{"id":4309,"date":"2012-09-21T13:24:15","date_gmt":"2012-09-21T17:24:15","guid":{"rendered":"http:\/\/onlineappsdba.com\/?p=4309"},"modified":"2012-09-21T13:24:15","modified_gmt":"2012-09-21T17:24:15","slug":"obaccessexception_engine_down-webgate-certificate-expired","status":"publish","type":"post","link":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/","title":{"rendered":"“ObAccessException_ENGINE_DOWN” : WebGate Certificate expired"},"content":{"rendered":"

One of our client environments had OAM setup since couple of years and we saw the below error all of a sudden and all the authentication\/authorization requests of a specific access gate has stopped working.<\/p>\n

2012\/09\/17@19:11:15.602601\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a01000059\u00a0\u00a0 \u00a0CONNECTIVITY\u00a0\u00a0 \u00a0DEBUG3\u00a0\u00a0 \u00a00x00000201\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/netlib\/src\/obmessagechannel.cpp:601\u00a0\u00a0 \u00a0“Received NMP STS negotiation ”\u00a0\u00a0 \u00a0_seqno^0\u00a0\u00a0 \u00a0_opcode^0\u00a0\u00a0 \u00a0_opcodeStr^ServerDiagnosticEvent\u00a0\u00a0 \u00a0Message^sts=cert\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.992267\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a068\u00a0\u00a0 \u00a0CONN_MGMT\u00a0\u00a0 \u00a0ERROR\u00a0\u00a0 \u00a00x00001C08\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/aaa_client\/src\/watcher_thread.cpp:84\u00a0\u00a0 \u00a0“NAP initialization failed”\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.992220\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a01000059\u00a0\u00a0 \u00a0CONNECTIVITY\u00a0\u00a0 \u00a0DEBUG3\u00a0\u00a0 \u00a00x00000201\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/netlib\/src\/obmessagechannel.cpp:480\u00a0\u00a0 \u00a0“handleSTSmessage returns false”\u00a0\u00a0 \u00a0_seqno^0\u00a0\u00a0 \u00a0_opcode^0\u00a0\u00a0 \u00a0Message^sts=cert\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.998052\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a079\u00a0\u00a0 \u00a0CONN_MGMT\u00a0\u00a0 \u00a0DEBUG3\u00a0\u00a0 \u00a00x00000201\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/aaa_client\/src\/aaa_service_client.cpp:989\u00a0\u00a0 \u00a0“Connection checked out”\u00a0\u00a0 \u00a0return^NULL\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.998133\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a079\u00a0\u00a0 \u00a0CONN_MGMT\u00a0\u00a0 \u00a0DEBUG3\u00a0\u00a0 \u00a00x00000201\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/aaa_client\/src\/aaa_service_client.cpp:2449\u00a0\u00a0 \u00a0“Connections exhausted”\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.998223\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a079\u00a0\u00a0 \u00a0CONFIG\u00a0\u00a0 \u00a0DEBUG2\u00a0\u00a0 \u00a00x00000201\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/access_api\/src\/obconfig.cpp:864\u00a0\u00a0 \u00a0“Client configuration not updated”\u00a0\u00a0 \u00a0<\/em><\/span>
\n2012\/09\/17@19:11:15.998253\u00a0\u00a0 \u00a016038\u00a0\u00a0 \u00a079\u00a0\u00a0 \u00a0CONFIG\u00a0\u00a0 \u00a0INFO\u00a0\u00a0 \u00a00x0000182C\u00a0\u00a0 \u00a0\/export\/t3array\/build6\/Oblix\/coreidport\/palantir\/access_api\/src\/obconfig.cpp:865\u00a0\u00a0 \u00a0“ObAccessException_ENGINE_DOWN”\u00a0\u00a0 \u00a0raw_code^301\u00a0\u00a0 \u00a0<\/em><\/span><\/p>\n

Of this exception block, ObAccessException_ENGINE_DOWN<\/em> gives a clue that certificate is expired.<\/p>\n

Simple check for finding certificate expiry is to convert pem format to der format and open the der certificate in windows and one can easily make out its validity.<\/p>\n

Solution<\/strong>:<\/p>\n

    \n
  1. Create a new certificate request using openssl tool located at Access SDK install .\/openssl req -config openssl.cnf -newkey rsa:1024 -keyout aaa_key.pem -out aaa_req.pem<\/strong><\/span>.<\/li>\n
  2. Get the certificate request aaa_req.pem signed by 3rd party CA.<\/li>\n
  3. Rename the signed certificate as say aaa_cert.pem.<\/li>\n
  4. Verify if the chain certificate is valid or not. If it is also expired, get it signed. It is expired in my case and hence I name it here as aaa_chain.pem.<\/li>\n
  5. The 3 certificate files that needs to be replaced in Access Gate are aaa_cert.pem, aaa_key.pem and aaa_chain.pem (remains unchanged in my case). Place these files at $ACCESS_SDK\/oblix\/config<\/li>\n
  6. Note that password.xml is required in OAM 10g version only if security mode is Simple. This xml contains hashed value of certificate passphrase. This file is not required in my case since it is Cert security mode and OAM 10g. However password.xml is required for both Cert\/Simple in OAM 11g.<\/li>\n<\/ol>\n

    After placing the certificate as mentioned in 5th step, verify that webgate is working fine.<\/p>\n","protected":false},"excerpt":{"rendered":"

    One of our client environments had OAM setup since couple of years and we saw the below error all of […]<\/p>\n","protected":false},"author":115,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[42],"tags":[],"class_list":["post-4309","post","type-post","status-publish","format-standard","hentry","category-troubleshooting"],"yoast_head":"\n"ObAccessException_ENGINE_DOWN" : WebGate Certificate expired -<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\""ObAccessException_ENGINE_DOWN" : WebGate Certificate expired -\" \/>\n<meta property=\"og:description\" content=\"One of our client environments had OAM setup since couple of years and we saw the below error all of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/\" \/>\n<meta property=\"article:published_time\" content=\"2012-09-21T17:24:15+00:00\" \/>\n<meta name=\"author\" content=\"Masroof Ahmad\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Masroof Ahmad\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/\",\"url\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/\",\"name\":\"\\\"ObAccessException_ENGINE_DOWN\\\" : WebGate Certificate expired -\",\"isPartOf\":{\"@id\":\"https:\/\/onlineappsdba.com\/#website\"},\"datePublished\":\"2012-09-21T17:24:15+00:00\",\"author\":{\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\"},\"breadcrumb\":{\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/onlineappsdba.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"“ObAccessException_ENGINE_DOWN” : WebGate Certificate expired\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/onlineappsdba.com\/#website\",\"url\":\"https:\/\/onlineappsdba.com\/\",\"name\":\"\",\"description\":\"Oracle Implementation & Training Experts\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/onlineappsdba.com\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb\",\"name\":\"Masroof Ahmad\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g\",\"caption\":\"Masroof Ahmad\"},\"url\":\"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"\"ObAccessException_ENGINE_DOWN\" : WebGate Certificate expired -","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/","og_locale":"en_US","og_type":"article","og_title":"\"ObAccessException_ENGINE_DOWN\" : WebGate Certificate expired -","og_description":"One of our client environments had OAM setup since couple of years and we saw the below error all of […]","og_url":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/","article_published_time":"2012-09-21T17:24:15+00:00","author":"Masroof Ahmad","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Masroof Ahmad","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/","url":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/","name":"\"ObAccessException_ENGINE_DOWN\" : WebGate Certificate expired -","isPartOf":{"@id":"https:\/\/onlineappsdba.com\/#website"},"datePublished":"2012-09-21T17:24:15+00:00","author":{"@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb"},"breadcrumb":{"@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/onlineappsdba.com\/index.php\/2012\/09\/21\/obaccessexception_engine_down-webgate-certificate-expired\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/onlineappsdba.com\/"},{"@type":"ListItem","position":2,"name":"“ObAccessException_ENGINE_DOWN” : WebGate Certificate expired"}]},{"@type":"WebSite","@id":"https:\/\/onlineappsdba.com\/#website","url":"https:\/\/onlineappsdba.com\/","name":"","description":"Oracle Implementation & Training Experts","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/onlineappsdba.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/909a876ed58d400faf82caf81d61bfdb","name":"Masroof Ahmad","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/onlineappsdba.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/10f9db7bdbbd7f9ccfbe9b2d208e5978fc28315e9c704383e639a926ea0fce5f?s=96&d=mm&r=g","caption":"Masroof Ahmad"},"url":"https:\/\/onlineappsdba.com\/index.php\/author\/masroof\/"}]}},"_links":{"self":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/4309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/users\/115"}],"replies":[{"embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/comments?post=4309"}],"version-history":[{"count":0,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/posts\/4309\/revisions"}],"wp:attachment":[{"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/media?parent=4309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/categories?post=4309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/onlineappsdba.com\/index.php\/wp-json\/wp\/v2\/tags?post=4309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}