Renew SSL key fail in WL Server

We need to renew our certificate in the production environment. The new key is 2048 bit encrypted. When importing it to the keystore with "NO" password protection on the private key, the server ssl works fine. When I encrypt the file using wlkeytool and then importing it to the keystore the ssl fails with the following error:
The public key from the configured server certificate and the configured server private key do not match.
Any idea how I can encrypt the private key prior to importing it to the keystore?

This thread has replies in the WLS Security forum and I recommend those interested with follow-up look there:
SSLKeyException

Similar Messages

SSL VPN Failed to validate server certificate (cannot access https)

Hi all,
I have the next problem.
I've configured in an UC520 a SSL VPN.
I can access properly and I can see the labels, but I only can access urls which are http, not https:
I can access the default ip of the uc520 (192.168.1.10) but
When I try to get access to a secure url I get the msg: Failed to validate server certificate
I'm trying to access a Cisco Digital Media Manager, whose url is https://pc.sumkio.local:8080
Does the certificate of both hardware has to be the same?
How can I add a https?
Here is the config of the router:
webvpn gateway SDM_WEBVPN_GATEWAY_1
ip address 192.168.1.254 port 443
ssl trustpoint TP-self-signed-2977472073
inservice
webvpn context SDM_WEBVPN_CONTEXT_1
secondary-color white
title-color #CCCC66
text-color black
ssl authenticate verify all
url-list "Intranet"
   heading "Corporate Intranet"
   url-text "DMM Sumkio" url-value "http://pc.sumkio.local:8080"
   url-text "Impresora" url-value "http://192.168.10.100"
   url-text "DMM" url-value "https://pc.sumkio.local:8443"
   url-text "DMM 1" url-value "http://192.168.10.10:8080"
   url-text "UC520" url-value "http://192.168.10.1"
policy group SDM_WEBVPN_POLICY_1
   url-list "Intranet"
   mask-urls
   svc dns-server primary 192.168.10.250
   svc dns-server secondary 8.8.8.8
default-group-policy SDM_WEBVPN_POLICY_1
aaa authentication list sdm_vpn_xauth_ml_1
gateway SDM_WEBVPN_GATEWAY_1
max-users 10
inservice
Any help would be apreciatted.
Thank you

Hi, thanks for your advise.
I'm trying to copy the certificate via cut and paste, but I'm getting a
% Error in saving certificate: status = FAIL
I dont know if I'm doing this right.
I open the https page from the DMM with Mozilla Firefox, and in options I export the certificate in PEM format.
I get a file which if I open with notepad is like
-----BEGIN CERTIFICATE-----
MIICOzCCAaSgAwIBAgIET7EwyzANBgkqhkiG9w0BAQUFADBhMQswCQYDVQQGEwJV
KoZIhvcNAQEFBQADgYEAdk7n+tJi0igrTD2o7RD9ty8MLTyHN4uk8km+7DbpEy0g
mxLY0UZswYvbj15kPdd8QbeGEdDR6SXOYePsfIRJzL0mqMON4oiUhsqAK5y2yC6R
nqy4wWQ2fGVEYAeLpb1jGKdZWpuag/CO90NMHcMiobfBh+4eTqm7kRPTEyma6V0=
-----END CERTIFICATE-----
If I try to authenticate the trustpoint, I get that error.
how can I export the certificate from the DMM?
I think that this file is not the right file.
and then, do I have to make some changes in
webvpn gateway SDM_WEBVPN_GATEWAY_1?
Should I choose the new trustpoint?
I understand that the old trustpoint is for the outside connection, no for the LAN connection.
Dont worry about me, answer when you can but I really need to fix this.
Thank you so much

How can I generate SSL Keys from a Oracle 9iAS server version 1.0.2.2.0

How can I generate SSL Keys for use on Oracle 9iAS server
version 1.0.2.2.0. I have tried using the open_ssl method but
was unsuccessful.

<?xml version="1.0" encoding="UTF-8" ?>
<nodes>
<node>
<category_id>3</category_id>
<parent_id>2</parent_id>
<name>Mobile</name>
<is_active>1</is_active>
<position>1</position>
<level>2</level>
<children>
<node name="Nokia" category_id="6" parent_id="3" is_active="1" position="1" level="3">
<node name="Nokia N79" category_id="7" parent_id="3" is_active="1" position="2" level="3" />
<node name="Nokia N95" category_id="7" parent_id="3" is_active="1" position="2" level="3" />
<node name="Nokia N97" category_id="7" parent_id="3" is_active="1" position="2" level="3" />
</node>
<node name="Samsung" category_id="7" parent_id="3" is_active="1" position="2" level="3">
</node>
</children>
</node>
<node>
<category_id>4</category_id>
<parent_id>2</parent_id>
<name>Laptop</name>
<is_active>1</is_active>
<position>2</position>
<level>2</level>
<children></children>
</node>
<node>
<category_id>5</category_id>
<parent_id>2</parent_id>
<name>Monitor</name>
<is_active>1</is_active>
<position>3</position>
<level>2</level>
<children></children>
</node>
<node>
<category_id>8</category_id>
<parent_id>2</parent_id>
<name>Camera</name>
<is_active>1</is_active>
<position>4</position>
<level>2</level>
<children></children>
</node>
</nodes>
Is this correct format to create dynamic menu?

EAP-TLS or PEAP authentication failed during SSL handshake to the ACS serve

We are running the LWAPP (2006 wlc's and 1242 AP's) and using the ACS 4.0 for authentication. Our users are
experiencing an issue, where they are successfully authenticated the first time, however as the number of them is increasing, they're starting to drop the connections and being prompted to re-authenticate. At this point, they are not being able to authenticate again.
We're using PEAP for the authentication and Win XP SP2 clients as the supplicants. The error message that we are seeing on the ACS for that controller is "EAP-TLS or PEAP authentication failed during SSL handshake to the ACS server"...Not sure if this error msg is relevant since we have other WLC's that are working OK and still generating the same error msg on the ACS...
Thanks..

Here are some configs you can try:
config advanced eap identity-request-timeout 120
config advanced eap identity-request-retries 20
config advanced eap request-timeout 120
config advanced eap request-retries 20
save config

[solved] dovecot errors after renewing SSL certificate

System:
OS X Server (Mountain Lion) 2.2
Using a single SSL Certificate for all services.
Symptom:
Users can't log into their IMAP accounts hosted on OS X Server (Mountain Lion) after renewing SSL Certificate
Diagnostics:
Give you an indication whether it's this problem. Some or all may apply:
Log shows all kinds of dovecot errors. e.g.
dovecotd[nnn]: master: Error: service(config): command startup failed, throttling
config: Fatal: Error in configuration file /Library/Server/Mail/Config/dovecot/dovecot.conf: ssl enabled, but ssl_cert not set
dovecotd[nnn]: master: Error: service(config): command startup failed, throttling
/Library/Server/Mail/Config/dovecot/conf.d/10-ssl.conf shows commented out lines:
ssl_cert
ssl_key
ssl_ca
Solution:
Go to the Certificates pane of the Server App and choose Secure Services Using: Custom
Set IMAP and POP server certificates to to None
Keep an eye on what the server App is doing to /Library/Server/Mail/Config/dovecot/conf.d/10-ssl.conf
Now set Secure Services Using: <My single SSL Certificate for all services>
Keep an eye on what the server App is doing to /Library/Server/Mail/Config/dovecot/conf.d/10-ssl.conf and you should now see all the ssl* settings as you would expect, and pointing to the correct SSL certificate in /etc/certificates
Hope this works for you too!

I had something similar happen. When I do anything with SSL certificates it deletes any regular websites. Only the sites that are setup for https are listed.
Couldn't understand why my website wasn't working and it turned out that the system had deleted it. The web server had multiple host set and I had to rebuild all the ones that had used port 80. All the ones that use 443 were fine.
Hope this helps.

CryptDecrypt function failing on Windows Server 2012

Hi,
I have a sample program which does encryption / decryption.
This program works on Win7 and Win8.1 but fails on Windows Server 2012.
Please can somebody help me on resolving this issue?
const char KEY_FILE[255] = "C:\\key.txt";
In Constructor:
dwResult= 0;
hProv = 0;
hKey = 0;
hSessionKey = 0;
cbBlob = 0;
pbBlob = NULL;
cbBlob = file_length(KEY_FILE);
pbBlob = (BYTE*)malloc(cbBlob + 1);
memset(pbBlob, 0, cbBlob + 1);
FILE *fp = fopen(KEY_FILE, "rb");
if (fp) {
fread(pbBlob, 1, cbBlob, fp);
fclose(fp);
} else {
free(pbBlob);
pbBlob = NULL;
if (!CryptAcquireContext(&hProv, NULL, MS_DEF_PROV, PROV_RSA_FULL, 0))
dwResult = GetLastError();
if (dwResult == NTE_BAD_KEYSET)
if (!CryptAcquireContext(&hProv, NULL, MS_DEF_PROV, PROV_RSA_FULL, CRYPT_NEWKEYSET))
dwResult = GetLastError();
MessageBox("Error [0x%x]: CryptAcquireContext() failed.", "Information", MB_OK);
return;
} else {
dwResult = GetLastError();
return;
if (pbBlob) {
if (!CryptImportKey(hProv, pbBlob, cbBlob, 0, 0, &hSessionKey))
dwResult = GetLastError();
MessageBox("Error [0x%x]: CryptImportKey() failed.", "Information", MB_OK);
return;
} else {
if (!CryptImportKey(hProv, PrivateKeyWithExponentOfOne, sizeof(PrivateKeyWithExponentOfOne), 0, 0, &hKey))
dwResult = GetLastError();
MessageBox("Error CryptImportKey() failed.", "Information", MB_OK);
return;
if (!CryptGenKey(hProv, CALG_RC4, CRYPT_EXPORTABLE, &hSessionKey))
dwResult = GetLastError();
MessageBox("Error CryptGenKey() failed.", "Information", MB_OK);
return;
//{{AFX_DATA_INIT(CCryptoEncryptionDlg)
m_cipher = _T("");
m_clear = _T("Encrypt me");
When I click on Encryption Button:
UpdateData();
unsigned long length = m_clear.GetLength() +1;
unsigned char * cipherBlock = (unsigned char*)malloc(length);
memset(cipherBlock, 0, length);
memcpy(cipherBlock, m_clear, length -1);
if (!CryptEncrypt(hSessionKey, 0, TRUE, 0, cipherBlock, &length, length))
dwResult = GetLastError();
MessageBox("Error CryptEncrypt() failed.", "Information", MB_OK);
return;
m_cipher = cipherBlock;
m_clear = "";
free(cipherBlock);
UpdateData(FALSE);
When I click on Decrypt button:
UpdateData();
unsigned long length = m_cipher.GetLength() +1;
unsigned char * cipherBlock = (unsigned char*)malloc(length);
memset(cipherBlock, 0, length);
memcpy(cipherBlock, m_cipher, length -1);
int retVal = CryptDecrypt(hSessionKey, 0, TRUE, CRYPT_DECRYPT_RSA_NO_PADDING_CHECK, (BYTE*)cipherBlock, &length);
if (!retVal)
dwResult = GetLastError();
MessageBox("Error CryptDecrypt() failed.", "Information", MB_OK);
return;
dwResult = GetLastError();
m_clear = cipherBlock;
m_cipher = "";
free(cipherBlock);
UpdateData(FALSE);
The source is from http://www.codeproject.com/Articles/11578/Encryption-using-the-Win-Crypto-API
I just got the source code from above link and compiled in VS2012. The same code works as-is in Win8.1 but fails in loading itself in Windows Server 2012.
Thanks in advance.
Regards,
Raj

Windows CE is pretty old but I see that used a bit in 3rd world markets where people are not rich enough to afford more modern gear.
I use 7-zip for backups, and the SDK is open source which means it can be used in another project such a specialized backup or other tool
7-zip has the AES in the SDK which is been checked as solid.
Place your rig specifics into your signature like I have, makes it 100x easier!
Hardcore Games Legendary is the Only Way to Play!
Vegan Advocate How can you be an environmentalist and still eat meat?

Getting Exception - ErrorCode ERRCA0017 :SubStatus ES0007 :There is a temporary failure. Please retry later. (The request failed because the server is in throttled state)

I have used Azure managed Cache (Basic tier) in my Web App deployed on cloud service.
Now I am getting exception. ErrorCode<ERRCA0017>:SubStatus<ES0007>:There is a temporary failure. Please retry later. (The request failed because the server is in throttled state) on Production environment.
I know, this exception is occurred when memory usage reached more than 95%.
I want to handle this issue in code so please provide the right solution.
My Clients are facing it... so please help me .
Its very urgent.
Server Error in '/' Application.
ErrorCode<ERRCA0017>:SubStatus<ES0007>:There is a temporary failure. Please retry later. (The request failed because the server is in throttled state)
Description: An unhandled exception occurred during the execution of the current
web request. Please review the stack trace for more information about the error and where it originated in the code.
Exception Details: Microsoft.ApplicationServer.Caching.DataCacheException: ErrorCode<ERRCA0017>:SubStatus<ES0007>:There
is a temporary failure. Please retry later. (The request failed because the server is in throttled state)
Source Error:
An unhandled exception was generated during the execution of the current web request. Information regarding the origin and location of the exception can be identified using the exception stack trace
below.
Stack Trace:
[DataCacheException: ErrorCode<ERRCA0017>:SubStatus<ES0007>:There is a temporary failure. Please retry later. (The request failed because the server is in throttled state)]
   Microsoft.ApplicationServer.Caching.DataCache.ThrowException(ErrStatus errStatus, Guid trackingId, Exception responseException, Byte[][] payload, EndpointID destination) +551
   Microsoft.ApplicationServer.Caching.SocketClientProtocol.ExecuteApi(IVelocityRequestPacket request, IMonitoringListener listener) +287
   Microsoft.ApplicationServer.Caching.SocketClientProtocol.Upsert(VelocityPacketType type, String key, Object value, DataCacheItemVersion oldVersion, TimeSpan timeout, DataCacheTag[]
tags, String region, IMonitoringListener listener) +357
   Microsoft.ApplicationServer.Caching.SocketClientProtocol.Put(String key, Object value, DataCacheItemVersion oldVersion, TimeSpan timeout, DataCacheTag[] tags, String region, IMonitoringListener
listener) +74
   Microsoft.ApplicationServer.Caching.DataCache.InternalPut(String key, Object value, DataCacheItemVersion oldVersion, TimeSpan timeout, DataCacheTag[] tags, String region, IMonitoringListener
listener) +288
   Microsoft.ApplicationServer.Caching.<>c__DisplayClass2f.<Put>b__2e() +146
   Microsoft.ApplicationServer.Caching.DataCache.Put(String key, Object value, TimeSpan timeout) +263
   Microsoft.Web.DistributedCache.<>c__DisplayClass31`1.<PerformCacheOperation>b__30() +19
   Microsoft.Web.DistributedCache.DataCacheRetryWrapper.PerformCacheOperation(Action action) +208
   Microsoft.Web.DistributedCache.DataCacheForwarderBase.PerformCacheOperation(Func`1 func) +134
   Microsoft.Web.DistributedCache.DataCacheForwarderBase.Put(String key, Object value, TimeSpan timeout) +148
   Microsoft.Web.DistributedCache.BlobBasedSessionStoreProvider.SetAndReleaseItemExclusive(HttpContextBase context, String id, SessionStateStoreData item, Object lockId, Boolean newItem)
+177
   System.Web.SessionState.SessionStateModule.OnReleaseState(Object source, EventArgs eventArgs) +1021
   System.Web.SyncEventExecutionStep.System.Web.HttpApplication.IExecutionStep.Execute() +80
   System.Web.HttpApplication.ExecuteStep(IExecutionStep step, Boolean& completedSynchronously) +165
Version Information: Microsoft .NET Framework Version:4.0.30319; ASP.NET Version:4.0.30319.34009
Thanks
hema

You should add retry logic in case of retriable exceptions. If the retries fail as well you should reset the DataCacheFactory as suggested in this link.
http://blogs.msdn.com/b/cie/archive/2014/04/29/cache-retry-fails-what-next.aspx
Thanks,
Pallav

SSL handshake failed: X509CertChainIncompleteErr

I am trying to send name-value pairs using https and JSSE. I am using JDev 9i, and first I create a war file and bundle JSSE with it, then deploy it to an ear file, and use Enterprise Manager of 9iAS Rel2 to deploy the ear file to the server (on Windows 2000).
I get the following error (please excuse the test output lines):
Response: xxx test000+ test0+ test1+ test2+ test3+ test4+ test4a+
javax.net.ssl.SSLException: SSL handshake failed: X509CertChainIncompleteErr
Here's my code:
import java.net.*;
import java.io.*;
import com.sun.net.ssl.*;
public class testsend {
public testsend()
public String myTest () throws Exception {
String endresult = "xxx ";
String url = "https://www.mysite.com/myfile.php?" ;
endresult = endresult + "test000+ ";
// actual name-value pairs are sent out, this is just an example
String data = "name1=value1&name2=value2";
URL server = null;
try {
server = new URL(url);
endresult = endresult + "test0+ ";
catch(MalformedURLException e) {
endresult = endresult + e.getMessage();
ObjectInputStream myresponse = null;
Object result = null;
try {
URLConnection con = server.openConnection();
endresult = endresult + "test1+ ";
con.setDoOutput(true);
con.setUseCaches(false);
con.setRequestProperty("Content-Type", "application/octet-stream");
endresult = endresult + "test2+ ";
ObjectOutputStream request = new ObjectOutputStream(new BufferedOutputStream(con.getOutputStream()));
endresult = endresult + "test3+ ";
request.writeObject(data);
endresult = endresult + "test4+ ";
request.flush();
endresult = endresult + "test4a+ ";
request.close();
endresult = endresult + "test4b+ ";
// get the result input stream
myresponse = new ObjectInputStream(new BufferedInputStream(con.getInputStream()));
endresult = endresult + "test6+ ";
// read response back from the server
result = myresponse.readObject();
endresult = endresult + result.toString();
catch(Exception e) {
endresult = endresult + e.getMessage();
return endresult;
I've searched for the error message on the web but did not have much luck finding a solution. It obviously won't open a input stream.
Any one have any thoughts? Thanks.
jv

Hi Francisco,
I am(Oracle 9iAS) sending SOAP messages over SSL to a remote server(Microsoft IIS) hosting the web services. The remote HTTPS site is up and I can view the certificate. It has a 3 level chain. user certificate, intermediate and a root CA.
Through my application when I try to establish handshake, I have some code to display the certificate chain of the remote server. Here I see only the user and the intermediate certificate. I donot see the root CA. I understand that this is the reason for the Incomplete cert chain error. Is this something the remote server hosting the web services should do with their configuration?? Or can I do something at my end??
Please let me know,
Thank you

Deployment error: Failed to start server localhost:25848

Hello there!
I used to work with NetBeans but now i am testing JSCreator.
- I'm using Linux Ubuntu 7.04
- JSCreator 2 Update 1
- I 've tryied to run as root and as my user.
- I am trying VehicleIncidentReport example with JSCreator
- With netstat -a | grep 25848 , i can see that are no process running in that port!
Thanks for any help!
When i run I got this error:
run-deploy:
Starting server localhost:25848
Failed to start server localhost:25848
Deployment error: Failed to start server localhost:25848. See the server log file for details.
Exception=Deployment error: Failed to start server localhost:25848. See the server log file for details.
Deployment error: Failed to start server localhost:25848. See the server log file for details. at org.netbeans.modules.j2ee.deployment.devmodules.api.Deployment.deploy(Deployment.java:198)
at org.netbeans.modules.j2ee.ant.Deploy.execute(Deploy.java:75)
at org.apache.tools.ant.UnknownElement.execute(UnknownElement.java:275)
at org.apache.tools.ant.Task.perform(Task.java:364)
at org.apache.tools.ant.Target.execute(Target.java:341)
at org.apache.tools.ant.Target.performTasks(Target.java:369)
at org.apache.tools.ant.Project.executeTarget(Project.java:1214)
at org.apache.tools.ant.Project.executeTargets(Project.java:1062)
at org.apache.tools.ant.module.bridge.impl.BridgeImpl.run(BridgeImpl.java:234)
at org.apache.tools.ant.module.run.TargetExecutor.run(TargetExecutor.java:242)
at org.netbeans.core.execution.RunClassThread.run(RunClassThread.java:125)

Hy there!!
I would like to thank you!! I just used pe-start and it worked!!!
But now I would like to fix my Netbeans.
I started to use JSCreator because my Netbeans is not working properly.
- I created a new Project called Teste CIB as a Visual Web Application.
- When i Execute the Project, in Log says that everything was all right, but in my Web Navigator (Mozzila) its says:
HTTP Status 404 - /TesteCIB/
type Status report
message /TesteCIB/
description The requested resource (/TesteCIB/) is not available.
In the LOG i got this error:
You are trying to access file: jndi.properties from the default package.
Please see http://www.netbeans.org/download/dev/javadoc/org-openide-modules/org/openide/modules/doc-files/classpath.html#default_package
java.util.MissingResourceException: Can't find resource for bundle java.util.PropertyResourceBundle, key MNEMONIC_�
at java.util.ResourceBundle.getObject(ResourceBundle.java:386)
at java.util.ResourceBundle.getString(ResourceBundle.java:346)
at org.openide.awt.Mnemonics.getLatinKeycode(Mnemonics.java:165)
at org.openide.awt.Mnemonics.setLocalizedText2(Mnemonics.java:78)
at org.openide.awt.Mnemonics.setLocalizedText(Mnemonics.java:99)
at org.netbeans.modules.java.project.ChangePackageViewTypeAction.createChoice(ChangePackageViewTypeAction.java:54)
at org.netbeans.modules.java.project.ChangePackageViewTypeAction.getPopupPresenter(ChangePackageViewTypeAction.java:48)
at org.openide.util.Utilities.actionsToPopup(Utilities.java:2622)
at org.openide.util.Utilities.actionsToPopup(Utilities.java:2696)
at org.openide.explorer.view.TreeView.createPopup(TreeView.java:875)
at org.openide.explorer.view.TreeView$PopupAdapter.showPopup(TreeView.java:1323)
at org.openide.awt.MouseUtils$PopupMouseAdapter.maybePopup(MouseUtils.java:158)
at org.openide.awt.MouseUtils$PopupMouseAdapter.mousePressed(MouseUtils.java:149)
at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:263)
at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:262)
at java.awt.AWTEventMulticaster.mousePressed(AWTEventMulticaster.java:262)
at java.awt.Component.processMouseEvent(Component.java:6035)
at javax.swing.JComponent.processMouseEvent(JComponent.java:3260)
at java.awt.Component.processEvent(Component.java:5803)
at java.awt.Container.processEvent(Container.java:2058)
at java.awt.Component.dispatchEventImpl(Component.java:4410)
at java.awt.Container.dispatchEventImpl(Container.java:2116)
at java.awt.Component.dispatchEvent(Component.java:4240)
at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4322)
at java.awt.LightweightDispatcher.processMouseEvent(Container.java:3983)
at java.awt.LightweightDispatcher.dispatchEvent(Container.java:3916)
at java.awt.Container.dispatchEventImpl(Container.java:2102)
at java.awt.Window.dispatchEventImpl(Window.java:2429)
at java.awt.Component.dispatchEvent(Component.java:4240)
at java.awt.EventQueue.dispatchEvent(EventQueue.java:599)
at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:273)
at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:183)
at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:173)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:168)
at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:160)
at java.awt.EventDispatchThread.run(EventDispatchThread.java:121)
You are trying to access file: jndi.properties from the default package.
Please see http://www.netbeans.org/download/dev/javadoc/org-openide-modules/org/openide/modules/doc-files/classpath.html#default_package
Thanks a lot!!

SOAP-ENV:IOException; msg=SSL handshake failed: SSLProtocolErr

Getting following error while invoking webservice over ssl.
"SOAP-ENV:IOException; msg=SSL handshake failed: SSLProtocolErr"
We generated webservice java stub using JDeveloper based on wsdl provided to us from 3rd party. We are able to test this webservice successfully without ssl . Once ssl is enabled by the 3rd party webservice provider we faced
"java.lang.UnsatisfiedLinkError: no njssl9 in java.library.path" error in JDeveloper.
In JDeveloper we were able to resolve this by following details provided at
Lehmann's web log on "Securing a Web Service - Client SSL" (http://radio.weblogs.com/0132036/2004/02/13.html ).
We then run the same java stub from oracle application server 9iAS 1.0.2.2.2. This is when we get error
"SOAP-ENV:IOException; msg=SSL handshake failed: SSLProtocolErr"
Debugging further we see that in 9iAS we have following in our class path.
..iAS/jlib/jssl-1_1.jar:..iAS/jlib/javax-ssl-1_1.jar:..iAS/soap/webapps/soap/WEB-INF/lib/soap.jar
we took the same files and added to libraries in JDeveloper and are able to reproduce the same error in JDeveloper. We turned on Debug on oracle.jssl.debug and with that we see following details
instantiate the hashtable
SocketTable write Enter fdin 1
SocketTable write offset 0 length 72
SocketTable write: 72 bytes
SocketTable read Enter
SocketTable read: 1 bytes
SocketTable read Enter
SocketTable read: 2 bytes
SSLSocketImpl close Thread:main
In close removing fd 1Thread main
[SOAPException: faultCode=SOAP-ENV:IOException; msg=SSL handshake failed: SSLProtocolErr...
Any suggestions on how to resolve this error in oracle application server 9iAS ?
Note: We run Oracle E-Business Suite on this same 9iAS so any change we make should not impact the oracle applications running on this server.

hi,
thi sis very simple soloution for this. open the wsdl into the internet explorer. when wsdl file open save this wsdl with the .xml extension. when u want to make dat contorl or web sekelton or proxy dont use the hhtps:// ????????/ url give the path there for the .xml file which u save for this. i am sure u will invoke all the services which is provoider by the web service.
have nice day
best regards

SSL test in Oracle Application Server 10.1.2

Hi ,
we are using one Oracle Application Server Web Cache 10.1.2 as our web server.This redirects users to the Application Server.(EBS 12.0.4)
Now we need to implement SSL to secure user credentials.So i am planing to implement SSL in our web cacahe server.Will this be enough to secure user credentials??I dont have any idea.Please help.
Moreover our web cache is not configured in SSL during the time of installation.Can any body suggest me a place from where i could get one demo Certificate to put it onto my web server and test the SSL confiration.EBS has provided one demo for application tier(inside $ORACLE_HOME/apache/certs/).
But we will have to implement in web cahe tier not in application tier.
We are using EBS 12.0.4 in Hp-Ux v11.23.

Hi susmit;
Please chekc below note which could be helpful for your issue:
SSL Primer on Using OpenSSL as a Certificate Authority with E-Business Suite (with a Windows Example) [ID 1175193.1]
Enabling SSL in Release 12 [ID 376700.1]
R12.0.6+ : Oracle Application Object Library SSL Test Transaction Data Test [ID 732282.1]
R12.0.[3-4] : Oracle Application Object Library SSL Test Transaction Data Test [ID 564066.1]
Regard
Helios

Regarding mountain lion server: clients experience intermittent service connections. the server system log has the following error- Client handshake failed (6):113: Server not accepting client connections (any ideas???)

regarding mountain lion server: clients experience intermittent service connections. the server system log has the following error- Client handshake failed (6):113: Server not accepting client connections. any suggestions would be greatly appreciated - thank you

Hi Jason
I was getting the same behavior after Apple support had me delete some plist files to get Airplay going. I was also getting the following error:
the error occurred while processing a command of type 'writesettings' in the plug-in 'server vpn'
I went into ~/Library/Preferences/ and /Library/Preferences/ and deleted every plist contating the word server. I had to re-set up my server (meaning walk through some intial steps) but all of my settings were still there after that and everything started working again.
Just a thought, obviously try at your own risk but it worked for me.
Kellen

When I try entering a new event in iCal on my MacBook Air, I get an error message popping up on my screen that says: The request for account "iCloud" failed. The server responded with "502" to operation CalDAVSetPropertyQueueableOperation. Help!!??

When I try entering a new event in iCal on my MacBook Air, I get an error message popping up on my screen that says:
The server responded with “502”
The request for account “iCloud” failed.
The server responded with “502” to operation CalDAVSetPropertyQueueableOperation.
The request for account “iCloud” failed.
I am then given the option of staying Online or going Offline.
Can anyone help me?
thanks

Hello b.krushel,
Thank you for using Apple Support Communities
Any number of things could cause this issue, so I would recommend this article named iCloud: Troubleshooting iCloud Calendar found here http://support.apple.com/kb/TS3999.
These sections in particular:
General Troubleshooting
Make sure there are no current issues listed on the System Status that affect iCloud Calendar. The System Status is located on the iCloud Support webpage.
Make sure you have fully enabled iCloud Calendar for the client you are using (for more setup and troubleshooting information on iOS, OS X, Windows and iCloud.com, see the additional details below).
Check to see if the issue you are seeing is covered in iCloud Help. To search iCloud Help, visit help.apple.com/icloud.
Check your settings and preferences as something may not be set up correctly. For example, having incorrect date and time settings can cause issues which are easily resolved by entering the appropriate settings.
Troubleshooting Calendar on OS X Mountain Lion (iCal on OS X Lion)Note: For instructions on setting up iCloud Calendar with Calendar or iCal on your Mac, see iCloud Setup.If you are having trouble with Calendar or iCal on a Mac and you are using iCloud Calendar, try each of these steps, testing after each to see if the issue is resolved:
Make sure you are using OS X Lion v10.7.2 or later. Click here for help verifying the version of OS X you are using.
Make sure your computer is online. Attempt to view www.apple.com and iCloud.com. If you can't connect to the Internet, your iCloud calendars and events will not update in iCal. Click here for more information about troubleshooting your Internet connection.
Verify that your iCloud member name is entered into the iCloud Preference pane in System Preferences. See iCloud Setup for more information about setting up iCloud on a Mac.
Make sure you enter and update calendar information in the iCloud section of Calendar or iCal. Only calendars and events in the iCloud section of the Calendar or iCal Calendar list will be pushed to iCloud. Both Calendar and iCal for the Mac support the display of and interaction with multiple accounts and datastores, for example, iCloud, On My Mac, Exchange, Google, and so on. This makes it easy to create or modify events or calendars in a section of Calendar or iCal that may not be updating iCloud. Learn more about moving local calendars to iCloud.
In some cases, you may find that you have data duplicated in both the local On My Mac and the iCloud sections of Calendar or iCal. Learn more about resolving this issue.
You can make the iCloud calendar your default calendar for all new events. In Calendar on OS X Mountain Lion, choose Calendar > Preferences > General, or in OS X Lion, choose iCal > Preferences > Generaland under the Default Calendar heading, select one of the Calendars under the iCloud heading. Close the Preferences window to save this change.
If recent changes simply don't appear, try forcing Calendar or iCal to refresh by selecting Refresh All from theCalendar menu.
Make sure your account was successfully created in Calendar on your Mac (or iCal). After upgrading to iCloud Calendar, you may need to quit and reopen Calendar (or iCal). To confirm your account is configured correctly in iCal:
Open Calendar (or iCal).
Open Calendar (or iCal) Preferences.
Click Accounts. You should see an account with your iCloud member name entered.
Turn iCloud Calendars off and back on
Quit Calendar (or iCal).
Choose Apple () menu > System Preferences > iCloud.
Remove the checkmark in the checkbox next to Calendars.
Close System Preferences and wait about a minute.
Open System Preferences and choose iCloud.
Replace the checkmark next to Calendars.
Close System Preferences.
Open Calendar (or iCal) and test to see if the issue has been resolved.
Restart your computer. This may sound simple, but it does reinitialize your network and application settings and can frequently resolve issues.
Take care,
Sterling

SharePoint List Error :[DataSource.Error] SharePoint: Request failed: The remote server returned an error: (500) Internal Server Error. (An error occurred while processing this request.)

When I connect to the SharePoint site that contains the lists I need to build my query from , Power Query enumerates the list and displays them in the tool. I can click on the system tables and view the records but any table
in the list I created returns this error.
I can connect fine with InfoPath
[DataSource.Error] SharePoint: Request failed: The remote server returned an error: (500) Internal Server Error. (An error occurred while processing this request.)
thank you for your help
Andrew

Hi Andrew. In order for us diagnose this issue, you'll need to capture some network traces using a tool such as Fiddler and share them by sending a Frown.
To capture a trace using Fiddler, start Fiddler, enable the Tools > Fiddler Options > HTTPS > Decrypt HTTPS traffic option, start the capture, reproduce your issue, then stop and save the capture. You can find more information here.
Once you've done that, please send a Frown through the Power Query ribbon and attach the traces.
Thanks,
Ehren

Weblogic 10.3.0.0 installer - Failed to contact Server

When clicking 'Next' on the 'Specify Download Options' portion of the wizard I get an error message "Failed to contact Server"
Anyone know why I recieved this message or how I can get around it?

OK , I have checked the log files for the server - it says it is using NON-BLOCKING source file:/dev/urandom
Looks like this must have been sorted out in 10.3.5 as it recognizes the Linux System.
I have the same issue on all 6 of the servers I have installed - so this may be a different issue.
These are BL460c g6 HP blades in a c7000 chassis.
So now I am at a dead end.
The initial wait is still considerable, but we may have to live with this (Ubuntu Server 11.04 is still new and probably not supported well at this time)
The admin console works fine once it initially opens and is fast.
I tried the java command as well and got an error finding the main class in weblogic.wlst, (not the end of the world).
all in all though it looks impressive right now, aside from the minor admin stuff, my application runs fine (which is what counts in the end).
I will leave this open so that anyone else can view it and make suggestions.

Renew SSL key fail in WL Server

Similar Messages

Maybe you are looking for