SSL Problem with Oracle BI 12c

TKK

Hi All,

I have successfully configured SSL with Node Manager,Web Logic and Oracle BI. However, when I tried to enable SSL internal use ,got following error.

./ssl.sh internalssl true
Logging to: /config/middleware/user_projects/domains/bi/bilogs/sslcommand.log

Unable to turn on internal SSL.
Certificates are missing.  You should run ssl[.sh] regenerate.

cat  /config/middleware/user_projects/domains/bi/bilogs/sslcommand.log

Jul 04, 2018 11:00:49 AM oracle.bi.ssl.pub.SSLRoleConfig <init>

INFO: SSL role config for internal client Trust source: INTERNAL verification: VERIFY_PEER

Jul 04, 2018 11:00:49 AM oracle.bi.ssl.pub.SSLRoleConfig <init>

INFO: SSL role config for external client Trust source: EXTERNAL verification: VERIFY_PEER

Jul 04, 2018 11:00:49 AM oracle.bi.endpointmanager.impl.bienv.BIEnvComponents loadFromInputStream

INFO: Reading components from: /config/middleware/user_projects/domains/bi/config/fmwconfig/bienv/core/bienv-components.xml ...

Jul 04, 2018 11:00:50 AM oracle.bi.ssl.commands.SSLCommand internalSSLCommand

INFO: internalssl command useSSL: true

Jul 04, 2018 11:00:50 AM oracle.bi.ssl.jps.JPSServiceAccessor setJPSConfigLocation

INFO: No JSE config property set, so setting to jse /config/middleware/user_projects/domains/bi/config/fmwconfig/jps-config-jse.xml

Jul 04, 2018 11:00:53 AM oracle.security.jps.JpsStartup start

INFO: Jps initializing.

Jul 04, 2018 11:01:05 AM oracle.security.jps.JpsStartup start

INFO: Jps started.

Jul 04, 2018 11:01:05 AM oracle.security.opss.internal.runtime.ServiceContextManagerImpl getContext

WARNING: Bootstrap services are used by OPSS internally and clients should never need to directly read/write bootstrap credentials. If required, use Wlst or configuration management interfaces.

Jul 04, 2018 11:01:05 AM oracle.bi.ssl.openssl.OpensslCommands <init>

INFO: Running openssl from working directory: /config/middleware/user_projects/domains/bi/tmp/bi/ssl/cmd

Jul 04, 2018 11:01:07 AM oracle.security.audit.Auditor init

WARNING: IAU:IAU-6012: Unable to determine the audit log directory. No log directory specified.

Jul 04, 2018 11:01:07 AM oracle.security.jps.util.JpsUtil disableAudit

INFO: JpsUtil: isAuditDisabled set to true

Jul 04, 2018 11:01:07 AM oracle.security.jps.internal.audit.AuditServiceImpl validateLogPossible

WARNING: No audit log directory is set. Cannot perform audit operations for component JPS.

Please help on this issue.

Thanks in Advance.

Robert Angel

See 3.7

https://www.clearpeaks.com/configuring-ssl-obiee-12c/

TKK

Hi ,

Thanks for Reply.

Everything is correct up to 3.7 Enabling Internal SSL for OBIEE .

I am able to verify  https://<Myhost>:9503/wsm-pm/validator but not able to turn on internalssl.

SonPat99

What type of SSL have you configured in CONSOLE?

Can you give some screenshots to better understand it?

Robert Angel

And looking at your error stack have you tried chasing down oracle.security.audit.Auditor to set the audit log location?

TKK

Many Thanks for Reply.

I am using self signed certificate .Please find below screenshots.

bi_server1 keystorkes Tab

bi_server1 SSL tab

TKK

Hi All,

Thanks for your support. Problem get solved automatically .

Although, I have not  truned on "internalssl true"  despite that able to connect using HTTPS for  bi publisher.

Robert Angel

Glad you got your answer, can you close the question please so others don't waste time trying to answer.