ERROR :
Connecting to Node Manager ...
<Jun 15, 2020 8:47:01 PM EDT> <Info> <Security> <BEA-090905> <Disabling the CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true.>
<Jun 15, 2020 8:47:01 PM EDT> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG128 to HMACDRBG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true.>
<Jun 15, 2020 8:47:01 PM EDT> <Info> <Security> <BEA-090909> <Using the configured custom SSL Hostname Verifier implementation: weblogic.security.utils.SSLWLSHostnameVerifier$NullHostnameVerifier.>
This Exception occurred at Mon Jun 15 20:47:02 EDT 2020.
javax.net.ssl.SSLHandshakeException: General SSLEngine problem
Error: Error occurred while performing nmConnect : Cannot connect to Node Manager. : General SSLEngine problem
Use dumpStack() to view the full stacktrace :
SOLUTION :
[user@node1 bin]$ cd $DOMAIN_HOME/bin
[appuser@node1 bin]$ ]$ cp node1-new-PKCS-12.p12 cert1.ccc cert2.ccc $JAVA_HOME/jre/lib/security
-bash: ]$: command not found
[user@node1 bin]$ ls node1-new-PKCS-12.p12 cert1.ccc cert2.ccc
node1-new-PKCS-12.p12 cert1.ccc cert2.ccc
[user@node1 bin]$ ls -dl $JAVA_HOME/jre/lib/security
drwxr-xr-x 3 user wcc 10 Apr 21 10:43 $JAVA_HOME/jre/lib/security
[user@node1 bin]$ cp node1-new-PKCS-12.p12 cert1.ccc cert2.ccc $JAVA_HOME/jre/lib/security
[user@node1 bin]$ export JAVA_HOME=/<path>/jdk
[user@node1 bin]$ export PATH=$JAVA_HOME/bin:$PATH
[user@node1 bin]$ which java
$JAVA_HOME/bin/java
[user@node1 bin]$ cd $JAVA_HOME/jre/lib/security
[user@node1 security]$
[user@node1 security]$ keytool -importkeystore -deststorepass password -destkeystore cacerts -srckeystore node1-new-PKCS-12.p12 -srcstoretype PKCS12
Importing keystore node1-new-PKCS-12.p12 to cacerts...
Enter source keystore password:
Entry for alias node1 successfully imported.
Import command completed: 1 entries successfully imported, 0 entries failed or cancelled
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore cacerts -destkeystore cacerts -deststoretype pkcs12".
[user@node1 security]$
You have new mail in /var/spool/mail/user
[user@node1 security]$
[user@node1 security]$
[user@node1 security]$ keytool -import -trustcacerts -alias ******* -file cert1.ccc -keystore cacerts -storepass password
Certificate was added to keystore
Warning:
The JKS keystore uses a proprietary format. It is recommended to migrate to PKCS12 which is an industry standard format using "keytool -importkeystore -srckeystore cacerts -destkeystore cacerts -deststoretype pkcs12".
[user@node1 security]$
START OHS NOW
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
No comments:
Post a Comment