EM 12c: Weblogic Discovery or Refresh in Enterprise Manager 12c Cloud Control Fails with Error: Algorithm constraints check failed: MD5withRSA (Doc ID 2066039.1)

Last updated on JULY 01, 2017

Applies to:

Enterprise Manager for Fusion Middleware - Version 12.1.0.2.0 and later
Information in this document applies to any platform.

Symptoms

After upgrade of the EM 12c Agent to or above jdk6u91, discovery of a Weblogic Domain in EM 12c Cloud Control fails with this error (the WLS Admin channel has been enabled and the server certificate has been imported to the agent jks):

Failed to discover WebLogic: java.lang.RuntimeException: java.lang.RuntimeException: java.net.ConnectException t3s://xxxxxxx:9101: Destination unreachable; nested exception is: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA; No available router to destination. No targets discovered. Check host, port, credentials, and protocol and be sure the server is running. This UI cannot be used to discover WebLogic version 7.x to 8.x.



From the .../agent_inst/sysman/log/gcagent.log file:

Caused by: oracle.sysman.emSDK.agent.fetchlet.exception.FetchletException: <<<METRIC SKIP>>>cannot communicate with Target: java.io.IOException: java.rmi.ConnectException: Destination unreachable; nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA; No available router to destination
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXFetchlet.getMetric(JMXFetchlet.java:278)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at oracle.sysman.emSDK.agent.fetchlet.jmx.CoreJMXFetchletWrapperBase.getMetric(CoreJMXFetchletWrapperBase.java:162)
... 31 more
Caused by: java.io.IOException: java.rmi.ConnectException: Destination unreachable; nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA; No available router to destination
at oracle.sysman.emSDK.agent.fetchlet.jmx.JMXExceptionUtil.filterWLSIOException(JMXExceptionUtil.java:76)
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXContext.connectWithTimeOut(JMXContext.java:1063)
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXContext.createJMXConnectorInCache(JMXContext.java:1091)
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXContext.connectJVM(JMXContext.java:951)
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXContext.connect(JMXContext.java:804)
at oracle.sysman.gcagent.addon.fetchlet.jmx.JMXFetchlet.getMetric(JMXFetchlet.java:151)
... 36 more
Caused by: java.rmi.ConnectException: Destination unreachable; nested exception is:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA; No available router to destination
at weblogic.rjvm.ConnectionManager.bootstrap(ConnectionManager.java:470)

 

 

Changes

 Recent jdk upgrade on the EM 12c agent to a higher version than jdk6u91

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms