"Security:090476]Invalid/unknown SSL header was received from peer localhost during SSL handshake."

“Security:090476]Invalid/unknown SSL header was received from peer localhost during SSL handshake.”

I have configured Node Manager for Managed Servers for WebLogic Server 10.3.6. When I start the node manager, I am seeing the below exception in node manager log.

javax.net.ssl.SSLHandshakeException: [Security:090476]Invalid/unknown SSL header was received from peer ozone.oracle.com – 192.168.174.128 during SSL handshake.
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)
at com.certicom.tls.record.ReadHandler.fireAlert(Unknown Source)
at com.certicom.tls.record.ReadHandler.getProtocolVersion(Unknown Source)
at com.certicom.tls.record.ReadHandler.checkVersion(Unknown Source)
at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)
at com.certicom.tls.record.ReadHandler.read(Unknown Source)
at com.certicom.io.InputSSLIOStreamWrapper.read(Unknown Source)
at sun.nio.cs.StreamDecoder.readBytes(StreamDecoder.java:264)
at sun.nio.cs.StreamDecoder.implRead(StreamDecoder.java:306)
at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:158)
at java.io.InputStreamReader.read(InputStreamReader.java:167)
at java.io.BufferedReader.fill(BufferedReader.java:136)
at java.io.BufferedReader.readLine(BufferedReader.java:299)
at java.io.BufferedReader.readLine(BufferedReader.java:362)
at weblogic.nodemanager.server.Handler.run(Handler.java:71)
at java.lang.Thread.run(Thread.java:662)

Resolution:

Edit the nodemanager.properties file located at $MW_HOME/wlserver_10.3/common/nodemanager for changing the SecureListener parameter value to false.

Start the Node Manager and make sure that machine status is reachable in WebLogic console as shown below.

About the Author Mahendra

I am engulfed in Oracle Identity & Access Management domain. I have expertise on providing the optimized solutions for user provisioning, web access management, Single Sign-On and federation capabilities etc., I am also well versed with complex integrations within Identity Management and other product domains. I have expertise on building demos and implementation experience on products Oracle Access Manager, Oracle Adaptive Access Manager, Oracle Entitlement Server, Oracle Virtual Directory, Oracle Internet Directory etc., Look @ my blog: http://talkidentity.blogspot.com

Leave a Comment:

12 comments

Sunil says July 14, 2012

Hi Mahi,

Thanks a lot for your quick and positive helping response …
I need your help to move ahead.
I have configured and tested the SSO application. with writing sample application.
Now I want to configure myappportal Login page as
Form base Authentication. Once user is logged in successful then he will allow to navigate the portal pages.
I am using Oracle 11g stack for Webcenter & Identity Management.
Can you please help me to integrate the Portal application with OAM as part of SSO? Or do I need to configure the Portal application as normal application with defining Protected & Public policies?
Or do I need to follow below URL to enable SSO with Webcenter?
http://onlineappsdba.com/index.php/2012/02/15/integrate-e-business-suite-with-oracle-webcenter-11115-using-oid-and-oam-11g-as-sso/

Please Reply ..

Thanks,
Sunil

Sunil says July 14, 2012

Hi,

I have one more query about WNA with OAM 11g.
In my environment I have configured DIP to synchronize AD data with OID and SSO Authntication scheme is configured with OID.
I would like configure Windows Native Authentication with SSO configuration. Is it possible to do it?

Thanks,
Sunil

Mahendra says July 15, 2012

@Sunil,

Sorry, I don’t understand your question.

1. Do you want to configure your custom login page for form authentication?
2. DO you want to do SSO between custom application and WebCenter application?
3. What is the portal application you are talking about ?

If you want to do integrate OAM with WebCenter then you will need to follow http://docs.oracle.com/cd/E21764_01/core.1111/e12037/oam.htm#CHDFIFCI

-Mahendra.

Mahendra says July 15, 2012

@Sunil,

I think for WNA with OAM 11g, you will need to have AD used as default store. However, I believe your setup is supported for WNA. Please test the integration and let me know how it goes.

-Mahendra.

Sunil says July 16, 2012

Hi Mahi,
Thanks for your quick reply. I am able to configure Webcenter Portal with OAM and my next step will be configuring WNA for my application.

I have one doubt- you said AD should be the default datastore to configure WNA; that means it will not work with OID? Because I have setup of OID-AD synchronization using DIP and want to configure WNA with OID datastore. Will it work or no?

Many Thanks..
Impressed with your quick and positive response.

Thanks,
Sunil

Mahendra says July 17, 2012

@Sunil,

I have not done the WNA in OAM 11g yet. So I am not exactly sure whether to configure AD or OID as primary store. Read this http://onlineappsdba.com/index.php/2012/05/01/oam-11g-integration-with-microsoft-windows-active-directory-wna-iwa-kerberos-for-zero-sign-on/

Hope this helps.

-Mahendra.

Sunil says July 17, 2012

Thanks for your reply.

One more doubt.. If I have configured SSO for Webcenter Portal application and now want to redirect user to another J2EE Web application from Portal page.
Please find below the scenario
1. User authenticated using FORM base authentication while accessing portal application.
2. Now user wants to access another application (i.e. mywebapp) which has reference on Portal page.
3. Web application work on Spring security and now i want to take the third application under SSO umbreala.
4. Web application provider ask me to pass few HTTP headers to his application.

Can you please tell me .. how this can be achieved? How do I pass HTTP header to his application?

Thanks in advance. .
Sunil

Mahendra says July 18, 2012

@Sunil,

OAM 11g can pass header variables in authorization actions. So specify the attributes and header variable names in authorization policies actions.

Hope this helps.

-Mahendra

hgh supplements available says February 23, 2015

Attractive portion of content. I just stumbled upon your
site and in accession capital to claim that I get actually enjoyed account
your blog posts. Anyway I will be subscribing for your augment or even I success you get
right of entry to persistently rapidly.

Vivek says December 16, 2015

I am also getting this error please help me about this . weblogic coming into running state but after giving this error.

saurabh says July 14, 2016

Very Useful..!! Thanks for this blog ,it helped me solving my nodemanager issue.

Dima R says November 4, 2016

What happens, if we cannot (are not allowed to) set SecureListener parameter value to false. ? Our applications require SSL enabled ?

Add Your Reply