I have configured Node Manager for Managed Servers for WebLogic Server 10.3.6. When I start the node manager, I am seeing the below exception in node manager log.
javax.net.ssl.SSLHandshakeException: [Security:090476]Invalid/unknown SSL header was received from peer ozone.oracle.com – 192.168.174.128 during SSL handshake.
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
at com.certicom.tls.record.ReadHandler.fireAlert(Unknown Source)
at com.certicom.tls.record.ReadHandler.getProtocolVersion(Unknown Source)
at com.certicom.tls.record.ReadHandler.checkVersion(Unknown Source)
at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)
at com.certicom.tls.record.ReadHandler.read(Unknown Source)
at com.certicom.io.InputSSLIOStreamWrapper.read(Unknown Source)
at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:264)
at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:306)
at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:158)
at java.io.InputStreamReader.read(InputStreamReader.java:167)
at java.io.BufferedReader.fill(BufferedReader.java:136)
at java.io.BufferedReader.readLine(BufferedReader.java:299)
at java.io.BufferedReader.readLine(BufferedReader.java:362)
at weblogic.nodemanager.server.Handler.run(Handler.java:71)
at java.lang.Thread.run(Thread.java:662)
Resolution:
Edit the nodemanager.properties file located at $MW_HOME/wlserver_10.3/common/nodemanager for changing the SecureListener parameter value to false.
Start the Node Manager and make sure that machine status is reachable in WebLogic console as shown below.
Oracle WebLogic Administrator [USD 399]- 03rd Dec, 2011
Good hands-on exercises (installation, patching, cloning), very experienced trainer worth every penny 
8 users commented in " “Security:090476]Invalid/unknown SSL header was received from peer locahost during SSL handshake.” "
Follow-up comment rss or Leave a TrackbackHi Mahi,
Thanks a lot for your quick and positive helping response …
I need your help to move ahead.
I have configured and tested the SSO application. with writing sample application.
Now I want to configure myappportal Login page as
Form base Authentication. Once user is logged in successful then he will allow to navigate the portal pages.
I am using Oracle 11g stack for Webcenter & Identity Management.
Can you please help me to integrate the Portal application with OAM as part of SSO? Or do I need to configure the Portal application as normal application with defining Protected & Public policies?
Or do I need to follow below URL to enable SSO with Webcenter?
http://onlineappsdba.com/index.php/2012/02/15/integrate-e-business-suite-with-oracle-webcenter-11115-using-oid-and-oam-11g-as-sso/
Please Reply ..
Thanks,
Sunil
Hi,
I have one more query about WNA with OAM 11g.
In my environment I have configured DIP to synchronize AD data with OID and SSO Authntication scheme is configured with OID.
I would like configure Windows Native Authentication with SSO configuration. Is it possible to do it?
Thanks,
Sunil
@Sunil,
Sorry, I don’t understand your question.
1. Do you want to configure your custom login page for form authentication?
2. DO you want to do SSO between custom application and WebCenter application?
3. What is the portal application you are talking about ?
If you want to do integrate OAM with WebCenter then you will need to follow http://docs.oracle.com/cd/E21764_01/core.1111/e12037/oam.htm#CHDFIFCI
-Mahendra.
@Sunil,
I think for WNA with OAM 11g, you will need to have AD used as default store. However, I believe your setup is supported for WNA. Please test the integration and let me know how it goes.
-Mahendra.
Hi Mahi,
Thanks for your quick reply. I am able to configure Webcenter Portal with OAM and my next step will be configuring WNA for my application.
I have one doubt- you said AD should be the default datastore to configure WNA; that means it will not work with OID? Because I have setup of OID-AD synchronization using DIP and want to configure WNA with OID datastore. Will it work or no?
Many Thanks..
Impressed with your quick and positive response.
Thanks,
Sunil
@Sunil,
I have not done the WNA in OAM 11g yet. So I am not exactly sure whether to configure AD or OID as primary store. Read this http://onlineappsdba.com/index.php/2012/05/01/oam-11g-integration-with-microsoft-windows-active-directory-wna-iwa-kerberos-for-zero-sign-on/
Hope this helps.
-Mahendra.
Thanks for your reply.
One more doubt.. If I have configured SSO for Webcenter Portal application and now want to redirect user to another J2EE Web application from Portal page.
Please find below the scenario
1. User authenticated using FORM base authentication while accessing portal application.
2. Now user wants to access another application (i.e. mywebapp) which has reference on Portal page.
3. Web application work on Spring security and now i want to take the third application under SSO umbreala.
4. Web application provider ask me to pass few HTTP headers to his application.
Can you please tell me .. how this can be achieved? How do I pass HTTP header to his application?
Thanks in advance. .
Sunil
@Sunil,
OAM 11g can pass header variables in authorization actions. So specify the attributes and header variable names in authorization policies actions.
Hope this helps.
-Mahendra
Leave A Reply