9 Replies Latest reply on Apr 11, 2018 10:55 AM by AnatoliAtanasov

    Unable to start managed server in SSL after configuring keystore and SSL in managed server

    3645240

      Hi Experts,

       

      I am unable to start the managed server in SSL after making chances in nodemanager.properties.

      Followed for keystore: https://oracle-base.com/articles/11g/weblogic-configure-ssl-for-a-managed-server

       

      When try to start the managed serer after making changes in the nodemanager.properties with the keystores below is the error.

       

      <Apr 11, 2018 11:59:35 AM IST> <INFO> <sim_domain> <sim-server> <Startup configuration properties loaded from "/u01/app/orawls/SIM12.2.1/user_projects/domains/sim_domain/servers/sim-server/data/nodemanager/startup.properties">

      <Apr 11, 2018 11:59:35 AM IST> <INFO> <sim_domain> <sim-server> <Adjusted state of server 'sim-server ' from RUNNING to FAILED_NOT_RESTARTABLE>

      <Apr 11, 2018 11:59:35 AM IST> <INFO> <Secure socket listener started on port 5544, host /192.168.2.141>

      <Apr 11, 2018 11:59:58 AM IST> <Warning> <netuix> <BEA-423420> <Redirect is executed in begin or refresh action. Redirect url is /console/console.portal?_nfpb=true&_pageLabel=WLSServerControlTablePage.>

      <Apr 11, 2018 12:00:13 PM IST> <Warning> <Management> <BEA-141239> <The non-dynamic attribute ListenAddress on weblogic.management.configuration.ServerMBeanImpl@aaa5e2ed([sim_domain]/Servers[sim-server]) has been changed. This may require redeploying or rebooting configured entities.>

      <Apr 11, 2018 12:00:13 PM IST> <Warning> <Management> <BEA-141238> <A non-dynamic change has been made which affects the server sim-server. This server must be rebooted in order to consume this change.>

      <Apr 11, 2018 12:00:13 PM IST> <Warning> <Management> <BEA-141239> <The non-dynamic attribute ListenAddress on weblogic.management.configuration.ServerMBeanImpl@aaa5e2ed([sim_domain]/Servers[sim-server]) has been changed. This may require redeploying or rebooting configured entities.>

      <Apr 11, 2018 12:00:13 PM IST> <Error> <Console> <BEA-240003> <Administration Console encountered the following error: java.rmi.RemoteException: [Deployer:149150]An IOException occurred while reading the input.; nested exception is:

              javax.net.ssl.SSLHandshakeException: General SSLEngine problem; nested exception is:

              javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToServerURL(HTTPMessageSender.java:365)

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToTargetServer(HTTPMessageSender.java:129)

              at weblogic.deploy.service.internal.transport.CommonMessageSender$1.run(CommonMessageSender.java:303)

              at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:643)

              at weblogic.invocation.ComponentInvocationContextManager._runAs(ComponentInvocationContextManager.java:348)

              at weblogic.invocation.ComponentInvocationContextManager.runAs(ComponentInvocationContextManager.java:333)

              at weblogic.work.LivePartitionUtility.doRunWorkUnderContext(LivePartitionUtility.java:54)

              at weblogic.work.PartitionUtility.runWorkUnderContext(PartitionUtility.java:41)

              at weblogic.work.SelfTuningWorkManagerImpl.runWorkUnderContext(SelfTuningWorkManagerImpl.java:617)

              at weblogic.work.ExecuteThread.execute(ExecuteThread.java:397)

              at weblogic.work.ExecuteThread.run(ExecuteThread.java:346)

      Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1431)

              at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)

              at sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1214)

              at sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1186)

              at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine$1.run(JaSSLEngine.java:68)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine.doAction(JaSSLEngine.java:734)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine.wrap(JaSSLEngine.java:66)

              at weblogic.socket.JSSEFilterImpl.wrapAndWrite(JSSEFilterImpl.java:726)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:109)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:77)

              at weblogic.socket.JSSESocket.startHandshake(JSSESocket.java:240)

              at weblogic.net.http.HttpsClient.New(HttpsClient.java:574)

              at weblogic.net.http.HttpsClient.New(HttpsClient.java:541)

              at weblogic.net.http.HttpsURLConnection.connect(HttpsURLConnection.java:230)

              at weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:375)

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToServerURL(HTTPMessageSender.java:314)

      Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

              at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1728)

              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:304)

              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)

              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1509)

              at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)

              at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)

              at sun.security.ssl.Handshaker$1.run(Handshaker.java:919)

              at sun.security.ssl.Handshaker$1.run(Handshaker.java:916)

              at java.security.AccessController.doPrivileged(Native Method)

              at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1369)

              at weblogic.socket.JSSEFilterImpl.doTasks(JSSEFilterImpl.java:211)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:113)

      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)

              at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)

              at sun.security.validator.Validator.validate(Validator.java:260)

              at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)

              at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)

              at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:105)

              at weblogic.security.SSL.jsseadapter.JaTrustManager.checkServerTrusted(JaTrustManager.java:128)

              at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:998)

              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)

      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

              at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

              at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

              at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)

              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)

      >

      <Apr 11, 2018 12:00:38 PM IST> <Warning> <netuix> <BEA-423420> <Redirect is executed in begin or refresh action. Redirect url is /console/console.portal?_nfpb=true&_pageLabel=WLSServerControlTablePage.>

      <Apr 11, 2018 12:22:56 PM IST> <Warning> <Management> <BEA-141239> <The non-dynamic attribute ListenAddress on weblogic.management.configuration.ServerMBeanImpl@315b2146([sim_domain]/Servers[AdminServer]) has been changed. This may require redeploying or rebooting configured entities.>

      <Apr 11, 2018 12:22:56 PM IST> <Warning> <Management> <BEA-141238> <A non-dynamic change has been made which affects the server AdminServer. This server must be rebooted in order to consume this change.>

      <Apr 11, 2018 12:22:56 PM IST> <Warning> <Management> <BEA-141239> <The non-dynamic attribute ListenAddress on weblogic.management.configuration.ServerMBeanImpl@315b2146([sim_domain]/Servers[AdminServer]) has been changed. This may require redeploying or rebooting configured entities.>

      <Apr 11, 2018 12:22:57 PM IST> <Error> <Console> <BEA-240003> <Administration Console encountered the following error: java.rmi.RemoteException: [Deployer:149150]An IOException occurred while reading the input.; nested exception is:

              javax.net.ssl.SSLHandshakeException: General SSLEngine problem; nested exception is:

              javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToServerURL(HTTPMessageSender.java:365)

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToTargetServer(HTTPMessageSender.java:129)

              at weblogic.deploy.service.internal.transport.CommonMessageSender$1.run(CommonMessageSender.java:303)

              at weblogic.work.SelfTuningWorkManagerImpl$WorkAdapterImpl.run(SelfTuningWorkManagerImpl.java:643)

              at weblogic.invocation.ComponentInvocationContextManager._runAs(ComponentInvocationContextManager.java:348)

              at weblogic.invocation.ComponentInvocationContextManager.runAs(ComponentInvocationContextManager.java:333)

              at weblogic.work.LivePartitionUtility.doRunWorkUnderContext(LivePartitionUtility.java:54)

              at weblogic.work.PartitionUtility.runWorkUnderContext(PartitionUtility.java:41)

              at weblogic.work.SelfTuningWorkManagerImpl.runWorkUnderContext(SelfTuningWorkManagerImpl.java:617)

              at weblogic.work.ExecuteThread.execute(ExecuteThread.java:397)

              at weblogic.work.ExecuteThread.run(ExecuteThread.java:346)

      Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at sun.security.ssl.Handshaker.checkThrown(Handshaker.java:1431)

              at sun.security.ssl.SSLEngineImpl.checkTaskThrown(SSLEngineImpl.java:535)

              at sun.security.ssl.SSLEngineImpl.writeAppRecord(SSLEngineImpl.java:1214)

              at sun.security.ssl.SSLEngineImpl.wrap(SSLEngineImpl.java:1186)

              at javax.net.ssl.SSLEngine.wrap(SSLEngine.java:469)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine$1.run(JaSSLEngine.java:68)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine.doAction(JaSSLEngine.java:734)

              at weblogic.security.SSL.jsseadapter.JaSSLEngine.wrap(JaSSLEngine.java:66)

              at weblogic.socket.JSSEFilterImpl.wrapAndWrite(JSSEFilterImpl.java:726)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:109)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:77)

              at weblogic.socket.JSSESocket.startHandshake(JSSESocket.java:240)

              at weblogic.net.http.HttpsClient.New(HttpsClient.java:574)

              at weblogic.net.http.HttpsClient.New(HttpsClient.java:541)

              at weblogic.net.http.HttpsURLConnection.connect(HttpsURLConnection.java:230)

              at weblogic.net.http.HttpURLConnection.getOutputStream(HttpURLConnection.java:375)

              at weblogic.deploy.service.internal.transport.http.HTTPMessageSender.sendMessageToServerURL(HTTPMessageSender.java:314)

      Caused by: javax.net.ssl.SSLHandshakeException: General SSLEngine problem

              at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)

              at sun.security.ssl.SSLEngineImpl.fatal(SSLEngineImpl.java:1728)

              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:304)

              at sun.security.ssl.Handshaker.fatalSE(Handshaker.java:296)

              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1509)

              at sun.security.ssl.ClientHandshaker.processMessage(ClientHandshaker.java:216)

              at sun.security.ssl.Handshaker.processLoop(Handshaker.java:979)

              at sun.security.ssl.Handshaker$1.run(Handshaker.java:919)

              at sun.security.ssl.Handshaker$1.run(Handshaker.java:916)

              at java.security.AccessController.doPrivileged(Native Method)

              at sun.security.ssl.Handshaker$DelegatedTask.run(Handshaker.java:1369)

              at weblogic.socket.JSSEFilterImpl.doTasks(JSSEFilterImpl.java:211)

              at weblogic.socket.JSSEFilterImpl.doHandshake(JSSEFilterImpl.java:113)

      Caused by: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:387)

              at sun.security.validator.PKIXValidator.engineValidate(PKIXValidator.java:292)

              at sun.security.validator.Validator.validate(Validator.java:260)

              at sun.security.ssl.X509TrustManagerImpl.validate(X509TrustManagerImpl.java:324)

              at sun.security.ssl.X509TrustManagerImpl.checkTrusted(X509TrustManagerImpl.java:229)

              at sun.security.ssl.X509TrustManagerImpl.checkServerTrusted(X509TrustManagerImpl.java:105)

              at weblogic.security.SSL.jsseadapter.JaTrustManager.checkServerTrusted(JaTrustManager.java:128)

              at sun.security.ssl.AbstractTrustManagerWrapper.checkServerTrusted(SSLContextImpl.java:998)

              at sun.security.ssl.ClientHandshaker.serverCertificate(ClientHandshaker.java:1496)

      Caused by: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target

              at sun.security.provider.certpath.SunCertPathBuilder.build(SunCertPathBuilder.java:141)

              at sun.security.provider.certpath.SunCertPathBuilder.engineBuild(SunCertPathBuilder.java:126)

              at java.security.cert.CertPathBuilder.build(CertPathBuilder.java:280)

              at sun.security.validator.PKIXValidator.doBuild(PKIXValidator.java:382)

       

       

      Thank you