Urgent SSL questions

 

Why in the name of God don't you post this sample code here in the newsgroup so everyone can see it instead of just emailing it to a single individual? Can you please post it?
Bryan O'Sullivan <[email protected]> wrote:
b> All docs on the BEA website talk about 2-way authentication with
b> browsers and servlets. Can I use the T3Client (t3s://host:port) in
b> setting up my InitialContext to talk to beans on the server to
b> create the secure connection?
Yes, you can. You need to set up some extra environment parameters to
do this, which unfortunately aren't well-documented in 4.5. I'll send
you a code example that should clarify things.
b> Do I need a specific service pack to enable this functionality?
You need at least 4.5.1sp5. This functionality was documented as
working in earlier 4.5 releases, but embarrassingly enough for us, it
didn't.
b> "Important: Certificates from Microsoft Internet Information Server
b> and Netscape Enterprise Server cannot be used with Weblogic Server,
b> because they are stored in a proprietary format."
b> Does this pertain to Netscape Certificate Server as well?
I don't know; I've never used NCS. However, if NCS can spit out
certificates in X.509 format, using either DER or PEM encoding, then
you should have no problems.
b> Where can I find code samples for doing what I want to do?
If you're using a Java client, we actually don't ship any useful
examples of two-way SSL authentication with WLS 4.5.x. However, I'll
mail you a copy of an example program from Denali beta 2 which should
work with a 4.5.x server.
b> The "Using Weblogic SSL" page is not too useful for implementation
b> details.
I know. We've worked to beef the documentation up for Denali. As you
can imagine, since we documented two-way SSL authentication as working
in 4.5 but never really got any complaints from customers about the
fact that it was broken (I just happened to notice it myself), it's
not a feature that has seen much use yet. I apologise for the
roughness around the edges so far; I hope this information helps you
to find out what you need.
When Denali beta 2 comes out, you might want to download it and look
at its expanded support for two-way SSL authentication. It's really
quite a bit more useful than 4.5 in this regard.
If you have any further questions, please feel free to ask.
     <b
Let us pray:
What a Great System.
Please Do Not Crash.
^G^IP@P6

Similar Messages

  • Urgent SQL question : how to flip vertical row values to horizontal ?

    Hello, Oracle people !
    I have an urgent SQL question : (simple for you)
    using SELECT statement, how to convert vertical row values to horizontal ?
    For example :
    (Given result-set)
    MANAGER COLUMN1 COLUMN2 COLUMN3
    K. Smith ......1
    K. Smith ...............1
    K. Smith ........................1
    (Needed result-set)
    MANAGER COLUMN1 COLUMN2 COLUMN3
    K. Smith ......1 .......1 .......1
    I know you can, just don't remeber how and can't find exactly answer I'm looking for. Probably using some analytic SQL function (CAST OVER, PARTITION BY, etc.)
    Please Help !!!
    Thanx !
    Steve.

    scott@ORA92> column vice_president format a30
    scott@ORA92> SELECT f.VICE_PRESIDENT, A.DAYS_5, B.DAYS_10, C.DAYS_20, D.DAYS_30, E.DAYS_40
      2  FROM   (select t2.*,
      3                row_number () over
      4                  (partition by vice_president
      5                   order by days_5, days_10, days_20, days_30, days_40) rn
      6            from   t2) f,
      7           (SELECT T2.*,
      8                row_number () over (partition by vice_president order by days_5) RN
      9            FROM   T2 WHERE DAYS_5 IS NOT NULL) A,
    10           (SELECT T2.*,
    11                row_number () over (partition by vice_president order by days_10) RN
    12            FROM   T2 WHERE DAYS_10 IS NOT NULL) B,
    13           (SELECT T2.*,
    14                row_number () over (partition by vice_president order by days_20) RN
    15            FROM   T2 WHERE DAYS_20 IS NOT NULL) C,
    16           (SELECT T2.*,
    17                row_number () over (partition by vice_president order by days_30) RN
    18            FROM   T2 WHERE DAYS_30 IS NOT NULL) D,
    19           (SELECT T2.*,
    20                row_number () over (partition by vice_president order by days_40) RN
    21            FROM   T2 WHERE DAYS_40 IS NOT NULL) E
    22  WHERE  f.VICE_PRESIDENT = A.VICE_PRESIDENT (+)
    23  AND    f.VICE_PRESIDENT = B.VICE_PRESIDENT (+)
    24  AND    f.VICE_PRESIDENT = C.VICE_PRESIDENT (+)
    25  AND    f.VICE_PRESIDENT = D.VICE_PRESIDENT (+)
    26  AND    f.VICE_PRESIDENT = E.VICE_PRESIDENT (+)
    27  AND    f.RN = A.RN (+)
    28  AND    f.RN = B.RN (+)
    29  AND    f.RN = C.RN (+)
    30  AND    f.RN = D.RN (+)
    31  AND    f.RN = E.RN (+)
    32  and    (a.days_5 is not null
    33            or b.days_10 is not null
    34            or c.days_20 is not null
    35            or d.days_30 is not null
    36            or e.days_40 is not null)
    37  /
    VICE_PRESIDENT                     DAYS_5    DAYS_10    DAYS_20    DAYS_30    DAYS_40
    Fedele Mark                                                          35473      35209
    Fedele Mark                                                          35479      35258
    Schultz Christine                              35700
    South John                                                                      35253
    Stack Kevin                                    35701      35604      35402      35115
    Stack Kevin                                    35705      35635      35415      35156
    Stack Kevin                                    35706      35642      35472      35295
    Stack Kevin                                    35707      35666      35477
    Stack Kevin                                               35667      35480
    Stack Kevin                                               35686
    Unknown                             35817      35698      35596      35363      35006
    Unknown                                        35702      35597      35365      35149
    Unknown                                        35724      35599      35370      35155
    Unknown                                                   35600      35413      35344
    Unknown                                                   35601      35451      35345
    Unknown                                                   35602      35467
    Unknown                                                   35603      35468
    Unknown                                                   35607      35475
    Unknown                                                   35643      35508
    Unknown                                                   35644
    Unknown                                                   35669
    Unknown                                                   35684
    Walmsley Brian                                 35725      35598
    23 rows selected.

  • Urgent 508 Question!

    The only thing i need to do is add a title or label attribute to some of the controls.
    One of the ones to begin with that i am fixing is the ADF tag af:selectBooleanRadio. When i add some text to the shortDesc field of the control, the html is produces doesn't have the title attribute.
    So i tried to use the corresponding trinidad control tr:selectBooleanRadio, and add some text to the same shortDesc field for the control, and in this case it does add a title attribute in the html that it produces.
    Everything else in the code works fine as well when i add the trinidad control, except for one thing. I have a ValueChangeListener that gets called when you click on another tr:selectBooleanRadio. Within that valueChangeListener event handler function, i have a bunch of code which in the end displays a af:popup. The problem i am having when using the trinidad control is that it somehow is not allowing the display of the popup even though it is going through the code that executes display of the popup. When i click on another link or button that is supposed to display a different popup as well, then the popup associated with the tr:selectBooleanRadio also displays at that time, but not originally when the value changed by selecting a different tr:selectBooleanRadio.
    So, my question is, are there any other successful ways of adding a title attribute to the these controls. If its the af:selectBooleanRadio how do we make it so that the html it generates has the title attribute, or if its the tr:selectBooleanRadio, what might be happening during the event handling that it is not allowing the af:popup to display?
    A quick response to this appreciated since this is very urgent! Thanks very much for your help!

    JDev version is 11.1.1.5
    ok, i will go one step at a time so that it is easy to understand. So i will only mention the first thing right now and then we can try other things later.
    i have a af:selectBooleanRadio. After running the page/application, when the user does View Source in the browser for the page that has the radio button, it is in the form of an HTML tag <input> of type for radio button. What i want to do is to have a "title" attribute for the <input> tag for this radio button. I can use the tr:selectRadioButton trinidad control to do that, but then i have other issues with that, and we can talk about those later.
    Let me know if it is still not clear.
    Thanks very much for your help!

  • URGENT : Challenge questions query: Oracle Access Manager 10g

    Hi all,
    This is a query regarding password challenge questions in Oracle Access Manager 10g. We have created password policies for a specific container in OID (say cn=xxx,cn=users,dc=oracle,dc=com) and it is working fine.
    In order to exclude certain set of users (say user ABC ) for password policies, we have set the obpasswordchangeflag to false for those users which are in same container for which password policy is created.
    When we try to login to the application with the user say ABC, I am not seeing any reset password page - I am happy till this point. However it is showing Configure Challenge questions page. Is there any way to bypass this page? Or is this the expected behavior?
    This is very urgent and prompt reply is very much appreciated.
    -Mahendra

    Hi Mahendra,
    This is expected behaviour. In order to exclude the password policy management for some certains user for particular domain/container. please add the below configuration parameter to your OAM10g password policy.
    Password Policy Filter Field     (!(|(cn=xxx)(cn=abc)))
    ----Ajay

  • Load Balancing with BigIP / SSL question

    I have an oddball question. We're load balancing ColdFusion
    MX7 across 3 servers using a BigIP load balancing server. We
    decided to go the hardware approach and it has been great except
    for one small configuration issue.
    We use a mix of SSL and non SSL pages, prior to the switch
    from a single server to a load balanced setup I used to script that
    would determine if a page that was supposed to be SSL had the
    variable CGI.HTTPS turned on or off. If it was off, the page would
    redirect back to itself with the SSL turned on.
    The problem we have is that we followed BigIP's instruction
    to secure the load balancing hardware instead of the three servers
    running behind it. So what happens is that the traffic goes to the
    load balancer port 441, but then the calls from the load balancer
    to the individual servers is port 80. So even if a page is called
    as HTTPS://... the coldfusion server says that CGI.HTTPS is "off"
    since the traffic is port 80.
    This isn't much of a problem, our SSL pages are linked as
    HTTPS:// and the only problem would actually arise if someone was
    to type in the URL and call it as HTTP rather than HTTPS.
    My questions is this, does anyone know of a way that I can
    detect if the page should be HTTPS and is not without changing our
    configuration and putting SSL certificates on each individual
    server?

    Hey,
    Well the load balancing with the BigIP device is really very
    amazing. I think
    what i liked most was swapping out servers when their lease
    was up, through the
    BigIP manager I just stopped all traffic to a server, shut it
    down, plugged in
    the new one and turned traffic back on. It was really very
    easy.
    The SSL stuff still gives me a headache to think about. but
    I should mention I
    no longer work where I was, plus now I'm all .net C# but
    that's a different
    story.
    I think if I was going to do this all again I would not have
    secured the bigIP
    unit. It was nice to buy one SSL cert for all the servers I
    attached rather
    than one per server, but getting the SSL sites to work
    properly was a headache.
    We also use windows file replication where now I would go
    with like a pair of
    Dell MD1000's mirrored for storage and just have tons of ram
    and cpu on the
    front end units. Depends what you want to spend I guess. I
    think the bigIP unit
    we bought was like 20 grand, i think they are cheaper now
    though.
    Hope I helped.

  • Urgent - help question on sending http instead of https

    I'm trying to dump out my http wrapper: I'm trying to set send http instead of https so I can dump the wrapper.
    currently my code does the following for https determination. i read from a configuratioin file to see if i should set https or http
    question) Do i need an else section to cover non https?
    If so, what do i need to set for http properties.
    // check if https is wanted
    // yes - send https
    String useHttps = cf.get("useHttps", "true");
    if (useHttps.equals("true")) {
    logger.debug(classMethod + "https mode=" + useHttps);
    System.setProperty(
    "java.protocol.handler.pkgs",
    "com.sun.net.ssl.internal.www.protocol");
    // make provider and/or protocol configurable?
    Security.addProvider(
    new com.sun.net.ssl.internal.ssl.Provider());
    }

    resolved - don't need help anymore on it

  • Urgent constructor question..

    I'm trying to call this Flower class in another class called Garden, in which I created a new Flower by using a statement
    private Flower lastflower;
    and it's saying it cannot find the symbol - constructor Flower.
    Can anyone tell me why and help correct this problem?
    Below is the code for my Flower class.
    Any help is really appreciated, it's for my Java class!
    import objectdraw.*;
    import java.awt.*;
    * Write a description of class Flower here.
    * @author (your name)
    * @version (a version number or a date)
    public class Flower
        protected FilledOval dot;
        protected FilledRect stem;
        protected FilledOval petal1;
        protected FilledOval petal2;
        protected static final int boundary = 100;
        protected RandomIntGenerator colorGen =
                new RandomIntGenerator(0,255);
        protected Color petalColor;
        protected Boolean flowerContains=false;
        private DrawingCanvas canvas;
        public void changeColor(){
        dot = new FilledOval(150,150,15,15, canvas);
        dot.setColor(Color.YELLOW);
        petalColor = new Color(colorGen.nextValue(),
                                    colorGen.nextValue(),
                                    colorGen.nextValue());
        petal1.setColor(petalColor);
        petal2.setColor(petalColor);
        public void grow(Location point){
        stem = new FilledRect (dot.getX()+3, dot.getY()+10, 10, 10, canvas);
        stem.setColor(Color.GREEN);
        if (dot.getY()>boundary){
            dot.move(0,-4);
        else{
         petal1 = new FilledOval(dot.getX()-12, dot.getY()-25, 40,70,canvas);
         petal2 = new FilledOval(dot.getX()-25, dot.getY()-10, 70,40,canvas);
         dot.sendToFront();
         stem.sendToBack();
         petal1.setColor(petalColor);
         petal2.setColor(petalColor);
        public Boolean flowerContains(Location point){
            if (petal1.contains(point)){
                return true;
            else if (petal2.contains(point)){
                return true;
            else if (dot.contains(point)){
                return true;
            else{
                return false;
    }

    I don't care how fucking urgent you think it is, it isn't to us. We will answer your question when and how we feel llike it. Have some manners and if you must, then bump your original post. Don't create another time wasting piece of cr&#97;p!

  • Beginner SSL questions

    I am still very much a beginner and this is my first time trying to set SSL up. I am experiencing some issues and I am not really sure what to do. I hope this is the right forum to post this.
    When I go to https://xxxx.xxxxx.net/myContext my login index.jsp page displays however
    1.) In IE it's not showing the page as secured(no lock).
    2.) When I log in using valid credentials the url becomes http://xxxx.xxxxx.net:443/myContext/myServlet
    and the page I expect to display doesnt. It only displays this:
    3.) None of my stylesheets are being used.
    When I go to http://xxxx.xxxxx.net/myContext my login index.jsp page displays perfectly and I am able to log in and do see the expected page.
    Apparently I missed a step somewhere or just the obvious but how do I get my index.jsp to use SSL. Any help would really be appreciated. Thanks in advance
    Crystal
    SERVER.XML
    <Connector port="80"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="false" redirectPort="443" acceptCount="100"
    debug="0" connectionTimeout="20000"
    disableUploadTimeout="true" />
    <Connector port="443"
    maxThreads="150" minSpareThreads="25" maxSpareThreads="75"
    enableLookups="true" disableUploadTimeout="true"
    acceptCount="100" debug="0" scheme="https" secure="true"
    clientAuth="false" sslProtocol="TLS"
    keystoreFile=".IRRS_keystore" keystorePass="thepassword"/>
    STDOUT.LOG
    May 4, 2007 11:20:38 AM org.apache.coyote.http11.Http11Protocol init
    INFO: Initializing Coyote HTTP/1.1 on http-80
    May 4, 2007 11:20:39 AM org.apache.coyote.http11.Http11Protocol init
    INFO: Initializing Coyote HTTP/1.1 on http-443
    May 4, 2007 11:20:39 AM org.apache.catalina.startup.Catalina load
    INFO: Initialization processed in 1031 ms
    May 4, 2007 11:20:39 AM org.apache.catalina.core.StandardService start
    INFO: Starting service Catalina
    May 4, 2007 11:20:39 AM org.apache.catalina.core.StandardEngine start
    INFO: Starting Servlet Engine: Apache Tomcat/5.5.0
    May 4, 2007 11:20:39 AM org.apache.catalina.core.StandardHost start
    INFO: XML validation disabled
    May 4, 2007 11:20:40 AM org.apache.catalina.core.ApplicationContext log
    May 4, 2007 11:20:40 AM org.apache.coyote.http11.Http11Protocol start
    INFO: Starting Coyote HTTP/1.1 on http-80
    May 4, 2007 11:20:40 AM org.apache.coyote.http11.Http11Protocol start
    INFO: Starting Coyote HTTP/1.1 on http-443
    May 4, 2007 11:20:40 AM org.apache.jk.common.ChannelSocket init
    INFO: JK2: ajp13 listening on /0.0.0.0:8009
    May 4, 2007 11:20:40 AM org.apache.jk.server.JkMain start
    INFO: Jk running ID=0 time=0/15  config=D:\Tomcat5\conf\jk2.properties
    May 4, 2007 11:20:40 AM org.apache.catalina.startup.Catalina start
    INFO: Server startup in 1313 ms

    Are you intentionally leaving a connector for port 80 open? If you don't need anything to be non-ssl enabled then you should comment out the port 80 connector and just have a connector for port 443. You should then be able to access any of your stuff via https://whatever/whathaveyou...
    [edit]
    this is an obvious question but you didn't mention it so just in case - you did create a self signed server certificate and import that into the keystore right? (or use a commercial certificate and import that and the CA chain into your trust store)
    Message was edited by:
    cjmose

  • Mobile Access + Wiki Server via SSL Question

    If MAS is running with SSL, does that SSL continue for the entire session? Or just the initial passing of credentials?
    I'd like to not have the wiki server running SSL for internal use if MAS encrypts all the traffic. The reason for the question is when connecting to the wiki server via MAS, there is no SSL lock on the browser, telling me it's in the clear.

    Mobile Access Server does not provide proxy access to 10.6 server Wiki.
    hth,
    b.

  • Hello. I am trying to create an email address for my iPod touch 5G. It will verify for awhile ask me the SSl question, and fails all the verifications please help!

    I am trying to create an Email address on my iPod and always fails. can anyone give me some solutions?

    Bt SSI do you mean your security question answers?
    Forgotten Security Questions/Answers
    You need to contact Apple by:
    1 - Use the Express lane and start here:
    https://expresslane.apple.com
    then click More Products and Services>Apple ID>Other Apple ID Topics>Forgotten Apple ID security questions.
    or
    Apple - Support -form iTunes Store - Contact Us
    2 - Call Apple in your country by getting the number from here:
    http://support.apple.com/kb/HE57
    or           
    Apple ID: Contacting Apple for help with Apple ID account security
    3 - Use your rescue email address if you set one up
    Rescue email address and how to reset Apple ID security questions
    For general  information see:
    Apple ID: All about Apple ID security questions

  • Help please - urgent exam question

    I'm having difficulty with the following question for an OU exam:
    You will now create a method to enable students to make a list of the books they have read, whether they are on the course�s reading list or not.
    Add an instance method to the class, with the header: public Set<String> collectBooksRead()
    The method should first declare a local variable of type Set called readBooks capable of holding a set of strings.
    The method should then assign to that variable an appropriate set object.
    The method should then use a dialogue box to collect the book titles one at a time from the user.
    The dialogue box should have the prompt "Please input a book title or * to finish", and should have an empty string as its default reply.
    Each entered book title should be added to the set referenced by the local variable readBooks. Finally the method should return readBooks as the message answer.
    Here's my code so far but it endlessly loops and I'm unsure how to make it stop.
    public Set<String> collectBooksRead()
    Set<String> readBooks = new HashSet<String>();
    String title;
    do
    title = OUDialog.request("Please input a book title or * to finish",""); //OUDialog.request displays an input dialogue box as specified by a superclass
    readBooks.add(title);
    while
    (title != "*");
    }  

    I'm having difficulty with the following question for
    an OU exam:
    You will now create a method to enable students to
    make a list of the books they have read, whether they
    are on the course�s reading list or not.
    Add an instance method to the class, with the header:
    public Set<String> collectBooksRead()
    The method should first declare a local variable of
    type Set called readBooks capable of holding a set of
    strings.
    The method should then assign to that variable an
    appropriate set object.
    The method should then use a dialogue box to collect
    the book titles one at a time from the user.
    The dialogue box should have the prompt "Please input
    a book title or * to finish", and should have an
    empty string as its default reply.
    Each entered book title should be added to the set
    referenced by the local variable readBooks. Finally
    the method should return readBooks as the message
    answer.
    Here's my code so far but it endlessly loops and I'm
    unsure how to make it stop.
    unplug the computer. works every time

  • Very urgent BPS questions

    hey pals,
    I have couple of doubts which are very urgent to be clarified.
    1.how to debug the code in fox editor?
    2.can we use transactional infocubes in bps?
    3.can we use multiprovider for planning?
    4.how to fine tune the standard planning functions provided by sap?
    5.when exit variables are used?
    I need these answers asap.Anyone with suitable answer will be rewarded immediately.Thank you.
    Regards,
    Rags

    1.how to debug the code in fox editor?
         use break-point in FOX code
    2.can we use transactional infocubes in bps?
         yes. Transactional cubes are meant for only BPS.
    3.can we use multiprovider for planning?
       Yes. multiproviders can be used both in basic planning area as well as multi planning area.
    4.how to fine tune the standard planning functions provided by sap?
       these are not recommended. But, create exit & FOX functions to meet your requirements.
    5.when exit variables are used?
       If variable1 needs to be derived from variable2. (in which, end user fills only variable2).

  • URGENT: Unicode questions

    Hi experts out there
    We need to have a unicode system soon.
    At the moment we have a non unicode R/3 Rel. 4.7 Enterprise.
    My questions are:
    1. Are there patches that upgrade the non unicode R/3 Rel. 4.7 Enterprise to the unicode R/3 Rel. 4.7 Enterprise?
    2. Should we better upgrade it to ECC 6.0? What is the effort here?
    Any suggestions/responses would be very appreciated.
    Thanks
    HW

    There cant be patches because the data must be converted from a certain code page to unicode.

  • Urgent Reset Question--???  --Help???

    I know if I reset my Ipod to correct a Problem I will lose all my Music. My Question is will all my library of songs reload, or will I have to re-buy all my music?
    Thanks for your help!
    Dell   Windows XP Pro  

    Resetting the iPod does not affect the contents, you are confusing it with restoring the iPod.

  • Urgent - general question - cursor related, maybe?

    Background:
    I have a hierarchy of tables say A,B,C, each having a one to many relationship (A 1..n B 1..n C). I want to set one of the columns of A to a value of the primary key of one of the rows of B or C. The logic that I need to set the value in A is as follows:
    If one of the rows in B has one of the several columns = NULL(start with the column on the left and keep going to the right) then I need to set the primary for that row in B to the column in A.
    If all columns in all the rows in B <> NULL, then I need to drill down deeper into table C to do the same and set the Column in Table A to a value if I find a discrepnacy.
    Question:
    Is it possible to do this without using cursors? My boss thinks it can be done without using cursors. I don't see how it is possible. But if anyone has an idea please let me know.
    Thanks in advance.

    SQL> -- test data:
    SQL> SELECT * FROM a
      2  /
         PK_ID COL       COL2 COL3 COL4 COL5                                                           
             1 ABC        123 FRED ?    *                                                              
             2 XYZ        789 MIKE ??   **                                                             
    SQL> SELECT * FROM b
      2  /
         PK_ID       FK_A   COL1CODE   COL2CODE   COL3CODE COL1DESC COL2DESC COL3DESC                  
             5          1        111        222        333 ABC      SDF      TEST                      
             6          1        444        555        666 A35                                         
             7          2        111        222        333 ABC      SDF      TEST                      
             8          2        888        222        999 A60      B45                                
    SQL> -- update:
    SQL> UPDATE a
      2  SET    col4 =
      3           (SELECT pk_id
      4            FROM   (SELECT pk_id, fk_a,
      5                     NVL2 (col1desc,
      6                        NVL2 (col2desc,
      7                           NVL2 (col3desc, NULL, col3code),
      8                           col2code),
      9                        col1code) AS colcode,
    10                     ROW_NUMBER () OVER (PARTITION BY fk_a ORDER BY pk_id) AS rn
    11                 FROM   b
    12                 WHERE  NVL2 (col1desc,
    13                        NVL2 (col2desc,
    14                           NVL2 (col3desc, NULL, col3code),
    15                                 col2code),
    16                           col1code) IS NOT NULL)
    17            WHERE  rn = 1
    18            AND    fk_a = a.pk_id),
    19           col5 =
    20           (SELECT colcode
    21            FROM   (SELECT pk_id, fk_a,
    22                     NVL2 (col1desc,
    23                        NVL2 (col2desc,
    24                           NVL2 (col3desc, NULL, col3code),
    25                           col2code),
    26                        col1code) AS colcode,
    27                     ROW_NUMBER () OVER (PARTITION BY fk_a ORDER BY pk_id) AS rn
    28                 FROM   b
    29                 WHERE  NVL2 (col1desc,
    30                        NVL2 (col2desc,
    31                           NVL2 (col3desc, NULL, col3code),
    32                                 col2code),
    33                           col1code) IS NOT NULL)
    34            WHERE  rn = 1
    35            AND    fk_a = a.pk_id)
    36  WHERE EXISTS
    37           (SELECT pk_id
    38            FROM   (SELECT pk_id, fk_a,
    39                     NVL2 (col1desc,
    40                        NVL2 (col2desc,
    41                           NVL2 (col3desc, NULL, col3code),
    42                           col2code),
    43                        col1code) AS colcode,
    44                     ROW_NUMBER () OVER (PARTITION BY fk_a ORDER BY pk_id) AS rn
    45                 FROM   b
    46                 WHERE  NVL2 (col1desc,
    47                        NVL2 (col2desc,
    48                           NVL2 (col3desc, NULL, col3code),
    49                                 col2code),
    50                           col1code) IS NOT NULL)
    51            WHERE  rn = 1
    52            AND    fk_a = a.pk_id)
    53 
    SQL> /
    2 rows updated.
    SQL> -- results:
    SQL> SELECT * FROM a
      2  /
         PK_ID COL       COL2 COL3 COL4 COL5                                                           
             1 ABC        123 FRED 6    555                                                            
             2 XYZ        789 MIKE 8    999                                                      

Maybe you are looking for