"SSLHandshakeException: Unsupported curveId: 29" Errors After Active Directory Domain Controllers Upgraded to 2016 (Doc ID 2325756.1)

Last updated on APRIL 15, 2024

Applies to:

Symptoms

After updating Domain Controller to 2016, SSL handshake errors are seen in the WebLogic Server 12.2.1 Admin Server logs:

weblogic.security.SSL.jsseadapter: SSLENGINE: Exception occurred during SSLEngine.unwrap(ByteBuffer,ByteBuffer[]).
javax.net.ssl.SSLHandshakeException: Unsupported curveId: 29

Depending on the configuration, this can also occur at startup, where WLS fails to connect to LDAP, throwing curveId: 29 exception:

<Warning> <Security> <BEA-099117> <The LDAP authentication provider named "<ProviderName>" failed to make a connection to <host.domain> server at ldaps://host:port, the error cause is:Unsupported curveId: 29.>
 <Info> <Security> <BEA-090516> <The Authenticator provider has pre-existing LDAP data.>

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.