nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

SSL Configuration issue on 12.2.1.4.0 with nodemanager

DentsplySirona

I am upgrading from 12.2.1.2 to 12.2.1.4 and I have configured SSL the same on .4 as I did on .2 however when I try to start the Severs the nodemanger is failing to start. I am on a windows server. I get the following error:

\OBIEE12c\user_projects\domains\bi\bitools\bin>start.cmd -i AdminServer

BI_PRODUCT_HOME set as \OBIEE12c\bi\

ORACLE_HOME set as \OBIEE12c

Starting domain; Using domainHome: \OBIEE12c\user_projects\domains\bi ...

Initializing WebLogic Scripting Tool (WLST) ...

Welcome to WebLogic Server Administration Scripting Shell

Type help() for help on available commands

<Nov 13, 2018 10:05:05 AM EST> <Info> <Security> <BEA-090905> <Disabling the Cry

ptoJ JCE Provider self-integrity check for better startup performance. To enable

this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true

<Nov 13, 2018 10:05:05 AM EST> <Info> <Security> <BEA-090906> <Changing the defa

ult Random Number Generator in RSA CryptoJ from ECDRBG128 to HMACDRBG. To disabl

e this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true.>

<Nov 13, 2018 10:05:05 AM EST> <Info> <Security> <BEA-090909> <Using the configu

red custom SSL Hostname Verifier implementation: weblogic.security.utils.SSLWLSH

ostnameVerifier$NullHostnameVerifier.>

Node manager not running. Starting it...

NMProcess: NODEMGR_HOME is already set to \OBIEE12c\user_projects\domains\bi\n

odemanager

NMProcess: CLASSPATH=.;D:\Java\jdk\lib\tools.jar;D:\OBIEE12c\wlserver\server\lib

\weblogic.jar;D:\OBIEE12c\oracle_common\modules\thirdparty\ant-contrib-1.0b3.jar

;D:\OBIEE12c\wlserver\modules\features\oracle.wls.common.nodemanager.jar;D:\Java

\jdk\lib\tools.jar;D:\OBIEE12c\wlserver\modules\features\wlst.wls.classpath.jar;

\OBIEE12c\wlserver\modules\features\oracle.wls.common.grizzly.jar;D:\OBIEE12c\

oracle_common\modules\oracle.jps\jps-manifest.jar

NMProcess:

NMProcess: \OBIEE12c\user_projects\domains\bi\nodemanager>"D:\Java\jdk\bin\jav

a.exe" -server -Xms32m -Xmx200m -Djdk.tls.ephemeralDHKeySize=2048 -Dcoherence.h

ome=D:\OBIEE12c\coherence -Dbea.home=D:\OBIEE12c -DNodeManagerHome=D:\OBIEE12c\u

ser_projects\domains\bi\nodemanager -DLogToStderr=false -DQuitEnabled=true -Dweb

logic.RootDirectory=D:\OBIEE12c\user_projects\domains\bi -Doracle.security.jps.

config=D:\OBIEE12c\user_projects\domains\bi\config\fmwconfig\jps-config-jse.xml

-Dcommon.components.home=D:\OBIEE12c\oracle_common -Dopss.version=12.2.1.3 -Dweb

logic.RootDirectory=D:\OBIEE12c\user_projects\domains\bi -Doracle.bi.home.dir=

\OBIEE12c\bi -Doracle.bi.config.dir=D:\OBIEE12c\user_projects\domains\bi\confi

g\fmwconfig\biconfig -Doracle.bi.environment.dir=D:\OBIEE12c\user_projects\domai

ns\bi\config\fmwconfig\bienv -Doracle.bi.12c=true -Ddomain.home=D:\OBIEE12c\user

_projects\domains\bi -Dfile.encoding=utf-8 -Djava.system.class.loader=com.oracle

.classloader.weblogic.LaunchClassLoader "-Djava.security.policy=D:\OBIEE12c\wlse

rver\server\lib\weblogic.policy" "-Dweblogic.nodemanager.JavaHome=D:\Java\jdk" w

eblogic.NodeManager -v

NMProcess: ( was unexpected at this time.

NMProcess: Stopped draining NMProcess

Failed to start node manager after a timeout of 600000 millisecs. Final except

ion: Error occurred while performing nmConnect : Cannot connect to Node Manager.

: Connection refused: connect. Could not connect to NodeManager. Check that it

is running at w8001bi09.internal.dentsply.net/10.218.20.83:9506.

Use dumpStack() to view the full stacktrace :

Unable to connect to NodeManager on host: W8001BI09, due to Error occurred while

performing nmConnect : Cannot connect to Node Manager. : Connection refused: co

nnect. Could not connect to NodeManager. Check that it is running at w8001bi09.i

nternal.dentsply.net/10.218.20.83:9506.

Use dumpStack() to view the full stacktrace :

Fatal: Failed to start one or more Servers (return 3)

And In the NodeManager log file I am getting this:

weblogic.nodemanager.common.ConfigException: Identity key store file not found: \OBIEE12c\user_projects\domains\bi\SSL_CERT\my_key_identity.jks

at weblogic.nodemanager.server.SSLConfig.loadKeyStoreConfig(SSLConfig.java:225)

at weblogic.nodemanager.server.SSLConfig.access$000(SSLConfig.java:33)

at weblogic.nodemanager.server.SSLConfig$1.run(SSLConfig.java:118)

at java.security.AccessController.doPrivileged(Native Method)

at weblogic.nodemanager.server.SSLConfig.<init>(SSLConfig.java:115)

at weblogic.nodemanager.server.NMServer.<init>(NMServer.java:169)

at weblogic.nodemanager.server.NMServer.getInstance(NMServer.java:134)

at weblogic.nodemanager.server.NMServer.main(NMServer.java:589)

at weblogic.NodeManager.main(NodeManager.java:31)

I have the Admin Server and bi_server setup correctly and The location and file do exist: \OBIEE12c\user_projects\domains\bi\SSL_CERT\my_key_identity.jks

Has something changed with .4? Where else can I look?

Find more posts tagged with

Accepted answers

All comments

Joel Acha

Are these the steps you followed?

Oracle Support Document 2188982.1 (OBIEE 12c: How To Configure SSL Including Examples) can be found at: https://support.oracle.com/epmos/faces/DocumentDisplay?id=2188982.1

DentsplySirona

Yes and I followed the exact same steps that I did when I installed version 12.2.1.2. .2 works but .4 does not.

Michael Verzijl

What is currently stored in your nodemanager.properties file?

DentsplySirona

nodemanger.properties:

#Mon Oct 15 16:09:34 EDT 2018

#Tue Oct 09 15:55:19 EDT 2018

#Mon Oct 01 15:51:36 EDT 2018

#Node manager properties

#Mon Oct 01 15:50:42 EDT 2018

DomainsFile=D\:\\OBIEE12c\\user_projects\\domains\\bi\\nodemanager\\nodemanager.domains

LogLimit=0

PropertiesVersion=12.2.1.3.0

AuthenticationEnabled=true

NodeManagerHome=D\:\\OBIEE12c\\user_projects\\domains\\bi\\nodemanager

JavaHome=D\:\\Java\\jdk

LogLevel=INFO

DomainsFileEnabled=true

ListenAddress=w8001bi09.internal.dentsply.net

NativeVersionEnabled=true

ListenPort=9506

LogToStderr=true

weblogic.StartScriptName=startWebLogic.cmd

SecureListener=true

LogCount=1

QuitEnabled=false

LogAppend=true

weblogic.StopScriptEnabled=false

StateCheckInterval=500

CrashRecoveryEnabled=false

weblogic.StartScriptEnabled=true

LogFile=D\:\\OBIEE12c\\user_projects\\domains\\bi\\nodemanager\\nodemanager.log

LogFormatter=weblogic.nodemanager.server.LogFormatter

ListenBacklog=50

KeyStores=CustomIdentityAndCustomTrust

CustomIdentityKeyStoreType=jks

CustomIdentityKeyStoreFileName=D\:\\OBIEE12c\\user_projects\\domains\\bi\\SSL_CERT\\my_key_identity.jks

CustomIdentityKeyStorePassPhrase={AES}VgrFVBZ2QkjGNGfSXDOsqOnY2ApeLbCVRAJWyFm+cPo=

CustomIdentityPrivateKeyPassPhrase={AES}Wj79ge+UkM7ZgME40ygQ1ZUdx3Hxuz4ctD8j4s24Yrk=

CustomIdentityAlias=server_identity

CustomTrustKeyStoreFileName=D\:\\OBIEE12c\\user_projects\\domains\\bi\\SSL_CERT\\my_key_trust.jks

Michael Verzijl

Which JDK are you using?

DentsplySirona

Version 1.8.0_172

Michael Verzijl

Could you try with 1.8.0_171 to see if it works? I have that running here with SSL and works fine.

DentsplySirona

I can try, but couple questions first. Are you on a Windows OS (I am using Windows 2012 R2) and are you using OBIEE version 12.2.1.4. I have a 12.2.1.2 system that works fine on 1.8.0_172 and due to security issue prefer not to downgrade to an earlier version.

handat

You should try it as Michael suggest with 1.8.0_171 with debug enabled ( -Djavax.net.debug=all) and compare that with 1.8.0_172 also with debug enabled to see what the difference is during the handshake. You might just need to change the supported/required algorithm in java.security or if your existing certificate needs replacement with stronger keys which will be revealed once you compare the debug outputs.

DentsplySirona

I am still trying to understand the difference between 12.2.1.2 and 12.2.1.4. I have this working fine on .2 but when trying to setup .4 it does not work. All settings and steps are the same. How if 1.8.0_172 works fine with .2 does it not work in the new version. Why would I downgrade my java version to work with a newer version of OBIEE. None of this makes any sense to me and downgrading to java is not a simple task with OBIEE and the security issues also leave me hesitant.