement the method DO_REQUEST, and this prepares the URL with the necessary parameters and XML Payload to be sent to Integration Engine of SAP XI.
Thank you all for the help,
Jose.
Edited by: Jose Mª Mudarra Lara on Jun 4, 2008 11:50 AM

How to provide credentials for outbound HTTP connection

Hi all,
My outbound request requires basic authentication How to provide credentials within xsjs for outbound request.
My .xshttpdest file has authType=basic:
host = "host";
port = 80;
description = "decription";
pathPrefix = "/geoserver/";
authType = basic;
useProxy = false;
proxyHost = "proxy";
proxyPort = 8080;
timeout = 0;
Correspondent xsjs class create request:
var request = new $.net.http.Request($.net.http.GET, "");
Is any possibility to provide request with credentials?
Thanks.
Slava

You provide credentials by configuring for the HTTP destination via the XSAdmin tool. Directly supplying credentials in the XSJS code itself would not be sure.

Restricting HTTP Port on J2EE Engine

I have to disable the HTTP Port on Web AS J2EE Engine and allow connections only through https.
Is it possible to do so ? If yes, how ?
Thanks for the help in advance.

Yes, It is definitely possible.
You will have to login to Visual Administrator, and then under Service, go to the HTTP Provider details. You will find a value specifying both http and https values (if already configured). You can remove the http part, which will allow you to remove the http access.
Let me know if you face problems with this.

Upload XML data using XSQL and HTTP Post ?

Upload XML data using XSLQ and HTTP Post: is that possible ?
An xsql contains an <xsql:insert-request table="aTable">
The XML data file follows the ROWSET/ROW paradigm.
What is the HTML form to upload the xml file to the XSQL ?
I tried:
<form action="myXSQL.xsql" method="POST" ENCTYPE="multipart/form-data">
XML data file to upload: <input type="file">
<input type="submit">
</form>
But the answer of myXSQL is:
<xsql-status action="xsql:insert-request" result="No posted document to process" />
Where is the problem ?
Thank you.

Hello,
You are posting your XML file as a parameter therefore you should use the <xsql:insert-params/> tag, not the <xsql:insert-request/>. The insert-request can only handle data not posted via a parameter.
Usage:
<form action="myXSQL.xsql" method="GET" ENCTYPE="multipart/form-data">
XML data file to upload: <input type="file" name="myXML">
<input type="submit">
</form>
in combination with
<xsql>
<xsql:insert-params name="myXML" table="your table"/>
</xsql>
2 remarks:
I was not able to succesfully POST the form. The answer was <xsql-status action="xsql:insert-request" result="No posted document to process" />. With GET is was succesfull.
Second, if you use MSInternet explorer 5 or higher use could post the XML directly (not aw parameter) using an ActiveX object.
Regards,
Harm Verschuren

Can any one provide an web service technique that supports http post...?

hi,
i'm working with servlets. i need a webservice technique that supports http-post.
is it possible to work http-post using servlet & axis2 webservice....?

hi, if you are about to use axis2, consider trying JAXWS since its very fast to startup, it will then take care of everything what is beyond your business objects (so transforming in into XML etc) moreover, you're going to use web services, thus you ll be working with SOAP, which will wrap your business representation...
here a sample for a time -service. The Date object will automatically be trasinformed into appropriate xsd type by the axis2 engine
@WebService
public class Clock {
public Date getCurrentTime(){
return new Date();
}

SOAP https transport ?

Hi all,
We want to access to web services in WLS6.1 using SOAP https (dynamic SSL)
transport (not http). Is it possible? If possible, please describe this
process.
Thanks,
Alex Jurcenko

Not sure if your still looking for a solution to your problem but if you set the protocol attribute in your wsgen ant task to "https" instead of the
default "http", your generated wsdl file will use the correct protocol.
Ronny.
Alex Jurcenko wrote:
Hi,
That means that we can use https protocol from client side to get WSDL description
only?
But when we will see the WSDL file we find that SOAP protocol is http.
Client side:
WebServiceProxy proxy = (WebServiceProxy)context.lookup("https://localhost:7002/pricer/statelessSession.PricerHome/statelessSession.PricerHome.wsdl"
WSDL file:
- <service name="Pricer">
<documentation>todo</documentation>
- <port name="PricerPort" binding="tns:PricerBinding">
<soap:address location="http://localhost:7002/pricer/priceruri" />
</port>
</service>
How to make SSL SOAP call using WSDL, that means that WSDL protocol is SSL(https)
and SOAP call is SSL(https) too ?
Please help.
Thanks,
alex
"Jeff Crilly" <[email protected]> wrote:
yes it is, as long as you dont want WLS6 to be the client with client
authentication.
We have this working. Just use https in the url when connecting from
the
remote client.
(I currently have SOAP over SSL between WLS5.1sp6 and WLS6sp2. However
I need client authentication to also work.)
"Alex Jurcenko" <[email protected]> wrote in message
news:[email protected]..
Hi all,
We want to access to web services in WLS6.1 using SOAP https (dynamicSSL)
transport (not http). Is it possible? If possible, please describethis
process.
Thanks,
Alex Jurcenko

HTTPS + T3. Is it possible?

Similar Messages

Maybe you are looking for