WLS 6.1 - Connection problem between iPlanet and WLS via SSL using 128-bit Global Certs (Doc ID 770336.1)

Last updated on DECEMBER 16, 2023

Applies to:

Goal

DESCRIPTION:
Cannot connect between iPlanet and WebLogic Server 6.0 or 6.1 LS via SSL using Global Certs. If 128-bit global
certificate is installed on WLS, and the server is hit with a non-Internet Explorer 5.5 browser, a page can be pulled
up on WLS. If iPlanet (4.1 in this case) is then setup and configured for SSL, a connection cannot be made to the
server using 128-bit global certificate and the libproxy128.so plugin. A connection can be made using the WLS demo
certificates, 128-bit demo certificates, and VeriSign test certificates. The following message occurs in the
wlproxy.log file:

---> start of log wlproxy.log <---
Tue Mar 26 16:00:02 2002 INFO: SSL certificate chain validation failed: 3015
Tue Mar 26 16:00:02 2002     trusted certs = 1
Tue Mar 26 16:00:02 2002      dumping cert chain
Tue Mar 26 16:00:02 2002         Failed to get CommonName from subjectDN
Tue Mar 26 16:00:02 2002         commonName is host.domain
Tue Mar 26 16:00:02 2002 ERROR: SSLWrite failed
Tue Mar 26 16:00:02 2002 SEND failed (ret=-1) at 558 of file URL.cpp
Tue Mar 26 16:00:02 2002 *******Exception type [WRITE_ERROR] raised at line 559 of URL.cpp
Tue Mar 26 16:00:02 2002 got exception in sendRequest phase: WRITE_ERROR [os error=0,  line 559 of URL.cpp]:  at line
971
Tue Mar 26 16:00:02 2002 INFO: Closing SSL context
Tue Mar 26 16:00:02 2002 INFO: sysSend 14
Tue Mar 26 16:00:02 2002 Failing over after sendRequest exception
---> end of wlproxy.log <---

CONFIGURATION:
WLS 6.0 or WLS 6.1
iPlanet

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.