Undesired RC4 Ciphers are Continually Used with WebLogic Server SSL Connections (Doc ID 2250434.1)

Last updated on MARCH 09, 2023

Applies to:

Symptoms

• When accessing an application with SSL, the link does not work and will not load in the browser. The following errors may be seen depending on your browser vendor (Chrome, Fire Fox, Internet Explorer):
  
  ERR_SSL_VERSION_OR_CIPHER_MISMATCH

  or

  ERR_SSL_WEAK_SERVER_EPHEMERAL_DH_KEY
  
  

• Some client browsers may report the use of RC4 ciphers and some security scans may be detecting RC4 ciphers.
  
  
• When using nmap utility, it can be seen that RC4 ciphers are available.  See <Note 2241442.1> Using NMAP Tool to Test Available SSL Ciphers
  
  
• When examining the Weblogic AdminServer.log with SSL debug enabled, the following can be observed:
  
  

Changes

 Have updated the DOMAIN_HOME/config/config.xml and JAVA_HOME/jre/lib/security/java.security files with no success.

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.