Using SHA2 Certificate After JDK 7 Upgrade - Forms / Reports Getting "java.lang.RuntimeException: Could not generate dummy secret" and "java.security.InvalidAlgorithmParameterException: Parameters not supported"

(Doc ID 2069120.1)

Last updated on FEBRUARY 18, 2018

Applies to:

Oracle WebLogic Server - Version 10.3.6 to 10.3.6
Oracle Forms - Version 11.1.2.2.0 to 11.1.2.2.0 [Release 11g]
Oracle Reports Developer - Version 11.1.2.2.0 to 11.1.2.2.0 [Release 11g]
Oracle Fusion Middleware - Version 11.1.1.2.0 to 11.1.2.2.0 [Release Oracle11g]
Information in this document applies to any platform.

Symptoms

After installed new SHA2 certificate on Oracle Weblogic Server, SSL communication to WLS is failing. In this case, the OHS installed WLS Proxy Plugin is sending the request to WLS where the original request is originating from Oracle Forms / Reports use of the JRE client:


JRE Client --> HTTPS --> OHS/mod_wl_ohs --> HTTPS --> WLS

OHS log trace : 

[OHS] [ERROR:32] [OHS-2079] [core.c] [host_id: xxx] [host_addr: xxx] [pid: 7628] [tid: 2732] [user: SYSTEM] [VirtualHost: xxx:0]  nzos handshake error, nzos_Handshake returned 28862(server ors-21ora-1.ors.nih.gov:443, client 137.187.218.117)

[OHS] [ERROR:32] [OHS-2171] [core.c] [host_id: xxx] [host_addr: xxx] [pid: 7628] [tid: 2732] [user: SYSTEM] [VirtualHost: xxx:0]  NZ Library Error: SSL IO error [Hint: the client stop the connection unexpectedly]

 

WLS  log trace :

 <WLS_FORMS> <ExecuteThread: '3' for queue: 'weblogic.socket.Muxer'> <> <> <[Thread[ExecuteThread: '3' for queue: 'weblogic.socket.Muxer',5,Thread Group for Queue: 'weblogic.socket.Muxer']]weblogic.security.SSL.jsseadapter: SSLENGINE: Exception occurred during SSLEngine.unwrap(ByteBuffer,ByteBuffer[]). java.lang.RuntimeException: Could not generate dummy secret

 

SSL communication between the OHS and the WLS should work with SHA2 certificates.

Changes

1) Upgraded JDK from 1.6 to 1.7
2) Installed new SHA2 certificate on WLS

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms