Website:
admin has written 229 articles so far, you can find them below.
We can find out the reason behind application slowness by analyzing the Thread Dump in Java world. Thread dumps are also very useful to analyze and troubleshoot performance related issues such as server hang, deadlocks, slow running, idle or stuck applications, slow database interactions etc.
The thread dump is a snapshot of exactly what’s executing at a moment in time. (more…)
In cryptography, a cipher is an algorithm for performing encryption or decryption i.e a series of well-defined steps that can be followed as a procedure. In SSL cipher suits are responsible for encryption.
To configure SSL in Weblogic follow this post
In Weblogic Application Server by default following ciphers are supported
Cipher Suite : TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA Symmetric Key Strength (Bits): 168 Cipher Suite : TLS_DHE_RSA_WITH_DES_CBC_SHA Symmetric Key Strength (Bits): 56 Cipher Suite : TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_DH_anon_WITH_3DES_EDE_CBC_SHA Symmetric Key Strength (Bits): 168 Cipher Suite : TLS_DH_anon_WITH_RC4_128_MD5 Symmetric Key Strength (Bits): 128 Cipher Suite: TLS_DH_anon_WITH_DES_CBC_SHA Symmetric Key Strength (Bits): 56 Cipher Suite : TLS_DH_anon_EXPORT_WITH_RC4_40_MD5 Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_DHE_RSA_EXPORT_WITH_DES_40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_DH_anon_EXPORT_WITH_DES_40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_RSA_WITH_RC4_128_SHA Symmetric Key Strength (Bits): 128 Cipher Suite : TLS_RSA_WITH_RC4_128_MD5 Symmetric Key Strength (Bits): 128 Cipher Suite : TLS_RSA_WITH_DES_CBC_SHA Symmetric Key Strength (Bits): 56 Cipher Suite : TLS_RSA_EXPORT_WITH_RC4_40_MD5 Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_RSA_EXPORT_WITH_DES_40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_RSA_EXPORT_WITH_DES40_CBC_SHA Symmetric Key Strength (Bits): 40 Cipher Suite : TLS_RSA_WITH_3DES_EDE_CBC_SHA Symmetric Key Strength (Bits): 168 Cipher Suite : TLS_RSA_WITH_NULL_SHA Symmetric Key Strength (Bits): 0 Cipher Suite : TLS_RSA_WITH_NULL_MD5 Symmetric Key Strength (Bits): 0 Cipher Suite : TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA Symmetric Key Strength (Bits): 56 Cipher Suite : TLS_RSA_EXPORT1024_WITH_RC4_56_SHA Symmetric Key Strength (Bits): 56 Cipher Suite : TLS_RSA_WITH_AES_128_CBC_SHA Symmetric Key Strength (Bits): 128 Cipher Suite : TLS_RSA_WITH_AES_256_CBC_SHA Symmetric Key Strength (Bits): 256
In the above list there are some cipher which are vulnerable. To close this ciphers we have do following:
Step 1 Stop weblogic Admin / Managed Server
Step 2 Go to Domain Home
For eg
cd /app/Oracle/Middleware/user_projects/domains/vidyadhar/
Step 3 Now we have to modify config file.
cd /app/Oracle/Middleware/user_projects/domains/vidyadhar/config
First we will take a backup of existing config.xml file
cp config.xml config.xml.orig
Step 4 To disable weak ciphers you have to add following under ssl tag in config.xml
<ciphersuite>TLS_RSA_WITH_RC4_128_SHA</ciphersuite> <ciphersuite>TLS_RSA_WITH_RC4_128_MD5</ciphersuite>
See the screenshot for better understanding
In my scenario I am having only single Admin Server which is running on https 7002 port. If you have managed server which is running on https port then you have to add above values in the SSL tag of managed server also.
Step 5 Now do the start the weblogic services.
You can test the cipher suites using SSLDigger
Today one of our client has forgot his Application Server Console password. We have used following method to reset his password.
Please Note : This method also work on following
Step 1 First shutdown the application server control by running emctl command
For 10.1.2
$ORACLE_HOME/bin/emctl stop iasconsole
On 10.1.3 you need to stop the OC4J instances before performing the password change:
$ORACLE_HOME/opmn/bin/opmnctl stopproc ias-component=OC4J
Step 2 Locate and backup the jazn-data.xml (10.1.2) or system-jazn-data.xml (10.1.3) file:
On 10.1.2 File Location would be
$ORACLE_HOME/sysman/j2ee/config/jazn-data.xml
On 10.1.3 File Location would be
$ORACLE_HOME/j2ee/home/config/system-jazn-data.xml
Step 3 Edit the jazn-data.xml / system-jazn-data.xml file depending on the Application Server version in a text editor and locate the line that defines the credentials property for the ias_admin user:
On 10.1.2
The following example shows the section of jazn-data.xml with the encrypted credentials entry in boldface type:
<realm> <name>enterprise-manager</name> <users> <user> <name>ias_admin</name> <credentials>rJqp85BkhFwAyw9ddl0PnFlUBVaWzbfT</credentials> </user>
On 10.1.3
The following example shows the section of system-jazn-data.xml with the encrypted credentials entry in boldface type:
<realm> <name>jazn.com</name> <users> <user> <name>oc4jadmin</name> <display-name>OC4J Administrator</display-name> <description>OC4J Administrator</description> <credentials>{903}4L50lHJWIFGwLgHXTub7eYK9e0AnWLUH</credentials> </user>
Step 4 Replace the existing encrypted password with the new password
Be sure to prefix the password with an exclamation point (!). For example:
Step 5 Start the Application Server Console:
For 10.1.2 do following
$ORACLE_HOME/bin/emctl start iasconsole
After the restart, the Application Server Control will be using your new Administrator (ias_admin) password, which will be stored in encrypted format within the jazn-data.xml file.
For 10.1.3 do following
$ORACLE_HOME/opmn/bin/opmnctl startproc ias-component=OC4J
After the restart, the Application Server Control will be using your new Administrator (oc4jadmin) password, which will be stored in encrypted format within the system-jazn-data.xml file.
Step 6 Login to the Application Server Console and authenticate with the ias_admin user (10.1.2) or the oc4jadmin user (10.1.3) and the new password.
LibreOffice is the free power-packed Open Source personal productivity suite for Windows, Mac and Linux, that gives you six feature-rich applications for all your document production and data processing needs: Writer, Calc, Impress, Draw, Math and Base. Support and documentation is free from our large, dedicated community of users, contributors and developers.
Recently LibreOffice team has released LibreOffice 3.5 RC 1. In this tutorial we will see how to install LibreOffice 3.5 RC 1 on Ubuntu (more…)
