Oracle10g How to configure HTTPS to access EM in Linux

I have installed Oracle10g on Linux Enterprise Server on XEON-based server.
I can run Oracle Enterprise Manager (EM) via
http://127.0.0.1:5500/em
Since EM will be unsafe to run on the Internet without SSL, does any one knows how to configure and enable Oracle10g to enable SSL access? Which port does it use?

1. Stop dbcosole
emctl stop dbconsole2. execute command (as following) and fill all questions
emctl secure dbconsole3. Start dbconsole
emctl start dbconsoleNow connect to https://<ip address>:5500/em
Since EM will be unsafe to run on the Internet without SSLIt's generally bad idea to "share" administration site over internet (unless you don't have some VPN tunnel), because if you have weak passwords for DB users then you are asking for problems.

Similar Messages

How to configure HTTPS in the receiver HTTP adapter ?

Hi Guys,
How to configure HTTPS in the HTTP receiver adapter and where i need to mention the QOS=BE in the receiver adpter.
any suggestions or help would be appreciated
Thanks,
Srini

You would need make sure that SSL is enabled on the ABAP stack . I rememver seeing a blog on SDN that shows how this is to be done.
Once you have SSL enabled in the ABAP stack ( you would also need to install the cryptographic libraries as a part of this exercise) , you would be able to use HTTPS and also provide the necessary digital certificates etc.
I have tried this with SOAP adapters etc but havent with the HTTP adapter but I dont see why this should be any different.
Regards,
Bhavesh

How to configure Https in Project server 2010.

HI,
Can i any one help me,
How to configure Https in Project server 2010.
My server farm is 1.Test1(App & Wfe) 2. Test2(App & Wfe)
Both are load balanced wit NLB as abc.hyd.in
DO i need to Install certificate in two servers Test1 & Test2 or one server is enough ?
Can any one please provide me a link to configure Https for project server 2010 for Two Farms Servers.
Thank You, Kumar KSV

There is no special configuration for Project Server to have the IIS enabled, it follows the typical sharepoint SSL enablement, we might need some mor edetails on how your NLB is done is it hardware based, software based ? it all depends how you want
to architecht the system, you can enable the Https either on NLB or WFE, again depending upon how you want to enable it, you will need to install the certificates on both WFE or on NLB
Follow the blog below to configure the SSL:
http://epmxperts.wordpress.com/2011/03/05/extend-same-project-web-app-instance-for-different-protocol-authentication-mechanism/
http://blogs.msdn.com/b/sowmyancs/archive/2010/02/12/how-to-enable-ssl-on-a-sharepoint-web-application.aspx
http://www.sharepointconfig.com/2010/03/configuring-a-sharepoint-website-to-allow-ssl-connections/
Thanks | epmXperts | http://epmxperts.wordpress.com

How to configure http server in oracle 10g

Hi
I am configuring apex 3.2.1 on oracle 10g 10.2.0 I need help how to configure http server bec i did not find any Apache file or folder in 10g if it is then how .
Arshad

Hi
I use to configure only this in $ORACLE_HOME/forms/server/forms.conf (and restart ias):
AddType application/x-orarrp rrp_
AddType application/x-orarrp-text rrpt
AddType application/x-orarrp-ps rrpp
AddType application/x-orarrp-pdf rrpa
AddType application/x-orarrp-rtf rrpr
AddType application/x-orarrp-html rrph

How to configure the wifi access with specific time slot for kids?

how to configure the wifi access with specific time slot for kids?

Which model of AirPort base station do you have? Which version of OS X is your MacBook Pro running?
Wi-Fi access can be limited using the Timed Access feature of the AirPort routers. You would do so using the AirPort Utility.

How to Configure HTTPs sender communication in XI

Hi,
I have a request for new interface setup, in which i need to configure HTTPs sender communication from a B2B server to SAP system. Scenario is to receive XML 0rders from HTTPs B2B system and convert to Idoc and post it to SAP.
Please could some one help on what needs to be done in XI for receiving XML order files from a HTTPs connection and what further needs to be done for processing to Idoc.
Thanks in advance,

HI,
For testing purpose you can use the HTTP client and paste your payload.
Refer the below pdf for HTTP client what you do is copy and paste the code in note pade and save as .html file.
This link gives you a sample HTML code to create HTTP Client:
https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/66dadc6e-0a01-0010-9ea9-bb6d8ca48cc8
Thnx
Chirag Gohil

How to configure PerformancePoint to access SSAS hosted in different domain.

I have Sharepoint 2013 installed in a demo environment with a domain say ABC. I have username and password of an account say DEC\sqlread, having only read permission in SSAS (2008 R2) production environment, which is hosted on different domain. How do I
configure Performance point to use that read account (DEC\sqlread) of SSAS whenever any user of ABC domain uses performance point reports.
I don't have much permission in SSAS production environment to configure things, but I have admin access to demo environment.

Hi Dev,
According to your description, you want to configure PerformancePoint to connect SSAS using a read account.
You can configure the Unattended Service Account for the PerformancePoint Services:
Here is a good blog you can refer to:
http://www.c-sharpcorner.com/UploadFile/a9d961/create-an-analysis-service-data-source-connection-using-shar/
Reference:
http://technet.microsoft.com/en-us/library/jj819321(v=office.15).aspx
Thanks,
Eric
Forum Support
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support,
contact [email protected]
Eric Tao
TechNet Community Support

How to configure CA for access to a Web Service from an app deployed in WL

Hi everyone.
I have an app deployed in a WLS (10.3). This app acts like a web service client and works correctly (spring + cxf). The web service is provided by an external company and now they want to switch to https. They are using a self signed certificate. My company's support staff told me that they already configured the domain's trusted key store but the app fails to invoke the WS with the following error:
2010/12/03 13:06:12.314 [ERROR] [org.springframework.scheduling.quartz.SchedulerFactoryBean#0_Worker-5] [ar.com.link.gp.services.impl.WebserviceConfirmacionServiceImpl - 55] - Error - informarPagos
javax.xml.ws.WebServiceException: Could not send Message.
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:135)
at $Proxy549.confirmaPago(Unknown Source)
at ar.com.link.gp.services.impl.WebServiceClientServiceImpl.confirmaPago(WebServiceClientServiceImpl.java:103)
at ar.com.link.gp.services.impl.WebServiceClientServiceSinConceptoDecorator.confirmaPago(WebServiceClientServiceSinConceptoDecorator.java:33)
at ar.com.link.gp.services.impl.WebserviceConfirmacionServiceImpl.informarPagos(WebserviceConfirmacionServiceImpl.java:50)
at ar.com.link.gp.services.impl.ConfirmacionServiceImpl.procesarConfirmaciones(ConfirmacionServiceImpl.java:132)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:307)
at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:182)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:149)
at ar.com.link.logging.interceptor.LoggingInterceptor.invoke(LoggingInterceptor.java:74)
at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:171)
at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204)
at $Proxy514.procesarConfirmaciones(Unknown Source)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.springframework.util.MethodInvoker.invoke(MethodInvoker.java:276)
at org.springframework.scheduling.quartz.MethodInvokingJobDetailFactoryBean$MethodInvokingJob.executeInternal(MethodInvokingJobDetailFactoryBean.java:260)
at org.springframework.scheduling.quartz.QuartzJobBean.execute(QuartzJobBean.java:86)
at org.quartz.core.JobRunShell.run(JobRunShell.java:203)
at org.quartz.simpl.SimpleThreadPool$WorkerThread.run(SimpleThreadPool.java:520)
Caused by: javax.net.ssl.SSLException: Connection has been shutdown: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkEOF(SSLSocketImpl.java:1239)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.checkWrite(SSLSocketImpl.java:1251)
at com.sun.net.ssl.internal.ssl.AppOutputStream.write(AppOutputStream.java:43)
at java.io.BufferedOutputStream.flushBuffer(BufferedOutputStream.java:65)
at java.io.BufferedOutputStream.flush(BufferedOutputStream.java:123)
at java.io.FilterOutputStream.flush(FilterOutputStream.java:123)
at weblogic.net.http.HttpURLConnection.writeRequests(HttpURLConnection.java:154)
at weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:238)
at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.handleHeadersTrustCaching(HTTPConduit.java:1951)
at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.onFirstWrite(HTTPConduit.java:1903)
at org.apache.cxf.io.AbstractWrappedOutputStream.write(AbstractWrappedOutputStream.java:42)
at org.apache.cxf.io.AbstractThresholdOutputStream.write(AbstractThresholdOutputStream.java:69)
at org.apache.cxf.transport.http.HTTPConduit$WrappedOutputStream.close(HTTPConduit.java:1969)
at org.apache.cxf.io.CacheAndWriteOutputStream.postClose(CacheAndWriteOutputStream.java:47)
at org.apache.cxf.io.CachedOutputStream.close(CachedOutputStream.java:188)
at org.apache.cxf.transport.AbstractConduit.close(AbstractConduit.java:66)
at org.apache.cxf.transport.http.HTTPConduit.close(HTTPConduit.java:637)
at org.apache.cxf.interceptor.MessageSenderInterceptor$MessageSenderEndingInterceptor.handleMessage(MessageSenderInterceptor.java:62)
at org.apache.cxf.phase.PhaseInterceptorChain.doIntercept(PhaseInterceptorChain.java:236)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:483)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:309)
at org.apache.cxf.endpoint.ClientImpl.invoke(ClientImpl.java:261)
at org.apache.cxf.frontend.ClientProxy.invokeSync(ClientProxy.java:73)
at org.apache.cxf.jaxws.JaxWsClientProxy.invoke(JaxWsClientProxy.java:124)
... 25 more
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at com.sun.net.ssl.internal.ssl.Alerts.getSSLException(Alerts.java:174)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.fatal(SSLSocketImpl.java:1591)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:187)
at com.sun.net.ssl.internal.ssl.Handshaker.fatalSE(Handshaker.java:181)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:975)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:123)
at com.sun.net.ssl.internal.ssl.Handshaker.processLoop(Handshaker.java:516)
at com.sun.net.ssl.internal.ssl.Handshaker.process_record(Handshaker.java:454)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:884)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.performInitialHandshake(SSLSocketImpl.java:1096)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.startHandshake(SSLSocketImpl.java:1123)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.getSession(SSLSocketImpl.java:1830)
at weblogic.net.http.HttpsClient.getSSLSession(HttpsClient.java:537)
at weblogic.net.http.HttpsURLConnection.connect(HttpsURLConnection.java:257)
at weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:237)
... 41 more
Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:285)
at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:191)
at sun.security.validator.Validator.validate(Validator.java:218)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:126)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:209)
at com.sun.net.ssl.internal.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:249)
at com.sun.net.ssl.internal.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:954)
... 51 more
Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target
at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:174)
at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:238)
at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:280)
... 57 more
I'm the app's developer and I don't have experience in this subjects. Is the wl misconfigured? Should I do something from the app to reference the keystore?
Thanks un advance.
Sorry for my english.

Hi user10939158, thank you for your response. Maybe I was not precise in my previous post. I know how certificates work and that I should not be using self signed ones. Due to a reason (non technical) we MUST use a self signed certificates. Considering this as a prerequisite let me clarify my situation:
- We added the certificate to the custom trust store connfigured in WL
- We configure the managed server to be more "verbose" about SSL stuff
- When the managed server start it outputs the following lines in the log:
<Dec 13, 2010 5:31:21 PM ARST> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the JKS keystore file /wldomains/desa_domain/TrustCTWebservices.jks.>
<Dec 13, 2010 5:31:21 PM ARST> <Debug> <SecuritySSL> <BEA-000000> <SSLContextManager: loaded 1 trusted CAs from /wldomains/desa_domain/TrustCTWebservices.jks>
<Dec 13, 2010 5:31:21 PM ARST> <Debug> <SecuritySSL> <BEA-000000> <Subject: CN=jserver, OU=SWG, O=IBM, C=US; Issuer: CN=jserver, OU=SWG, O=IBM, C=US>
- In this lines we can see the certificate that interests us (jserver)
- When the app do a WS reqeust we see in the log:
<Dec 13, 2010 5:32:43 PM ARST> <Notice> <Stdout> <BEA-000000> <trustStore is: /opt/bea/jrockit_160_05/jre/lib/security/cacerts> (THE VM's DEFAULT KEYSTORE!!!!!!)
- If we add the cert to /opt/bea/jrockit_160_05/jre/lib/security/cacerts everything works ok but I have doubts that this is right.
Why the default keystore is used?
Thank you very much
Regards

How to configure HTTP receiver comm channel with dynamic URL parameters?

I need to perform HTTP Post using PI. URL contains some parameters. I need to set these parameters with different values in run time.
Please help to do this.
Thanks
Ranji

Check the section Adapter Specific Message Attributes from this help section:
http://help.sap.com/saphelp_nw70/helpdata/en/43/64dbb0af9f30b4e10000000a11466f/content.htm
The parameters can be set in the Message Mappinga nd then using the appropriate options in communication they can be included in the message header....for more info search with keywords "Dynamic Configuration" and you will get to know how the procedure works.
Regards,
Abhishek.

How to configure HTTP Proxy

I want XE to validate DTD references made in XML schema definitions. Metalink note 262708.1 refers to setting HTTP_PROXY environment variable/Registry value to do this through corporate firewalls.
Can I set this in XE? If so, how is it done on Windows XP?

OK, for the record I set the HTTP_PROXY value in HKEY_LOCAL_MACHINE\SOFTWARE\ORACLE\KEY_XE to
http://<username>:<password>@<http.proxy.server>:<port>
which seemed to do the trick as far as basic MS HTTP/proxy/authentication is concerned. The proxy software/configuration thereon is another matter...

How to configure https in java?

Dude,
I just know that If we need https page in our java web application we have to configure on server which we are using .
I am gonna use Jboss as my application server.Right now I am using Http protocol to log in my site.Despite security reasons my clients push me to make it as https.
As of my Knowlege , I know that its just server configuration but not know how ?
Please help me to fix this..

Besides configuring, you will also need a HTTPS host certificate.

How to configure https head on GSS-4492-k9 ver 3.2 (0)?

I have upgraded gss to version 3.2(0) because I need to track a server that uses only https.
I configured a https head KA VIP answer type but the answer never goes on-line.
I tried using www.google.com as the VIP address but not go online too.
The gss is behind a firewall.
I suspected of the firewall but from the gss CLI it seems that the firewall is open for the https traffic:
200.189.189.232 is the server IP and 74.125.234.48 is the www.google.com IP
GSS-02.dms.local#telnet 200.189.189.232 443
Trying 200.189.189.232...
Connected to 200.189.189.232.
Escape character is '^]'.
Connection closed by foreign host.
GSS-02.dms.local#telnet 74.125.234.48 443
Trying 74.125.234.48...
Connected to 74.125.234.48.
Escape character is '^]'.
Connection closed by foreign host.
GSS-02.dms.local#
Can anyone help me on this configuration?
Thanks

Hi,
there's not much on CCO yet. Here's how the GUI looks like for the new probe:
http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/gss4400series/v3.2/release/note/GSSRN32.html#wp305534
If you don't find any clue in the GSS logs, try taking a traffic capture to check what the server is responding to the probe. Keep in mind only code 200 is accepted as a positive reply.
hope this helps,
Fabrizio

How to configure https connection using a http proxy in weblogic server

Hi,
I have a proxy in Aqualogic Service Bus that points to a https external service. Our development environment internet access is supported by a http proxy server. The ALSB proxy fails to connect, with the following error message:
<con:fault xmlns:con="http://www.bea.com/wli/sb/context">
<con:errorCode>BEA-380002</con:errorCode>
<con:reason>
Tried all: *1 addresses, but could not connect over HTTPS to server: sitenet43.serasa.com.br port: 443*
</con:reason>
<con:location>
<con:node>RouteTo_ConsultarSerasa</con:node>
<con:path>request-pipeline</con:path>
</con:location>
</con:fault>
I've added the following parameters to jvm args:
-Dhttp.proxyHost=10.128.0.50
-Dhttp.proxyPort=3126
-Dhttp.proxyUser=<someUserName>
-Dhttp.proxyPassword=<somePassword>
Accessing the page in Internet Explorer or Firefox is working fine. Somebody knows any additional configuration to this case?
Thanks in advance
Rogério Cruz

In osb you can configure a HTTP proxy server. Once this is done all BS http/https requests will be through the configured proxy server.
http://download.oracle.com/docs/cd/E13159_01/osb/docs10gr3/consolehelp/global_resources.html#wp1137225
Manoj

How to configure Redundant Internet Access on WIndows Server 2008 R2

I have a Windows Server 2008 R2 machine running in my basement. I have an application installed on it that calls a web service out on the open internet on a periodic timer. Everything works great until my ISP goes done.
For redundancy I got a second connection into my basement from a different ISP. I want to now configure my service to use the first ISP until it goes down and then automatically switch to the second ISP.
I have installed a second NIC card into the server. However, I need some help in configuring the redundant set up I am after.
For example it isn't clear to me if these separate NICs should be configured on the same subnet?
The other complication is that this server is infact the DC for my domain. Not sure if that complicates things or not.
I do RDP into the server remotely currently, so there is another potential complication (would need to enable that through both ISP router/nic. However, please note that other than the inbound RDP traffic, I am only interested in having the "outbound"
web service traffic redundant at this time - that is I am only using the machine as a client in this scenario).
I have read up on Multi-homing and just feel this is overkill for what I am trying to accomplish. All I want is for the internet to still be reachable from the machine via automatic switch over if my primary ISP goes down.
Thanks in advance for any and all help in configuring this correctly.
Rod

Hi Rob,
Thanks for posting here .
TMG could help to implement internet redundancy feature with using maximum two ISP connections:
Planning for Internet service provider high availability
http://technet.microsoft.com/en-us/library/dd897038.aspx
We can get more detail introductions form TMG/ISA forum If are interesting in this feature.
http://social.technet.microsoft.com/Forums/en-US/Forefrontedgegeneral/threads
Deploying other dedicate third party devices that support this feature is also a good choice .
Regards,
Tiger Li
TechNet Subscriber Support in forum
If you have any feedback on our support, please contact
[email protected]
Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

How to configure http ports in AS Java 7.1 EHP1 ?

Hi all,
how can I create a new http port on AS Java 7.1 EHP 1 ?
I can't find this in nwa.
In AS Java 6.40 I use Visual Admin - Dispatcher - Services - http provider and then I can create many ports
( like (Port:50000,Type:http)(Port:50001,Type:ssl)(Port:80,Type:http) )
Thanks
Sven

Hi all,
thanks a lot for the answers:
@Patrick Whitty:
Whit your answer I've found the right docs in nwce711 and now I can solve my problem.
Many thanks.
@Fan Yu:
Sorry, maybe my thread was misinterpretative. I've installed Sap Netweaver CE 7.1 EHP1
Also many thanks for your answers. Future I will describe much more better.
@rkandy:
We have this option on our 6.40 systems (I have also in my local installation)
In Visual Admin -> Cluster -> Dispatcher -> Http Provider -> Propertie "ports"
I can send you a screenshot.
Regards,
Sven

Oracle10g How to configure HTTPS to access EM in Linux

Similar Messages

Maybe you are looking for