nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Oracle Communities

Oracle Analytics and AI

Child Item

Configure Nodemanager for SSL: - nodemanager error

makin

Hi,

I'm trying to configure nodemanager for SSL (as part of the entire SSL configuration) in OBIEE 11g. Here are the steps I have followed:

1. Stop the Nodemanager service
2. Update the nodemanager.properties in <MW_HOME>\wlserver_10.3\common\nodemanager folder with Custom Identity Keystore and Custom Trust Keystore information based on Step 1.

KeyStores=CustomIdentityAndCustomTrust
CustomIdentityKeyStoreFileName=<Path to the Keystore>
CustomIdentityAlias=<Keystore Alias>
CustomIdentityPrivateKeyPassPhrase=<Key Passphrase>
CustomTrustKeyStoreFileName=<Path to the Keystore

Ex:
KeyStores=CustomIdentityAndCustomTrust
CustomIdentityKeyStoreFileName=c:\\Oracle\\Middleware\\ssl\\mykeystore.jks
CustomIdentityAlias=testserver
CustomIdentityPrivateKeyPassPhrase=Welcome1
CustomTrustKeyStoreFileName=c:\\Oracle\\Middleware\\ssl\\keystore.jks

My actual changes:

KeyStores=CustomIdentityAndCustomTrust

CustomIdentityKeyStoreFileName=D\:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks

CustomIdentityAlias=rnadbi

CustomIdentityPrivateKeyPassPhrase={3DES}tr4UdwfKpKGCyZrfDn7Myw==

CustomTrustKeyStoreFileName=D\:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks

I also changed:

ListenPort=9556

ListenPort=5556
3. Restart the NodeManager.

I can not restart the nodemanager. Here is the log:

<May 19, 2016 4:38:11 PM> <WARNING> <Configuration error while reading domain directory: \oramw\user_projects\domains\bifoundation_domain>

java.io.IOException: Invalid state file format. State file contents:

at weblogic.nodemanager.common.StateInfo.load(StateInfo.java:135)

at weblogic.nodemanager.server.AbstractServerMonitor.loadStateInfo(AbstractServerMonitor.java:497)

at weblogic.nodemanager.server.AbstractServerMonitor.isCleanupAfterCrashNeeded(AbstractServerMonitor.java:156)

at weblogic.nodemanager.server.ServerMonitor.isCleanupAfterCrashNeeded(ServerMonitor.java:25)

at weblogic.nodemanager.server.AbstractServerManager.recoverServer(AbstractServerManager.java:147)

at weblogic.nodemanager.server.ServerManager.recoverServer(ServerManager.java:23)

at weblogic.nodemanager.server.DomainManager.initialize(DomainManager.java:105)

at weblogic.nodemanager.server.DomainManager.<init>(DomainManager.java:60)

at weblogic.nodemanager.server.NMServer.initDomains(NMServer.java:225)

at weblogic.nodemanager.server.NMServer.start(NMServer.java:197)

at weblogic.nodemanager.server.NMServer.main(NMServer.java:382)

at weblogic.NodeManager.main(NodeManager.java:31)

<May 19, 2016 4:38:12 PM> <SEVERE> <Fatal error in node manager server>

java.lang.RuntimeException: Cannot convert identity certificate

at com.certicom.tls.interfaceimpl.CertificateSupport.addAuthChain(Unknown Source)

at com.certicom.net.ssl.SSLContext.addAuthChain(Unknown Source)

at com.bea.sslplus.CerticomSSLContext.addIdentity(Unknown Source)

at weblogic.security.utils.SSLContextWrapper.addIdentity(SSLContextWrapper.java:146)

at weblogic.nodemanager.server.SSLListener.init(SSLListener.java:53)

at weblogic.nodemanager.server.NMServer.start(NMServer.java:206)

at weblogic.nodemanager.server.NMServer.main(NMServer.java:382)

at weblogic.NodeManager.main(NodeManager.java:31)

----------------------------------------

I also added this:

JAVA_OPTIONS="-Dweblogic.security.SSL.enableJSSE=true ${JAVA_OPTIONS}"

to the end of the startNodeManager.sh

I have been researching and reading blogs for a few days to no avail. If you have a suggestion, I'd happy to try it or change any of my settings. I appreciate the time you are taking to assist!

Find more posts tagged with

Accepted answers

All comments

handat

My actual changes:
KeyStores=CustomIdentityAndCustomTrust
CustomIdentityKeyStoreFileName=D\:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks
CustomIdentityAlias=rnadbi
CustomIdentityPrivateKeyPassPhrase={3DES}tr4UdwfKpKGCyZrfDn7Myw==
CustomTrustKeyStoreFileName=D\:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks

Two things that is wrong. It is \\, not D\:\\

Also, you need to provide the plain text password, not the encrypted password.

makin

Thanks! I changed the D\:\\ to the \\ (I was following the format of the file path the script had used for the log file). I also type in the actual password and not the encrypted password and save. But when I open it back up to copy and paste here, it is encrypted in the script. However, I still get errors.

KeyStores=CustomIdentityAndCustomTrust

CustomIdentityKeyStoreFileName=D:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks

CustomIdentityAlias=rnadbi

CustomIdentityPrivateKeyPassPhrase={3DES}tr4UdwfKpKGCyZrfDn7Myw==

CustomTrustKeyStoreFileName=D:\\oramw\\user_projects\\domains\\bifoundation_domain\\mykeystore.jks

nodemanager.log:

java.io.IOException: Invalid state file format. State file contents: