Using SHA2 Certificate After JDK 7 Upgrade - Forms / Reports Getting "java.lang.RuntimeException: Could not generate dummy secret" and "java.security.InvalidAlgorithmParameterException: Parameters not supported"
(Doc ID 2069120.1)
Last updated on FEBRUARY 18, 2018
Applies to:Oracle WebLogic Server - Version 10.3.6 to 10.3.6
Oracle Forms - Version 126.96.36.199.0 to 188.8.131.52.0 [Release 11g]
Oracle Reports Developer - Version 184.108.40.206.0 to 220.127.116.11.0 [Release 11g]
Oracle Fusion Middleware - Version 18.104.22.168.0 to 22.214.171.124.0 [Release Oracle11g]
Information in this document applies to any platform.
After installed new SHA2 certificate on Oracle Weblogic Server, SSL communication to WLS is failing. In this case, the OHS installed WLS Proxy Plugin is sending the request to WLS where the original request is originating from Oracle Forms / Reports use of the JRE client:
JRE Client --> HTTPS --> OHS/mod_wl_ohs --> HTTPS --> WLS
OHS log trace :
[OHS] [ERROR:32] [OHS-2079] [core.c] [host_id: xxx] [host_addr: xxx] [pid: 7628] [tid: 2732] [user: SYSTEM] [VirtualHost: xxx:0] nzos handshake error, nzos_Handshake returned 28862(server ors-21ora-1.ors.nih.gov:443, client 126.96.36.199)
[OHS] [ERROR:32] [OHS-2171] [core.c] [host_id: xxx] [host_addr: xxx] [pid: 7628] [tid: 2732] [user: SYSTEM] [VirtualHost: xxx:0] NZ Library Error: SSL IO error [Hint: the client stop the connection unexpectedly]
WLS log trace :
<WLS_FORMS> <ExecuteThread: '3' for queue: 'weblogic.socket.Muxer'> <> <> <[Thread[ExecuteThread: '3' for queue: 'weblogic.socket.Muxer',5,Thread Group for Queue: 'weblogic.socket.Muxer']]weblogic.security.SSL.jsseadapter: SSLENGINE: Exception occurred during SSLEngine.unwrap(ByteBuffer,ByteBuffer). java.lang.RuntimeException: Could not generate dummy secret
SSL communication between the OHS and the WLS should work with SHA2 certificates.
1) Upgraded JDK from 1.6 to 1.7
2) Installed new SHA2 certificate on WLS
To view full details, sign in with your My Oracle Support account.
Don't have a My Oracle Support account? Click to get started!
In this Document