Weblogic Server 12c SSL Errors
Error 1
Server chose TLSv1, but that protocol version is not enabled or not supported by the client.
Error Code
oracle.fabric.common.FabricException: oracle.fabric.common.FabricException: Error in getting XML input stream: https://host:port/commercial/services/WebService?wsdl: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.: Error in getting XML input stream: https://host:port/commercial/services/WebService?wsdl: Server chose TLSv1, but that protocol version is not enabled or not supported by the client.
ERROR- Server chose TLSv1, but that protocol version is not enabled or not supported by the client.
Reason
There was an Oracle SOA Composite project that invokes an external SOAP web service which uses SSL TLSv1 and the client machine was having different version of the same.
Solution
1. Login to Weblogic console
2. From left navigation menu Navigate to Environment > Servers > <TARGET_SERVER>. In my case it is soa_server1 & soa_server2
3. Under right section navigate to Configuration Tab > Server Start
4. Go to arguments section and enter the below details
-Dweblogic.security.SSL.minimumProtocolVersion=TLSv1
5. Save
6. Activate Changes
Below is the screenshot to showcase the above steps-
Hostname verification failed
Error Code
oracle.fabric.common.FabricException: oracle.fabric.common.FabricException: Error in getting XML input stream: https://testpuvvnlidam.mpower.in/commercial/services/IdamUserMaster?wsdl: Hostname verification failed: HostnameVerifier=weblogic.security.utils.SSLWLSHostnameVerifier, hostname= pvt.demohost.in.: Error in getting XML input stream: https://pvt.demohost.in/commercial/services/WebService?wsdl: Hostname verification failed: HostnameVerifier=weblogic.security.utils.SSLWLSHostnameVerifier, hostname=pvt.demohost.in.
Reason
There was an Oracle SOA Composite project that invokes an external SOAP web service which uses SSL and having a hostname called pvt.demohost.in . This hostname is being used in a private network and accessible via MPLS connection. Now when it comes to weblogic, it uses a SSL HostNameVerifier property on each server. In my case I have been using 2 managed soa servers viz. soa_server1 & soa_server2. Since the domain is qualified internally and I have done the entry of host pvt.demohost.in on each managed server host files. So the problem is that the default SSL HostNameVerifier BEA Hostname Verifier is not able to verify this domain.
Solution
1. Login to Weblogic console
2. From left navigation menu Navigate to Environment > Servers > <TARGET_SERVER>. In my case it is soa_server1 & soa_server2
3. Navigate to SSL tab.
4. Go to Advanced
5. Select 'None' the HostName Verification value dropdown
6. Save
7. Activate Changes
Below is the screenshot to showcase the above steps-
In terms of security, try to avoid not to override host name verification
ReplyDeleteHi Sandeep, thanks for your comment. Actually the hostname was resolved within the private network only and not over the internet so if I put the Hostname Verification BEA then it causes error as hostname verification failed. If you know any better option please suggest from security perspective.
ReplyDeleteRadiologex is a next-gen medical network that is web accessible and downloadable as an APP on any device, MAC, PC, IOS, and Android. It is powered by blockchain technology and RDGX AI, allowing medical professionals all across the globe to connect, communicate, collaborate, transact, access content, and perform services on one comprehensive and complete medical ECOSYSTEM. It’s more intuitive, easier to operate, requires ZERO hardware purchases, and is equipped with leading security features—all for less cost. It’s the Evolution of Telemedicine AND Teleradiology.
ReplyDeleteAt the core, Radiologex is galvanized by a blockchain powered state-of-the art content delivery network (CDN) that is designed to not only replace redundant and unnecessary multiple platforms, both software and hardware, but to connect you with the global Medical community in an all-in-one platform that will drive all communication, business (buy/sell/network), with powerful medical imaging technology (PACS) and RIS/CIS capabilities. Unplug yourself from redundant hardware and various software and applications, usernames passwords and hassle, function seamlessly, with no intermediaries. The future of Enterprise Imaging and True Telemedicine™️ have arrived. With the renowned efficiency, security, decentralization of data, elimination of software fail points, transparency, and transparency and traceability of blockchain technology, Radiologex takes this core architecture to the next level to deliver a new way for the Medical Industry to interact and perform service.
join : https://t.me/RadiologexOfficialGroup
Simply wish to say your article is as astonishing. The clarity in your post is simply great, and I could assume you are an expert on this subject. Same as your blog i found another one Oracle Project Portfolio Management Cloud Software .Actually I was looking for the same information on internet for Oracle PPM and came across your blog. I am impressed by the information that you have on this blog. Thanks a million and please keep up the gratifying work.
ReplyDeleteSimply wish to say your article is as astonishing. The clarity in your post is simply great, and I could assume you are an expert on this subject. Same as your blog i found another one Oracle Project Portfolio Management Cloud Software .Actually I was looking for the same information on internet for Oracle PPM and came across your blog. I am impressed by the information that you have on this blog. Thanks a million and please keep up the gratifying work.
ReplyDelete