Database Control 11.2.0.4 Fails to Start with Error "Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA" in emdb.nohup (Doc ID 2023533.1)

Last updated on JULY 02, 2015

Applies to:

Enterprise Manager for Oracle Database - Version 11.2.0.4 and later
Information in this document applies to any platform.

Symptoms

Following the <DOCUMENT 604903.1> - How To configure DB Console agent to use Stronger Cyphers for the SSL Communication?, the Database Control 11.2.0.4 properties were modified to use the cipher suite SSL_RSA_WITH_AES_256_CBC_SHA.

The dbconsole then failed to start with the error message "Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA" logged in the file DATABASE_ORACLE_HOME/hostname_sid/sysman/log/emdb.nohup:

15/03/20 13:17:56 java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_AES_256_CBC_SHA 
15/03/20 13:17:56 at com.sun.net.ssl.internal.ssl.CipherSuite.valueOf(CipherSuite.java:180) 
15/03/20 13:17:56 at com.sun.net.ssl.internal.ssl.CipherSuiteList.<init>(CipherSuiteList.java:64) 15/03/20 13:17:56 at com.sun.net.ssl.internal.ssl.SSLSocketImpl.setEnabledCipherSuites(SSLSocketImp l.java:2203) 
15/03/20 13:17:56 at oracle.oc4j.network.ServerSocketAcceptHandler.configureSocket(ServerSocketAcce ptHandler.java:252) 
15/03/20 13:17:56 at @ oracle.oc4j.network.ServerSocketAcceptHandler.doSSLHandShaking(ServerSocketAcc eptHandler.java:244)

The file DATABASE_ORACLE_HOME/sysman/config/emd.properties includes:

The the cipher suite SSL_RSA_WITH_AES_256_CBC_SHA has been added to the file DATABASE_ORACLE_HOME/oc4j/j2ee/OC4J_DBConsole_<hostname>_<sid>/config/http-web-site.xml.

The dbconsole has been secured with the cipher suite SSL_RSA_WITH_AES_256_CBC_SHA.

The JDK used is version JDK 1.5.x


Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms