Starting Apache adapcctl.sh : exiting with status 204 Error and Unable to initialize SSL environment, nzos call nzosSetCipherSuite returned 28884
(Doc ID 2848088.1)
Last updated on OCTOBER 02, 2024
Applies to:
Oracle E-Business Suite Technology Stack - Version 12.2 to 12.2.10 [Release 12.2]Information in this document applies to any platform.
Symptoms
On : 12.2.x version, Weblogic Server
When attempting to start apache using adapcctl.sh
the following error occurs.
ERROR from /u01/xxx/fs1/inst/apps/SID_Hostname/logs/appl/admin/log/adapcctl.txt
-----------------------
ERROR From /u01/xxx/fs1/FMW_Home/webtier/instances/EBS_web_xxx_OHS1/diagnostics/logs/OHS/EBS_web_xxx/EBS_web_xxx.log
-----------------------
[OHS] [WARNING:32] [] [core.c] [host_id: xxxx] [host_addr: <IP Address>] [pid: 30002] [tid: 139717396252544] [user: <User>] [VirtualHost: Host:0] Init: (Host:443) SSLv3 is an insecure protocol. Please consider using TLS instead of SSLv3.
[2022-02-04T15:29:15.0570+08:00] [OHS] [WARNING:32] [] [core.c] [host_id: xxxx] [host_addr: <IP Address>] [pid: 30002] [tid: 139717396252544] [user: <User>] [VirtualHost: Host:10011] Init: (Host:10011) SSLv3 is an insecure protocol. Please consider using TLS instead of SSLv3.
[2022-02-04T15:29:15.0571+08:00] [OHS] [ERROR:32] [] [core.c] [host_id: xxxx] [host_addr: <IP Address>] [pid: 30002] [tid: 139717396252544] [user: <User>] [VirtualHost: Host:10011] Init: (Host:10011) Unable to initialize SSL environment, nzos call nzosSetCipherSuite returned 28884
[2022-02-04T15:29:15.0572+08:00] [OHS] [ERROR:32] [] [core.c] [host_id: xxxx] [host_addr: <IP Address>] [pid: 30002] [tid: 139717396252544] [user: <User>] [VirtualHost: Host:10011] NZ Library Error: Unknown error
BUSINESS IMPACT
-----------------------
The issue has the following business impact:
Due to this issue, users cannot login into instance
Changes
As per TLS document both the ciphers are excluded
SSLCipherSuite HIGH:MEDIUM:!aNULL:!RC4:!3DES:!SEED:!IDEA:!CAMELLIA:+HIGH:+MEDIUM
- 2017-06-02Updated SSLCipherSuite to exclude 3DES.
- admin.conf will not have RC4 or 3DES
- SSLCipherSuite TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
| Symptoms |
| Changes |
| Cause |
| Solution |
| References |