SSL 128 bits on OAS 4.0.8.1 for LINUX ?

We used to use the solaris version. To reduce cost, we are moving to Linux. Before, when you needed 128 bits security, you had to order a special patch from tech support.
The linux version we received is the export version and it is NOT 128 bits SSL.
Does 128 bits SSL exist ?
Also, LINUX support from oracle seems REALLY BAD. I'm wondering if we're doing a nice move here... ?
Thanks
null

After I fixed some of the things I broke while searching for the wrksf failure, the PL/SQL Cartridge now works for me too. And, after failing to get the DB Browser to work by loading it into the SCOTT schema, I got it to work by loading it into SYS. (SCOTT can't see the DBA_* views so loading the DB Browser into the database failed.) I haven't tried any Java Servlets yet, but that's next on my list.
If you want to try my wrksf workaround, rather than using Christoph's, here's how you can do it.
1. Backup liborb.so in the $ORACLE_HOME/orb/4.0/lib directory, just in case something goes wrong.
2. Using a hex editor, such as emacs hexl-find-file or ghex, to edit liborb.so, find the string "/proc/stat".
3. Change the directory, "/proc" to something like "/pfoo" and write the shared library file back to liborb.so. You now have the required modified liborb.so.
4. Make the /pfoo directory and cp /proc/stat /pfoo.
5. Edit /pfoo/stat and duplicate the first line, which should be the cpu line. This will let the metrics parser handle it. Make sure that /pfoo/stat has read access.
Of course, the values that the metrics code gets are now bogus, but that does not seem to be a fatal problem.
Hopefully somebody from Oracle is reading this and the real fix will be in the mail soon.

Similar Messages

OAS 4.0.8.1 for Linux: wrksf goes down

After having installed the OAS 4.0.8.1 for
Linux, I have a problem getting it to work.
I use the OAS Manager to start the following
four processes :
oassrv "Oracle Application Server"
wrksf "Cartridge Server Factory"
otsfacsrv "Transaction Server Factory"
orb "ORB Servers"
The four processes come up, but after a
minute or so the 'wrksf' process goes
down.
After restarting the wrksf in
command line mode (using the owsctl utility)
the same occurs: it stays up for about a
minute or so, and then goes down.
The log files don't show any error messages.
Does anybody have a clue in which direction
I should search ?
Can any tracing be turned on ?

After I fixed some of the things I broke while searching for the wrksf failure, the PL/SQL Cartridge now works for me too. And, after failing to get the DB Browser to work by loading it into the SCOTT schema, I got it to work by loading it into SYS. (SCOTT can't see the DBA_* views so loading the DB Browser into the database failed.) I haven't tried any Java Servlets yet, but that's next on my list.
If you want to try my wrksf workaround, rather than using Christoph's, here's how you can do it.
1. Backup liborb.so in the $ORACLE_HOME/orb/4.0/lib directory, just in case something goes wrong.
2. Using a hex editor, such as emacs hexl-find-file or ghex, to edit liborb.so, find the string "/proc/stat".
3. Change the directory, "/proc" to something like "/pfoo" and write the shared library file back to liborb.so. You now have the required modified liborb.so.
4. Make the /pfoo directory and cp /proc/stat /pfoo.
5. Edit /pfoo/stat and duplicate the first line, which should be the cpu line. This will let the metrics parser handle it. Make sure that /pfoo/stat has read access.
Of course, the values that the metrics code gets are now bogus, but that does not seem to be a fatal problem.
Hopefully somebody from Oracle is reading this and the real fix will be in the mail soon.

SSL - 128 bit encryption instead of 40 bit?

Hi,
I setup my Tomcat 4.0.3 server to use SSL as directed in a book on servlets that I bought from sun press. Everything works fine, the server starts with SSL support and you can access it with https:, download the cert, etc. I downloaded jsse 1.0.2 jar files and put them into my /jre/lib/ext/ dir as directed and created the keystore for the key with:
keytool -genkey -alias tomcat -keyalg RSA -validity 730
also directed by the book.
My problem is that the keys generated are using 40 bit encryption instead of strong 128. I want to make the site as secure as possible and I'm wondering how to do that. I followed the directions exactly, downloaded the version of jsse for us/canada and yet my certs still say that they were encrypted with 40 bit not 128 bit encryption.
Mike

My problem is that the keys generated are using 40 bit
encryption instead of 128. What client do you use to connect to Tomcat?
If the client does not support 128 bit keys for RC4, the browser
and SSL 3.0 may negotiate a weaker session encryption key,
in your case 40 bit.
I don't use Tomcat, but with my web server you can configure
the SSL protocol versions it accepts, and the ciphers it accepts;
ie I can switch off everything other than RC4-128. -- Can the same
thing be done in Tomcat, and how can it be done?

SSL, 128-bit encryption problem

Hi
I need to establish a connection over SSL with 128-bit encryption from my
client application to Active Directory. But when a connection is established
I look at the System log and see the cipher strength is only 56.
Does anybody have an idea how can I raise the cipher strength?
Thanks

Sorry,
It was my fault. I used 56-bit SDK. After upgrade all is perfect.
"Gennady" <[email protected]> wrote in message
news:9mgd4d$[email protected]..
Hi
I need to establish a connection over SSL with 128-bit encryption from my
client application to Active Directory. But when a connection isestablished
I look at the System log and see the cipher strength is only 56.
Does anybody have an idea how can I raise the cipher strength?
Thanks

OAS 4.0.8.1 for Linux Install (orainst) failure

First of all, I couldn't
$ ./orainst
like the (misplaced) installation notes said. That returned a:
bash: ./orainst: No such file or directory
Instead, I tried:
$ . ./orainst
but got:
: command not found
bash: syntax error near unexpected token 'elif'
'ash: ./orainst: line 74: `elif [ -f "$RCFILE2" ]; then
Any ideas?

After I fixed some of the things I broke while searching for the wrksf failure, the PL/SQL Cartridge now works for me too. And, after failing to get the DB Browser to work by loading it into the SCOTT schema, I got it to work by loading it into SYS. (SCOTT can't see the DBA_* views so loading the DB Browser into the database failed.) I haven't tried any Java Servlets yet, but that's next on my list.
If you want to try my wrksf workaround, rather than using Christoph's, here's how you can do it.
1. Backup liborb.so in the $ORACLE_HOME/orb/4.0/lib directory, just in case something goes wrong.
2. Using a hex editor, such as emacs hexl-find-file or ghex, to edit liborb.so, find the string "/proc/stat".
3. Change the directory, "/proc" to something like "/pfoo" and write the shared library file back to liborb.so. You now have the required modified liborb.so.
4. Make the /pfoo directory and cp /proc/stat /pfoo.
5. Edit /pfoo/stat and duplicate the first line, which should be the cpu line. This will let the metrics parser handle it. Make sure that /pfoo/stat has read access.
Of course, the values that the metrics code gets are now bogus, but that does not seem to be a fatal problem.
Hopefully somebody from Oracle is reading this and the real fix will be in the mail soon.

Will oracle release OAS 4082 for Linux ?

We need to move our OAS to Linux in order to cut costs and provide better scalability.
We also need to use SSL.
There are no DOMESTIC version of OAS 4081 for Linux available.
The US Govt lifted encryption export restriction and OAS 4082 (at least on solaris) comes standard with SSL 128 bits.
When will it be available on LINUX ?

Linux support will begin with the next major release of iAS. i.e. 7.x

128-bit SSL question

We are using domestic strength SSL (128 bit) with Weblogic
          5.1 sp5. It looks like browsers that support 128-bit
          encryption are fine, but those that support a lower
          encryption level (i.e. 56-bit or 40-bit) cannot connect. I
          was expecting this, but is there anyway to find out what
          browser is being used and let them know that they need a new
          browser? I know we can do this when they connect via HTTP,
          but what if they connect directly to a secure page? Getting
          a "Page cannot displayed message" isn't the best option.
          BTW the error message that I am getting when those browsers
          connect is a "BadMACException"? Has anyone had any
          experience with this? Is this caused by browsers that
          connect at the wrong encryption levels?
          Thanks,
          Shaun


Robert Patrick wrote:
From my understanding, it is already included in the code you have. You
just need to get a special license key from your BEA sales rep...
Actually yes or no on this:
Yes the installer bundles both "export" and "domestic(128bit)" files in
them; however, the domestic files will be installed only when domestic
strength license is detected at the installation time. So if you get a
domestic strength license after you installed the product, you will need to
reinstall the product with your new domestic strength license in place
($BEAHOME).
-Dan
>
BEA Systems wrote:
Does anybody know where I can get 128-bit SSL for Weblogic Server 6.0?

How to connect Pocket PC to 128 bit WEP protected Airport network

Friends:
Can anyone lead me through the steps to connect my Hp iPaq 4155 Pocket PC to my 128 bit WEB protected Airport network?
Thanks for your help,
Migs

Accessing an Airport wireless network from a wifi enabled PocketPC 2003
http://tech.ifelix.net/2006.html

10 bit way of editing photos: GeForce + 10bit LCD + linux?

Hi,
does anybody have a working 10 bit / channel video output setup with GeForce cards and 10 bit LCDs [3]?
Nvidia GeForce drivers for linux (only) should support it for some time now [1], supposedly X supports it as well and only some (well, many) apps may have problems. But I do find just a very few comments [2] by users actually using it.
[1] http://www.nvidia.com/object/linux-disp … .20-driver
[2] http://www.oyranos.org/2014/05/image-ed … -monitors/
[3] http://www.noteloop.com/kit/display/color-depth/
I understand that deep colour displays are still a niche market, but despite that: the emptyness of the internet on the topic surprises me - it is just full of MS Windows users complaining at Nvidia's strategy re. crippled Windows drivers and of Photoshop users in that same OS.
P.S. I am doing my home work before upgrading my hw. It would be sad to invest into USD 800+ LCD and some GeForce graphics card to find out it won't work.
Last edited by MilanKnizek (2014-07-27 19:02:37)

I have never run a Quadro and a GTX card at the same time but have heard that since there are two different drivers required there can be some problems. The reason of course why I have not tried this is of course the cost of the Quadro cards. Just for background over the course of many years for PPBM testing; I own and have tested the following cards 9500GT, GTX 260, GTX 285, GTX 480, GTX 550 Ti, GTX 580, GT 640, GTX 660, GTX 680, GTX 770, and a GTX 780
Message was edited by: Bill Gehrke
I would suggest that you deal with a real video editing expert system builder like ADK who can build you a guaranteed system with lifetime technical support.

WLS 5.1/128-bit w/1024/128 certificate SSL connections fail

We have a 128-bit version of WLS 5.1 with the 128-bit SP8. SSL connections work with our original low-strength certificate, reporting during startup that it is "Using low strength SSL". If we replace the key/certificate pair with a new 128-bit version, SSL connections no longer work. The ciphersuites list has all of the supported suites in it. There are no exceptions or other problems reported in the log, but browsers fail to connect via SSL. I've not seen anything obvious online that suggests what may be misconfigured.
Thanks in advance for any insights.

I found that Netscape is reporting that the problem is an "Incorrect Message Authentication Code". What else do I need to change beyond replacing the key and certificate? Thanks.

Updating an intermediate CA for a 128 bit SSL cert

We found a 128 bit SSL cert that was affected by the Verisign server shutdown on 1/7/2004. I need to update the intermediate CA for a 5.1 and 6.1 Web Logic server. Where can I find information on how to do this?
Thanks.

download from
http://www.verisign.com/support/roots.html
Scott Stanforth <[email protected]> wrote:
We found a 128 bit SSL cert that was affected by the Verisign server
shutdown on 1/7/2004. I need to update the intermediate CA for a 5.1
and 6.1 Web Logic server. Where can I find information on how to do
this?
Thanks.

CSS 40/128 bit SSL recognition

Is it possible for a CSS (11501 SSL) to detect the browser version of an incoming client to see if he is able to do 128 bit SSL or only 40 bit SSL? Is that in the HTTP header, if so, where / which string / ...?
Thanks for any helpful comment,
Uli

the CSS in general can detect the browser type with the command 'header-field-group' and the 'header-field user-agent ...'
Otherwise, when you define your ssl-server, you need to specify the cipher mode accepted by the module.
You can list 40 bits cypher modes and 128 bits cipher modes.
The SSL protocol will negotiate the best one.
Gilles

Does firefox browser support 128-bit SSL?

I am trying to access a bank i work for who just upgraded their system.

Firefox supports 256 bit since 2002 in Firefox 2, so 128 bit is no problem.
* https://www.fortify.net/sslcheck.html
If websites complain about 128 bit encryption not available then that can be caused by the "U;" that is no longer present in the Firefox 4 user agent.
*http://en.wikipedia.org/wiki/User_agent#Encryption_strength_notations
You can see the current user agent on the Help > Troubleshooting Information page.
You can try to add "U;" via variations for the user agent setting like posted below via the pref general.useragent.override to see if that works.
If you update Firefox then you need to adjust the Gecko (rv:) and Firefox version to reflect the currently installed version.
Some examples (Vista is 6.0 - Windows 7 is 6.1):
* Mozilla/5.0 (Windows NT 6.0; U; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
* Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:2.0.1) Gecko/20100101 Firefox/4.0.1
* User Agent Switcher: https://addons.mozilla.org/firefox/addon/59

XI - 128 Bit encryption

Whether XI (3.0, SP 16) is capable of doing 128 bit SSL Encryption? We are in the process of making a bridge with our external partners (B2B).
We want to install Certificates, and want to do the Encryption?
Who will install the Certificates? From where we can buy these certificates?
Who will do this process?
What are all the other points that we need to remember when we do this 128 bit Encryption?
Thanks

Hi,
SSL is supported by WebAS, and XI is just an application on top of it. The certificates are entered using the Visual Administrator, and also in the ABAP environment, depending on whether you also plan to use it with the SOAP adapter. The configuration is normally done by the basis person.
128-bit is supported. You can get certificates from various providers, e.g. Verisign. To work with a partner who has an user certificate, that user will have to provide you with his public certificate.
The XI Configuration Guide that comes with the installation CD have the instructions. Also, you can access that following weblogs for additional info:
/people/gregor.wolf3/blog/2005/10/11/setup-https-ssl-for-the-sneak-preview-sap-netweaver-04-abap-edition-on-windows
/people/thomas.jung3/blog/2005/05/13/calling-webservices-from-abap-via-https
Regards,
Bill

Problems with IE and 128-bit encryption -- correction

Repost with corrected e-mail address -- sorry!
Hello. I'm having a problem with 128-bit SSL and Internet Explorer.
I'm using WebLogic 5.1 (128-bit build) and a Verisign certificate.
We're seeing some strange behavior with Internet Explorer. It seems to
work fine from some machines, but doesn't work from others. On the ones
that it doesn't work, it gives the "The page cannot be displayed"
message. I've tried this with IE 4.0.1 (with 128-bit patch) and IE 5.5
(128-bit by default) and have the same problems with both. We're seeing
this problem across various Windows operating systems, but aren't seeing
any pattern there. Any ideas as to what might be the problem?
Thanks in advance,
Steve

The Mozilla browsers which include Firefox has supported 256-bit even encryption for a long time now.
The issue could perhaps be the e-qip site is still looking for the old obsolete '''U''' in the useragent which was used to specify the encryption strength of 128-bit though 256-bit has been supported for a long while already at time by Mozilla applications. This "U" was removed in Firefox useragent as of 4.0 which was released March 22nd, 2011. The old 3.6.x was the last to have it.
http://en.wikipedia.org/wiki/User_agent#Encryption_strength_notations
https://hacks.mozilla.org/2010/09/final-user-agent-string-for-firefox-4/

SSL 128 bits on OAS 4.0.8.1 for LINUX ?

Similar Messages

Maybe you are looking for