Pages

Friday, September 27, 2013

Web Logic Node Manager Issues

When I was trying to Configure a Node Manager I faced different kinds of exceptions. One of them is

WARNING: Uncaught exception in server handlerjavax.net.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from 127.0.0.1 - 127.0.0.1. Check the peer to determine why it rejected the certificate chain (trusted CA configuration, hostname verification). SSL debug tracing may be required to determine the exact reason the certificate was rejected.
javax.net.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from 127.0.0.1 - 127.0.0.1. Check the peer to determine why it rejected the certificate chain (trusted CA configuration, hostname verification). SSL debug tracing may be required to determine the exact reason the certificate was rejected.

Even Though Node Manager is Started Successfully , I was unable to perform any operation on the managed Nodes.

We face this kind of errors while starting the server using node managers. These error occures when the Certificates or the SSL configuration is not correct. So During this case we need to check whether the Certificates are correct or not

If Admin Server and the Node Manager are using demo certificates which comes with WebLogic by default, then then we need to check the DNS name is correct or not.

Since I was testing the Node Manager , I disabled the Host Name Verification to make sure whether the issue wit the Incorrect Host name in the Certificate

For doing this , I just passed the
-Dweblogic.security.SSL.ignoreHostnameVerification=true to the JAVA_OPTS to the StartServer.sh Script
mean while for the startNodeManager.sh script too I added ,
-Dweblogic.nodemanager.sslHostNameVerificationEnabled=false

In Order to make sure the issue was with the SSL , we can change the communication between the admin server and the node manager.

we can set
SecureListener=false in <WL_HOME>\common\nodemamaner\nodmanager.properties

And also under machines, change the Listen Type to “Plain” from Admin Console.
Machine->Machine1->nodemanager—>type (Plain)
Then the communication between Admin Server and NodeManger will not be over SSL.

Once the Changes are Done ,the Communication between the Node Manager and Admin server is Successfully.