What’s New in OFMW 12c

WebLogic Server 12c (12.2.1) – https://docs.oracle.com/middleware/1221/wls/NOTES/whatsnew.htm

OFMW Configuring Elasticity in Dynamic Clusters for Oracle WebLogic Server – https://docs.oracle.com/middleware/1221/wls/ELAST/title.htm

OFMW Administering Node Manager for Oracle WebLogic Server – https://docs.oracle.com/middleware/1221/wls/NODEM/intro.htm

Understanding Oracle Fusion Middleware Concepts – https://docs.oracle.com/middleware/1221/core/ASCON/toc.htm

TSL error when calling a WebService over ssl/https

In one of my projects recently, even after importing the correct ssl certificates in the keystore (cacerts and DemoTrust.jks) on the weblogic server, when accessing the webservice over https gave an error.

javax.xml.ws.WebServiceException: javax.net.ssl.SSLHandshakeException: [Security:090497]HANDSHAKE_FAILURE alert received from example.com - 172.16.250.58. Check both sides of the SSL configuration for mismatches in supported ciphers, supported protocol versions, trusted CAs, and hostname verification settings.

OAM Error Codes

Below is the lists all the error message codes sent by the OAM Server and the corresponding primary error message. If a primary error message has been customized for an application, the application must map this custom message to the corresponding standard error message maintained by OAM Server. There is no difference between OAM-1 and OAM-2 error codes.

Application configuration for OAM Integration

When you use the Oracle Access Manager Identity Asserter, all web.xml files in the application EAR file must specify CLIENT-CERT in the element auth-method for the appropriate realm.

You can add comma separated values here when you want applications accessed directly over the WebLogic Server host:port to be authenticated by the container. For instance:

<auth-method>CLIENT-CERT,FORM</auth-method>.

The auth-method can use BASIC, FORM, or CLIENT-CERT values. While these look like similar values in Oracle Access Manager, the auth-method specified in web.xml files are used by Oracle WebLogic Server (not Oracle Access Manager).