No login page access

[latifa]

Hi Erman,

I try to connect to an https url but can't do it: I have a blanc screen.

1. For configuration, I set following to the convenient values:

s_external_url
s_webentryurlprotocol
s_webentryhost
s_webentrydomain
s_login_page
s_active_webport
s_enable_sslterminator

2. Starting logs --> Ok

3. I checked : curl -k https://URL --> it's OK

4. Apache logs: no significantes messages

5. I found some error messages in : ssl_engine_log


24/Jan/2018 10:54:46 23331] [error] SSL call to NZ function nzos_Handshake failed with error 29039 (server uancefr.idf.fr.ftgroup:80, client 10.114.255.38)
[24/Jan/2018 10:54:46 23331] [error] SSL negotiation error [Hint: too restrictive SSLCipherSuite]
[24/Jan/2018 10:54:54 26383] [error] SSL call to NZ function nzos_Handshake failed with error 28862 (server uancefr.idf.fr.ftgroup:80, client 10.114.255.38)
[24/Jan/2018 10:54:54 26383] [error] SSL IO error [Hint: the client stop the connection unexpectedly]



[02/Feb/2018 16:58:37 25247] [warn]  Init: (uancefr.finance.ftgroup:443) You configured HTTP(80) on the standard HTTPS(443) port!



Any help please. Thank you

Regards,
Latifa

[ErmanArslansOracleBlog]

Did you check ssl.conf and httpd.conf ?

What is written in ssl.conf, line starting with SSLCipherSuite..?

[latifa]

Hi Erman,

in ssl.conf, the value is:

SSLProtocol    -all +TLSv1 +SSLv3
SSLCipherSuite HIGH:MEDIUM:!aNULL:+SHA1:+MD5:+HIGH:+MEDIUM


in httpd.conf:

Port 443
Listen 10000

ServerName is correct


Regards,
Latifa

[latifa]

I found somme error messages in log.xml:

<MSG_TEXT>Internal error raised tyring to instantiate web-application: ascontrol defined in web site OC4J 10g (10.1.3) Default Web Site. Application: ascontrol does not exist. Error creating Web application: ascontrol</MSG_TEXT>


alos in application.log:

        at com.orionserver[Oracle Containers for J2EE 10g (10.1.3.5.0) ].http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
        at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:473)
        at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
        at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
        at oracle.apps.jtf.base.session.ReleaseResFilter.doFilter(ReleaseResFilter.java:26)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:15)
        at oracle.apps.fnd.security.AppsServletFilter.doFilter(AppsServletFilter.java:429)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:642)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:391)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:908)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:458)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
        at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
        at java.lang.Thread.run(Thread.java:745)
18/02/06 20:08:03.733 html: 10.1.3.5.0 Stopped
18/02/08 17:58:59.413 10.1.3.5.0 Started
18/02/08 17:59:02.605 html: 10.1.3.5.0 Started
18/02/08 17:59:06.323 html: oracle.apps.fnd.security.LeakDetectionFilter.initialized:1518109146323
18/02/08 17:59:06.324 html: LeakSetting:
        global:true,session:false,aggressive:false,stderr:false,appslog:false,corelog:false
        ignoring:null
18/02/08 18:07:13.543 html: 10.1.3.5.0 Stopped
18/02/09 12:38:04.496 10.1.3.5.0 Started
18/02/09 12:38:07.153 html: 10.1.3.5.0 Started
18/02/09 12:38:11.214 html: oracle.apps.fnd.security.LeakDetectionFilter.initialized:1518176291214
18/02/09 12:38:11.214 html: LeakSetting:
        global:true,session:false,aggressive:false,stderr:false,appslog:false,corelog:false
        ignoring:null

[latifa]

in application.log for the first OAS (among 3 OAS for our EBS ), the following error :

at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
        at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
        at java.lang.Thread.run(Thread.java:745)
18/02/09 11:53:02.517 html: chain failed
javax.servlet.ServletException: java.lang.RuntimeException: ORA-28365: wallet is not open
ORA-06512: at "APPS.FND_VAULT", line 948
ORA-06512: at "APPS.FND_WEB_SEC", line 748
ORA-06512: at line 1

        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.EvermindPageContext.handlePageThrowable(EvermindPageContext.java:899)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.EvermindPageContext.handlePageException(EvermindPageContext.java:816)
        at _AppsLocalLogin._jspService(_AppsLocalLogin.java:307)
        at com.orionserver[Oracle Containers for J2EE 10g (10.1.3.5.0) ].http.OrionHttpJspPage.service(OrionHttpJspPage.java:59)
        at oracle.jsp.runtimev2.JspPageTable.service(JspPageTable.java:473)
        at oracle.jsp.runtimev2.JspServlet.internalService(JspServlet.java:594)
        at oracle.jsp.runtimev2.JspServlet.service(JspServlet.java:518)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:856)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ResourceFilterChain.doFilter(ResourceFilterChain.java:64)
        at oracle.apps.jtf.base.session.ReleaseResFilter.doFilter(ReleaseResFilter.java:26)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.EvermindFilterChain.doFilter(EvermindFilterChain.java:15)
        at oracle.apps.fnd.security.AppsServletFilter.doFilter(AppsServletFilter.java:429)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ServletRequestDispatcher.invoke(ServletRequestDispatcher.java:642)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.ServletRequestDispatcher.forwardInternal(ServletRequestDispatcher.java:391)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.HttpRequestHandler.doProcessRequest(HttpRequestHandler.java:908)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.HttpRequestHandler.processRequest(HttpRequestHandler.java:458)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:313)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].server.http.AJPRequestHandler.run(AJPRequestHandler.java:199)
        at oracle.oc4j.network.ServerSocketReadHandler$SafeRunnable.run(ServerSocketReadHandler.java:260)
        at com.evermind[Oracle Containers for J2EE 10g (10.1.3.5.0) ].util.ReleasableResourcePooledExecutor$MyWorker.run(ReleasableResourcePooledExecutor.java:303)
        at java.lang.Thread.run(Thread.java:745)

[latifa]

Hi Erman,

In a previous post, I have got almost the same issue:

http://erman-arslan-s-oracle-forum.2340467.n4.nabble.com/Not-able-to-connect-to-EBS-td4958.html

I think it's linked to wallet configuration ....

Regards,
Latifa

[ErmanArslansOracleBlog]

How did you end up with this situation.

You have also "Application: ascontrol does not exist." errors.

How exactly did you implement this SSL configuration?

[latifa]

Our DBA didn't communicate the solution he made but I guess he opened the wallet like this I think:

ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED by xxxxxx ;

Now it works, we can access to the application and users are happy :)


However, I didn't see that error; "Application: ascontrol does not exist." errors. What does it mean ?

[ErmanArslansOracleBlog]

Application Server Control is deployed as a standard J2EE application. The Application Server Control application (ascontrol) is deployed automatically on every OC4J instance you create.

So that error is about that application..

This ascontrol application is the application to manage your Oracle Application Server environment.

Since this is an EBS environment and since it is working now, you can ignore it.