After Enabling SSL on Apache Proxy Server, Unable to Access to Web Client with Error 'Service Unavailable' When One of the Managed Server Is down in Agile PLM Clustered Instance
(Doc ID 2940263.1)
Last updated on FEBRUARY 05, 2025
Applies to:
Oracle Agile PLM Framework - Version 9.3.6.0 and laterInformation in this document applies to any platform.
Symptoms
Failover is not working on Agile Product Lifecycle Management (PLM) clustered instance and unable to access to Web Client when one of the managed server is down.
Apache HTTP Server is used as web proxy and the issue is happening after enabling SSL on WebLogic and Apache HTTP Server.
Below error is seen in the browser when accessed to Web Client URL:
Error
Service Unavailable
Below error is generated in apache error log (error_log), which shows SSL handshake has failed with WebLogic:
[Thu Nov 10 10:08:39.523040 2022] [weblogic:debug] [pid 29306] ApacheProxy.cpp(2543): [client xx.xx.xxx.xxx:xxxxx] keepAlive = 1, canRecycle = 1, referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.523048 2022] [weblogic:debug] [pid 29306] ApacheProxy.cpp(2546): [client xx.xx.xxx.xxx:xxxxx] Trying a pooled connection for 'xx.xx.xxx.xxx/{port}/{port}', referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.523055 2022] [weblogic:debug] [pid 29306] BaseProxy.cpp(3077): [client xx.xx.xxx.xxx:xxxxx] getPooledConn: found a host and port/securePort match, referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.523062 2022] [weblogic:debug] [pid 29306] BaseProxy.cpp(3138): [client xx.xx.xxx.xxx:xxxxx] getPooledConn: No more connections in the pool for Host[xx.xx.xxx.xxx] Port[{port}] SecurePort[{port}], referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.523069 2022] [weblogic:debug] [pid 29306] ApacheProxy.cpp(2578): [client xx.xx.xxx.xxx:xxxxx] general list: trying connect to 'xx.xx.xxx.xxx'/{port}/{port}at line 2578 for '/', referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.523646 2022] [weblogic:debug] [pid 29306] URL.cpp(1805): [client xx.xx.xxx.xxx:xxxxx] URL::Connect: Connected successfully, referer: https://{proxy_server}.{domain_name}/
[Thu Nov 10 10:08:39.539153 2022] [weblogic:error] [pid 29306] nzos_Handshake: mod_wl failed (29024)
[Thu Nov 10 10:08:39.539302 2022] [weblogic:error] [pid 29306] wl_ssl_open : SSL Handshake failed onserror : Success, error : 29024, status : 2
Environmental Detail
- Agile Application Server is clustered, and have multiple managed server nodes
- Apache HTTP is used as Web Proxy and Web Client is accessed via Apache HTTP URL
Steps
The issue can be reproduced at will with the following steps:
- On the Agile Application Server clustered instance where multiple managed server is running, configure Apache HTTP server as Web Proxy Server.
- Launch browser, and access to Web Client using web proxy URL: http://{proxy_server}.{domain_name}/Agile/PLMServet
- Web Client login screen shows up, and user can log into Web Client.
- Login to WebLogic admin console (http://{admin_server}.{domain_name}:{port}/console), and go to agileDomain > Environment > Servers, and from Summary of Servers > Control tab, select one of the managed server, and select Shutdown
- Launch browser, and access to Web Client using web proxy URL: http://{proxy_server}.{domain_name}/Agile/PLMServet
- Web Client login screen shows up, and user can log into Web Client.
- Login to WebLogic admin console (http://{admin_server}.{domain_name}:{port}/console), and go to agileDomain > Environment > Servers, and from Summary of Servers > Control tab, select the managed server which is stopped, and select Start
- Enable SSL to WebLogic by referring to "Agile Product Lifecycle Management Security Guide" Chapter "Configuring SSL".
This document is available from Agile Documentation Site under "Agile PLM 9 Documentation", click the link on HTML of the desired version of Product Lifecycle Management Documentation Library to find the document. - Enable SSL to Apache HTTP Server by editing httpd-ssl.conf file.
- Launch browser, and access to Web Client using SSL enabled web proxy URL: https://{proxy_server}.{domain_name}/Agile/PLMServet
- Web Client login screen shows up, and user can log into Web Client.
- Login to WebLogic admin console (http://{admin_server}.{domain_name}:{port}/console), and go to agileDomain > Environment > Servers, and from Summary of Servers > Control tab, select one of the managed server, and select Shutdown
- Now access to Web Client using SSL enabled web proxy URL: https://{proxy_server}.{domain_name}/Agile/PLMServet
- Gets error "Service unavailable" in the browser.
Changes
Enabled SSL on both WebLogic and Apache
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |