Problem while starting Weblogic 7.0..please help

Question

Hi,
Im facing this problem while starting the weblogic.
Below is the error i get...
<Nov 3, 2006 6:11:29 PM IST> <Alert> <WebLogicServer> <000297> <Inconsistent security configuration, java.lang.Exception: Certificate expired or not yet valid:
fingerprint = a48264011b8f3aeb13f64147821dc941, not before = Sat Nov 02 01:32:23 IST 2002, not after = Mon Oct 16 01:32:23 IST 2006, holder = C=US SP=California
L=San Francisco O=BEA WebLogic CN=weblogic.bea.com [email protected] , issuer = C=US SP=California L=San Francisco O=BEA WebLogic OU=Security CN=Demo Certi
ficate Authority Constraints [email protected] , key = modulus length=65, exponent length=3>
java.lang.Exception: Certificate expired or not yet valid: fingerprint = a48264011b8f3aeb13f64147821dc941, not before = Sat Nov 02 01:32:23 IST 2002, not after
= Mon Oct 16 01:32:23 IST 2006, holder = C=US SP=California L=San Francisco O=BEA WebLogic CN=weblogic.bea.com [email protected] , issuer = C=US SP=California L=San Francisco O=BEA WebLogic OU=Security CN=Demo Certificate Authority Constraints [email protected] , key = modulus length=65, exponent length=3 at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:219)
at weblogic.t3.srvr.SSLListenThread.<init>(SSLListenThread.java:122)
at weblogic.t3.srvr.T3Srvr.initializeListenThreads(T3Srvr.java:1556)
at weblogic.t3.srvr.T3Srvr.resume(T3Srvr.java:891)
at weblogic.t3.srvr.T3Srvr.run(T3Srvr.java:300)
at weblogic.Server.main(Server.java:32)
<Nov 3, 2006 6:11:29 PM IST> <Emergency> <Security> <090034> <Not listening for SSL, java.io.IOException: Inconsistent security configuration, Certificate expir
ed or not yet valid: fingerprint = a48264011b8f3aeb13f64147821dc941, not before
= Sat Nov 02 01:32:23 IST 2002, not after = Mon Oct 16 01:32:23 IST 2006, holder = C=US SP=California L=San Francisco O=BEA WebLogic CN=weblogic.bea.com Email=s
[email protected] , issuer = C=US SP=California L=San Francisco O=BEA WebLogic OU=Security CN=Demo Certificate Authority Constraints [email protected] , key =
modulus length=65, exponent length=3.>
I have updated my license.bea file also. the date of expiration="2006-12-02" ..
Please suggest as to how to proceed
Thanks and Regards
SmitaUdupa

Answer 1

Your server certificate expired. You need to update your identity keystore with a new certificate.
The expired certificate was issued by the demo BEA certificate authority (CA). These certs are not adequate for production but if you want to take this approach for your new cert you'll have to use the BEA CertGen utility. Have a look at http://edocs.bea.com/wls/docs70/secmanage/ssl.html for more details.
Your other option is to use Java's keytool utility to create a private key. You'd then generate a certificate signing request (CSR) that you'd send to a CA such as Verisign. You might even have a CA in-house. The CA will then send you a signed certificate that you load in your keystore. Assuming you've configured WebLogic to use this keystore you should be back in business with SSL.
Mike
Weblogic/J2EE Security Blog: http://monduke.com