What -Dweblogic.security.SSL.nojce parameter does?

Hello,
I had some issue regarding Cipher initialization :
java.security.InvalidKeyException: Illegal key size
     at javax.crypto.Cipher.a(DashoA13*..)
     at javax.crypto.Cipher.init(DashoA13*..)
     at javax.crypto.Cipher.init(DashoA13*..)
     at com.certicom.tls.provider.Cipher.init(Unknown Source)
     at com.certicom.tls.ciphersuite.SecurityParameters.createWriteCipher(Unknown Source)
     at com.certicom.tls.record.handshake.HandshakeHandler.changeCipherSpec(Unknown Source)
     at com.certicom.tls.record.handshake.ClientStateReceivedCertificate.handle(Unknown Source)
     at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessage(Unknown Source)
     at com.certicom.tls.record.handshake.HandshakeHandler.handleHandshakeMessages(Unknown Source)
     at com.certicom.tls.record.MessageInterpreter.interpretContent(Unknown Source)
     at com.certicom.tls.record.MessageInterpreter.decryptMessage(Unknown Source)
     at com.certicom.tls.record.ReadHandler.processRecord(Unknown Source)
     at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
     at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
     at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)
     at com.certicom.tls.record.WriteHandler.write(Unknown Source)
     at com.certicom.io.OutputSSLIOStreamWrapper.write(Unknown Source)
     at java.io.BufferedOutputStream.flushBuffer(Unknown Source)
     at java.io.BufferedOutputStream.flush(Unknown Source)
     at java.io.FilterOutputStream.flush(Unknown Source)
     at weblogic.net.http.HttpURLConnection.writeRequests(HttpURLConnection.java:154)
     at weblogic.net.http.HttpURLConnection.getInputStream(HttpURLConnection.java:358)
     at weblogic.net.http.SOAPHttpsURLConnection.getInputStream(SOAPHttpsURLConnection.java:37)
     at weblogic.net.http.HttpURLConnection.getResponseCode(HttpURLConnection.java:947)
and it seem that the solution is to start weblogic using "-Dweblogic.security.SSL.nojce = true ".
I've tried to find out what this parameter exactly does, but I couldn't find any relevant documentation.
Can you please try to explain what exactly does and what is the impact on my application if I use "-Dweblogic.security.SSL.nojce parameter = true "? From my understanding it disables default jdk jce , but what is using instead? Some weblogic security provider?
Thanks in advance
Edited by: 871158 on Jul 8, 2011 12:08 AM

apart from the official documentation
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13707/ssl.htm
I found the nojce parameter mentioned here
http://ofmwsoa11g.blogspot.com/p/securing-weblogic-with-ssl.html
"When starting a WebLogic Server instance, you can specify the command line argument -Dweblogic.security.SSL.nojce=true to use a FIPS-compliant (FIPS 140-2) crypto module in the server's SSL implementation. FIPS 140-2 is a standard that describes U.S. Federal government requirements for sensitive, but unclassified use."
but definitely you need a Security Specialist (I am just a GP, general practitioner) on this one....

Similar Messages

O7_dictionary_accessibilty parameter : does it influence the security of the DB ?

o7_dictionary_accessibilty parameter : does it influence the security of the DB ? If yes, how ? If no, why not ?
Thanx a lot !
Regards,
Luc

The o7_dictionary_accessibility parameter can be used to prevent (if set to false) the viewing of the data dictionary (SYS tables and views) by users with an "ANY" privilege (e.g. SELECT ANY TABLE). If set to false, then a user must be granted explicit access to a SYS object or through the roles SELECT_CATALOG_ROLE, EXECUTE_CATALOG_ROLE, and DELETE_CATALOG_ROLE.
Oracle9i provides the privilege SELECT ANY DICTIONARY (Oracle9i) which gives access to the entire data dictionary (SYS tables and views). The role SELECT_CATALOG_ROLE limits access to SYS views.

What should I use as parameter name in call.addParameter in WS DII client

I'm using dynamic invocation interface to call a web service in Oracle OC4J.
The part of WSDL "Types" is:
<element name="myType" type="tns:myType" />
   <complexType name="myType">
     <sequence>
       <element name="sss" nillable="true" type="string" />
     </sequence>
</complexType>
...My J2SE client has following code I belive create problem:
call.addParameter("sss", input,MyType.class, ParameterMode.IN);when I invoke the web service, I got error:
javax.xml.rpc.soap.SOAPFaultException: caught exception while handling request: unexpected element name: expected={http://mypackage/B2BGateway/types}myType, actual=sss
I changed my code according to this message as it expected to be:
call.addParameter("{http://mypackage/types}myType",
     input,MyType.class, ParameterMode.IN);I got :
HTTP transport error: javax.xml.soap.SOAPException: java.security.PrivilegedActionException: javax.xml.soap.SOAPException: Error parsing envelope: (2, 179) Expected name instead of {.
seems the "{" should not be part of parameter name.
Then, what should I use as parameter name.
BTW, the web service server side code should works fine as I can test it with others client.
Thanks

Moved one step further:
I changed abit to code:
call.addParameter("myType", input,MyType.class, ParameterMode.IN);I can see the server side got SOAP request:
   <env:Envelope xmlns:env="http://schemas.xmlsoap.org/soap/envelope/" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
      <env:Body>
         <myType>
            <ans1:sss xmlns:ans1="http://mypackage/types/">abc</ans1:sss>
         </myType>
      </env:Body>
   </env:Envelope>As you can see, the problem in the generated request is "myType" does not have namespace
Could someone tell me how to fix it.
Thanks
Edited by: John618 on Feb 21, 2009 5:03 PM

PO creation error - FBGENDAT parameter does not exist

Hi SRM experts
I'm trying to verify the error that occurs when the automatic creation of a PO. I know you must enable the parameter FBGENDAT on my R3. However, this parameter does not exist on my R3. What should I do?
The R3 version is 4.6 C. This functionality exists in this version?
Thanks
Thiago Vassoler

i think this SAP note describes this process
539978 - Automatic generation of BAPI test data directory.
Muthu

Iaik.security.ssl.SSLCertificateException - the mother of all errors

Hi,
We're experiencing this error:
Error occurred while connecting to the FTP server "whatever:whichever": iaik.security.ssl.SSLCertificateException: Peer certificate rejected by ChainVerifier
when connecting to the FTPS server.
What was done by the teams:
1) Every single certification was checked, there is pretty much no way this is a certificate problem
2) Nothing was changed in the systems, this is an overnight error than kept persisting
3) We restarted both involved servers, this keeps on bugging us
4) No relevant traces are in SMICM, ST11, ST22, SM21, anywhere
5) NOTHING was changed on any of the two servers.
6) In addition, also the development PI server tries to connect to the same FTPS server and the same error appears.
This is an overnight problem that just didn't disappear whatever we did.
From my experience with this precise error which I can say it is now of more than a year is that it kept popping up in our system and it was triggered from causes as vast as some FTPs processes hanging on the FTPS server requiring restart, to filling the space on the server, not updated DNS cache on the PI server, you name it.
I'm really amazed the amount of times this error pops up in the CC monitor and the cause is everything else BUT a certification issue.
Do you have any idea worth sharing on why this might happen out of the blue?
Best regards,
George

Hi George,
I have a similar issue here and have tried out all the possible options.
1) Imported certificate into Trusted CA's from a server where the connectivity is working fine.
2)Restarted the Java stack.
You Mentioned about FTPS server. Can you please confirm where else do we need to import the certificate?

File Adapter FTPS: Error - iaik.security.ssl.SSLException

I'm trying to use FTPS to communicate from XI ( SP 15 ) . FTPS system Admin provided CA Certificate and we installed same in key Storage as trusted CAs.
However when I try to send file It was throwing message " Error: Message processing failed: iaik.security.ssl.SSLException: Peer sent alert: Alert Fatal: illegal parameter " In the Adapter Monitoring .
However same Certificates installed on recent versions of XI ( PI 7.0) works just fine.
Any ideas will be appreciated.

Hi S T,
Check these..
Details for 'Is Web service security available?'
HTTPS Error
All the best!
cheers,
Prashanth
P.S Please mark helpful answers

SSL client default does not exist

Hi,
I had newly installed XI system on one of our server.
when i am creating RFC destination INTEGRATION_DIRECTORY_HMI, i am getting the following error on logon /security tab.
"<b>SSL client default does not exist"</b>
and it is not even permitting to go furthur!
any suggestions will be appreciated highly.
Thanks,
Ravi

Hi Ravi
Check if your SSL provider is running.
Go to visual admin--instanceservernodeservices----SSL provider.Start the SSL service and check for the configuration.
Follow the same steps for the dispatcher node.
Go to visual admin--instancedispatchernodeservices----SSL provider

Weblogic.security.SSL.ignoreHostnameVerification

Hello,
I'm trying to do a jaxws client from a webservice over https, but I'm getting this error:
javax.xml.ws.WebServiceException: javax.net.ssl.SSLKeyException: [Security:090504]Certificate chain received from www.tjrs.jus.br - 200.198.149.50 failed hostname verification check. Certificate contained www.tjrs.jus.br but check expected www.tjrs.jus.br
My first question is: why would "www.tjrs.jus.br" be different that "www.tjrs.jus.br"? :)
I know I can set weblogic.security.SSL.ignoreHostnameVerification=true to avoid error above and here comes my second question: is it safe doing this for a production environment?
I appreciate any help.
Thanks,
Mauricio

1st question:
This sounds very similar:
http://improbablecode.blogspot.com/2010/01/security090504-weblogic-hostname.html
2nd question:
It will always increase your security risk if you disable hostname verification. Depends on whether you're comfortable with not being able to detect host name mismatches

Unexpected Exception Error :Netbeans remote project on dev using secure SSL

I created the remote project for the Dev envirnment to debug the workflow activity,
I can set the identity manager external instance for this dev envirnment even while doing that
need to click the check box for secure connection other wise will get the error for connection,
Now when connection is set, and I tried to start the debuger on dev, I am getting the unexpected exception error,
Is this error is because of Dev envirnment is secure SSL, Can I still run the debugger on this dev envirment.
Thanks,

Don't multipost and don't use the browser's back button to edit your posts as that creates multiple postings. I've removed the other thread you started with the same questio.
Also, don't post to long dead threads. I've blocked your post and locked the thread you resurrected.
db

What type of out put parameter should i have to pass here?

Hi all,
           I'm working on a custom function module. In that i have to call a standard function module "SAPWL_READ_STATISTIC_FILES".
This standard FM is returning the values in changing parameter "ALL_STATS" of type "SAPWL_ALLSTATS". SAPWL_ALLSTATS is a structure in a pool structure "sapwl".
My problem is when i'm testing the standard FM with some input parameters its throughing some values into changing parameter "ALL_STATS", but in my custom FM for the same standard FM i'm passing the same values its not throughing any values into that changing parameter "ALL_STATS".
So can anybody check this standard FM and suggest me how to declare the output parameter type and pass? Its a pool structure there i'm getting problem to define it. Help me out please.
Thanks & Regards
Naidu

Hello Naidu
Using the sample report ZUS_SDN_READ_STATISTICAL_FILES I can fetch a couple of records from the system (ERP 6.0).
If your selection does not work within your custom function module then perhaps there is some conversion problem with the input data (keep in mind that the SAP-GUI takes care of all conversions, e.g. a date '10.11.2008' is automatically converted into '20081110').
*& Report ZUS_SDN_READ_STATISTICAL_FILES
*& Thread: What type of out put parameter should i have to pass here?
*& <a class="jive_macro jive_macro_thread" href="" __jive_macro_name="thread" modifiedtitle="true" __default_attr="1119462"></a>
REPORT zus_sdn_read_statistical_files.
TYPE-POOLS: sapwl.
DATA: gt_stats    TYPE STANDARD TABLE OF sapwl_statrec.
DATA: gd_msg      TYPE bapi_msg.
START-OF-SELECTION.
CALL FUNCTION 'SAPWL_READ_STATISTIC_FILES'
    EXPORTING
      read_client                 = syst-mandt
*     READ_TIME                   = '001000'
*     READ_TIME_DELTA             = '000200'
*     READ_EXCLUDE_USERNAME       =
*     READ_START_DATE             = SY-DATUM
*     READ_START_TIME             = ' '
*     READ_USERNAME               =
*     READ_WORKPROCESS            = 'FFFF'
*     STATISTIC_FILE              = ' '
*     AS_STATISTIC_FILE           = ' '
*     NO_BUFFER_FLUSH             = ' '
*     WAIT_FACTOR                 = 150
*     INCLUDE_APPL_STAT           = ' '
*   IMPORTING
*     PROBLEMS                    =
*     TOTAL_RECS_READ             =
*   TABLES
*     PROTOCOL                    =
*     RFC_RETURNS                 =
*     SERVER_LIST                 =
    CHANGING
      all_stats                   = gt_stats.
DESCRIBE TABLE gt_stats.
WRITE syst-tfill TO gd_msg NO-ZERO.
CONDENSE gd_msg NO-GAPS.
CONCATENATE gd_msg 'Records found' INTO gd_msg
    SEPARATED BY space.
MESSAGE gd_msg TYPE 'I'.
END-OF-SELECTION.
Regards
Uwe

Firefox update installs, but does not apprearon screen, or task manger yet is running what is going on and how does one fix it?

I installed the update Mozilla Firefox 28. It was suppose to launch upon completion. it did not appear on the monitor screen, nor the task manager, but was running; for when I attempted to install the older version again it, it said that Firefox was running and needed to be turned off.
I restarted the computer and tried opening Firefox, with the same results.
After restarting again, I attempted to reinstall the update, with the same results taking place.
I attempted to uninstall Firefox and install the new version. The same results took place.
In the past, I could install Firefox 27 update, only now I can't for the same thing takes place. Past a certain version (19), this event takes place, but 19 and older can install it with no problems.
I checked Firefox troubleshooting information. All was normal. I checked my firewall. Again, all was normal. Tried Firefox reset. Did not help. Tried with my firewall disabled. Did not solve the problem.
Ran a virus check (deep) no viruses. Checked my computer system. No errors.
I can install updates for my other programs, even install new programs; just not Firefox.
What is going on and how does one fix it.

Hi Amseeking,
Thank you for your question. From your description, you tried to install the 28 update from a version 19 installation. Did you install a fresh install of 28 successfully? Where the name of the file is"Firefox Setup Stub 28.exe"? This is what is sound like happened. When going to about Firefox and searching for updates it installs over the current installation. However if Firefox was already running, there are more than one installation.
Updating from version 19 to 28 would not be a problem. However the user data from your previous version would have to be imported to the new installation if you have more than one install on that computer.
An easy way to tell is to search for Firefox in the Start menu to see if more than one icon shows up in the search results.
I hope this helps.

I have no clue as to what my security question answers are and since this is my first purchase from my mac book it is asking for these. What do i do?

I have no clue as to what my security question answers are and since this is my first purchase from my mac book it is asking for these. What do i do?

You won't be able to change your rescue email address until you can answer 2 of your questions, you will need to contact iTunes Support / Apple to get the questions reset.
Contacting Apple about account security : http://support.apple.com/kb/HT5699
When they've been reset you can then use the steps half-way down this page to update your rescue email address for potential future use : http://support.apple.com/kb/HT5312

HT201303 How can I find out what my security answers are? I am trying to purchase an app on a new device and it won't let me without answering and I have totally forgotten

How can I find out what my security answers are? I am trying to purchase an app on a new device and it won't let me without answering and I have totally forgotten

Welcome to the Apple Community.
You might try to see if you can change your security questions. Start here, change your country if necessary and go to manage your account > Password and Security.
I'm able to do this, others say they need to input answers to their current security questions in order to make changes, I'm inclined to think its worth a try, you don't have anything to lose.

Is there a C version that does what the MAX 1-D Interactive does?

Is there a C version that does what the MAX 1-D Interactive does? Or a solution to the problem below.
I got the MAX 1-D Interactive to work with my stepper motor. The hardware setup is at the bottom.
I am trying to write a C program in Visual Studio 2010 to control a stepper motor. I found an example program called 1D Straight Line Move.c in
C:\Program Files\National Instruments\NI-Motion\Documentation\Examples\NI-Motion Help\C
I copied the example file and the needed .h, .c and .lib files into a Visual Studio project. I changed the velocity, acceleration, and deceleration to match the values in the MAX 1-D Interactive. The solution builds, but when I run it I get the following error message
Run-Time Check Failure #0 - The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
Setup:
I am running the latest NI Motion Software.
PXI-7334 connected to UMI-7774 using I/O Motion cable
UMI-7774 connected to P70360 Stepper Driver using control cable
P70360 Stepper Driver connected to NEMA 23 (T21NRLC) using Orange (A-), Black (A), Yellow (B-), Red (B)
NEMA 23 is powered by 120V AC power supply
P70360 Stepper Driver is set using DIP Switches (I tried to use the P7000 software tool that came with it, but it never found the driver):
S1: 1
S2-1: Off
S2-2: On
S2-3: On
S2-4: On
S2-5: Off
S2-6: Off
S2-7: Off
S2-8: Off
S2-9: Off
S2-10: On
S2-11: On
S2-9: Off
Attachments:
1D Straight Line Move.c ‏5 KB

No I am not using Visual C++ MFC. I am using an empty C++ project in Microsoft Visual Studio 2010. Although I eventually want to create a .exe file from this project so I'll have change project type.
The motor runs using MAX to control it.
It did run using the 1D Straight Line Move.c project, but it gave me the below errors. That night I unplugged it because the stepper motor gets hot. The next day MAX still moves the motor but the 1D Straight Line Move.c project doesn’t and I still get the errors below.
I am getting two errors: (I was getting the same errors yesterday)
Run-Time Check Failure #2 - Stack around the variable 'errorCode' was corrupted.
Run-Time Check Failure #0 - The value of ESP was not properly saved across a function call. This is usually a result of calling a function declared with one calling convention with a function pointer declared with a different calling convention.
I think the errors come from using the functions in flexmotn.h. The functions look like they are being used correctly, but I can't find where they are defined. They are probably defined in FlexMS32.lib.
I attached the files I am using.
I haven’t tried any of the other examples. 1D Straight Line Move.c looks like the simplest and closest to what I want to do.
Attachments:
Files.zip ‏82 KB

I kept a dual boot of windows 7 and mac os x lion in macbook pro. so, should i keep antivirus for windows 7? which is prescribable between bit defender(bd) and microsoft security essentials(mse)?does bd and mse un-installs easily?

i kept a dual boot of windows 7 and mac os x lion in macbook pro. so, should i keep antivirus for windows 7? which is prescribable between bit defender(bd) and microsoft security essentials(mse)?does bd and mse un-installs easily?

lower your font size unless you have difficulty
MS Security Essentials is excellent
Then again maybe time to investigate Windows 8 RP (which uses Defender)

What -Dweblogic.security.SSL.nojce parameter does?

Similar Messages

Maybe you are looking for