My Oracle Support Banner

PDK-Java Portlet on WCP 11.1.1.8, Portlet Consumer Error Occur When Using TLS1.1/TLS1.2 Protocol (Doc ID 2106985.1)

Last updated on APRIL 11, 2018

Applies to:

Oracle WebCenter Portal - Version 11.1.1.8.8 and later
Information in this document applies to any platform.

Symptoms

Using WebCenter Portal (WCP) 11.1.1.8.8.

Register an SSL-enabled PDK-Java producer and run the portlet with only TLS1.2 Protocol enabled. 

The SSL-enabled PDK portlet page displays this error:

Portlet Consumer Error.

The consumer server WC_Spaces shows this error:

2015-12-21T15:38:05.561-05:00] [WC_Spaces] [ERROR] [] [oracle.portlet.binding] [tid: [ACTIVE].ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'] [userId: anonymous] [ecid: d0e6f9ec78b1c6a6:-551d070b:151c63efb5f:-8000-0000000000001128,0] [APP: webcenter#11.1.1.4.0] [DSID: 0000L76Gnjb6qIS_MDt1ie1MU68B000003] An error has occurred for Portlet Binding portlet2751182963.[[
oracle.portlet.client.container.PortletException: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at oracle.portlet.client.connection.web.WebProducerRuntimeAdapterImpl.doHttpClientCall(WebProducerRuntimeAdapterImpl.java:578)
at oracle.portlet.client.connection.web.WebProducerRuntimeAdapterImpl._showPortlet(WebProducerRuntimeAdapterImpl.java:188)
at oracle.portlet.client.connection.web.WebProducerRuntimeAdapterImpl.showPortlet(WebProducerRuntimeAdapterImpl.java:156)
at oracle.portlet.client.connection.web.WebProducerInteraction.showPortlet(WebProducerInteraction.java:131)
at oracle.portlet.client.techimpl.web.WebPortletRenderPipe.pre(WebPortletRenderPipe.java:87)

...

Caused by: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
at sun.security.ssl.Alerts.getSSLException(Alerts.java:192)
at sun.security.ssl.Alerts.getSSLException(Alerts.java:154)
at sun.security.ssl.SSLSocketImpl.recvAlert(SSLSocketImpl.java:1961)

...

 Detail steps to reproduce this issue:

1. Perform the steps listed in the following section:

35.5.5 Registering the SSL-enabled PDK-Java Producer and Running the Portlets
Fusion Middleware Administering Oracle WebCenter Portal
http://docs.oracle.com/cd/E29542_01/webcenter.1111/e27738/wcadm_security_ssl.htm#WCADM6457

2. Restart both the WC_Portlet and WC_Spaces servers (consumer server) with following java option:

-Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.2
-Dweblogic.security.SSL.enableJSSE=true
-Doracle.webcenter.portlet.SSL.minimumProtocolVersion=TLSv1.2

3. On the consumer server WC_Spaces, go to the view mode of the page and check that the PDK-Java portlet renders correctly. This error will display:

Portlet Consumer Error

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.