This discussion is archived
1 2 Previous Next 18 Replies Latest reply: Aug 25, 2010 9:03 AM by jhammer RSS

Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?

520377 Explorer
Currently Being Moderated
I'd like to run APEX on our 11g database through SSL on the embedded gateway.

I've set the port via apxconf.sql and I have created the wallet. When I access the site using https, I get a 'site not found' style message. When I access the site using http but referring to port 443, I get access.

Is it possible to set up SSL with dbms_epq? If so, could you point me to the reference?

Is there a restriction on the database edition, I'm using Standard.
  • 1. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    jkallman Employee ACE
    Currently Being Moderated
    Andy,

    This is really a task to setup SSL for the XDB Protocol Server. This is documented at:

    http://download.oracle.com/docs/cd/B28359_01/appdev.111/b28369/xdb22pro.htm#ADXDB2530

    Joel
  • 2. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    Joel,
    This is really a task to setup SSL for the XDB
    Protocol Server. This is documented at:

    http://download.oracle.com/docs/cd/B28359_01/appdev.11
    1/b28369/xdb22pro.htm#ADXDB2530
    Thanks for the link.

    If the Net Manager on my server doesn't have an 'Oracle Advanced Security' tab, does that infer that SSL is not available on the Standard Edition?
  • 3. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    jkallman Employee ACE
    Currently Being Moderated
    Andy,

    I'm no expert in this area, but reading this page:

    http://www.oracle.com/database/advanced-security.html

    I would believe that Oracle Advanced Security is an option for Enterprise Edition.

    Joel
  • 4. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    Jes Oracle ACE
    Currently Being Moderated
    Hi Andy,

    Another option would be to install a standalone Apache server (which has SSL enabled) which proxies requests to the dbms_epg, of course this would mean the connection between the Apache server and the dbms_epg was not using SSL, but depending on your exact requirements this might still be sufficient for your needs.

    John.
    --------------------------------------------
    http://jes.blogs.shellprompt.net
    http://apex-evangelists.com
  • 5. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    Andy,

    I'm no expert in this area, but reading this page:

    http://www.oracle.com/database/advanced-security.html

    I would believe that Oracle Advanced Security is an
    option for Enterprise Edition.
    Could be! It's vague enough to cover most things! I'll look into your Apache solution.
  • 6. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    I managed to get this working after find the following information: http://wiki.shellprompt.net/bin/view/Apex/SSLandAPEXxdbHttp

    My main problems were that my netman tools didn't support any of the 'extra' options, so the listener and sqlnet files were edited by hand and I needed to add the

    SSL_SERVER_DN_MATCH = No

    directive to both files as my certificates were against a domain that didn't match my current setup. Without the directive the browser seemed to get the first warning about an invalid certificate, but the server would then refuse to continue serving the pages.

    It also seemed a little fussy about the order in which the listeners were started, seemed to work best for me if I started the SSL listener first.
  • 7. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    And just to complete the picture...

    dbms_epg seemed very unreliable on our set-up - all network connections (HTTP, HTTPS and FTP) would hang after a while. There doesn't seem to be an easy way to monitor what is happening, so I decided to return to the old faithful Apache-based server.

    Very annoyingly, the 11g HTTP server download doesn't actually run once installed... seems to be missing modules e.g. mod_status and mod_access.

    As time was pressing, I installed the 10g companion instead. This seems to be working fine and I have lots of log files to peruse at my leisure.
  • 8. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    jkallman Employee ACE
    Currently Being Moderated
    Andy,

    Well that sure is troubling news.

    1) With respect to the XDB protocol server hanging, was this just with mild usage? Was this on a memory-starved machine? What is the value of the database initialization parameter SHARED_SERVERS?

    2) When you say 11g HTTP Server doesn't run once installed, just simply out of the box, after installation, there were errors when you tried to start this up? Can you let me know which download and which platform, and I'll ask someone to look at this ASAP.


    For APEX development itself, we use 11g with the 11g Oracle HTTP Server - zero issues. Also, for package application development, that's on another instance using 11g and XDB/EPG, and I've never encountered these same issues. I'm not saying these issues are of your own creation - I just want to convey that we do actually use this stuff before shipping it to customers.

    Joel
  • 9. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    12793 Newbie
    Currently Being Moderated
    Andy,

    Well that sure is troubling news.

    1) With respect to the XDB protocol server hanging,
    was this just with mild usage? Was this on a
    memory-starved machine? What is the value of the
    database initialization parameter SHARED_SERVERS?

    2) When you say 11g HTTP Server doesn't run once
    installed, just simply out of the box, after
    installation, there were errors when you tried to
    start this up? Can you let me know which download
    and which platform, and I'll ask someone to look at
    this ASAP.


    For APEX development itself, we use 11g with the 11g
    Oracle HTTP Server - zero issues. Also, for package
    application development, that's on another instance
    using 11g and XDB/EPG, and I've never encountered
    these same issues. I'm not saying these issues are
    of your own creation - I just want to convey that we
    do actually use this stuff before shipping it to
    customers.

    Joel
    Good Morning, Joel,

    I do have problems with XDB/EPG stuff, here is the link:
    Apex 3 with EPG  (11G) horrible performance under Squid proxy server

    My machine has 2 qual-core CPUs with 4G RAM , Linux 64 bit. To me the HTTP server configration makes lots of more sense, like Virtual Host configrations, log file configurations....

    To Andy: XDB/EPG is good for the most basic web configurations. You will have to go back to standalone Apache server if you want anything slightly fancier. i.e Virtual Host. Just my 2 cents....


    sean
  • 10. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    Andy,

    Well that sure is troubling news.

    1) With respect to the XDB protocol server hanging,
    was this just with mild usage? Was this on a
    memory-starved machine? What is the value of the
    database initialization parameter SHARED_SERVERS?
    One or two users, 2Gb RAM, SHARED_SERVERS=1, only running the database. The only 'fix' was to restart the database - restarting the listeners had no effect.
    2) When you say 11g HTTP Server doesn't run once
    installed, just simply out of the box, after
    installation, there were errors when you tried to
    start this up? Can you let me know which download
    and which platform, and I'll ask someone to look at
    this ASAP.
    From the OTN 11g downloads page, Windows 32bit, http://download.oracle.com/otn/nt/ias/10133/Apache.zip . Installs without problem, but when you try to start it up the HTTP server fails due to missing modules mod_status and mod_access - when you comment these out of the httpd.conf file it then fails as it relies on the access module.
    For APEX development itself, we use 11g with the 11g
    Oracle HTTP Server - zero issues. Also, for package
    application development, that's on another instance
    using 11g and XDB/EPG, and I've never encountered
    these same issues. I'm not saying these issues are
    of your own creation - I just want to convey that we
    do actually use this stuff before shipping it to
    customers.
    It's possible/probable that I helped break EPG whilst setting up for SSL - the available official documentation made reference to options not available on the netman tool that was installed alongside Standard Edition One of 11g - so I fell back to scouring the web for other users in the same position (hence the shellprompt link). I had trouble confirming whether SSL was supported in SE One and XDB/EPG. When it stopped working I couldn't find any easy way of asking the database "what's up?!" - so the move to Apache and nice log files!

    I'd really like to run everything from XDB/EPG - is there an easy/official way of cleaning it up and setting it up for the above environment?

    Thanks for your response,
  • 11. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    jkallman Employee ACE
    Currently Being Moderated
    Andy,

    For what it's worth, the Oracle HTTP Server for DB 11gR1 Windows 32-bit download is available again. I tested this one myself.

    http://www.oracle.com/technology/software/products/database/oracle11g/111060_win32soft.html

    Joel
  • 12. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    Andy,

    For what it's worth, the Oracle HTTP Server for DB
    11gR1 Windows 32-bit download is available again. I
    tested this one myself.

    http://www.oracle.com/technology/software/products/dat
    abase/oracle11g/111060_win32soft.html
    Thanks for that, I'll try and find a spare machine to put it on.
  • 13. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    Thanks for that, I'll try and find a spare machine to
    put it on.
    I've downloaded and installed the OHS (shows as version 10.1.3), Seems to work well, with one hiccup - the HTTP server seems to stop whenever I log out of the server.

    It doesn't look as if a service has been created to run OHS? I start OHS through opmnctl. I'm sure that I'm missing something obvious, but a pointer in the right direction would be appreciated!
  • 14. Re: Oracle 11g, APEX 3.0.1, dbms_epg and SSL - is this possible?
    520377 Explorer
    Currently Being Moderated
    It doesn't look as if a service has been created to
    run OHS? I start OHS through opmnctl. I'm sure that
    I'm missing something obvious, but a pointer in the
    right direction would be appreciated!
    Further reading (under a section on High Availability) shows that creating the service is a manual process, quote:

    Run the following command to create the service for OPMN. Note that the SC tool requires a space after each option.

    sc create Oracle-<instance_name>ProcessManager
    binPath= "<oracle_home>\opmn\bin\opmn.exe -S"
1 2 Previous Next