Different ways to take thread dumps in WebLogic Server

We can find out the reason behind application slowness by analyzing the Thread Dump in Java world. Thread dumps are also very useful to analyze and troubleshoot performance related issues such as server hang, deadlocks, slow running, idle or stuck applications, slow database interactions etc.

The thread dump is a snapshot of exactly what’s executing at a moment in time. (more…)

Weak Ciphers in Weblogic Application Server

In cryptography, a cipher is an algorithm for performing encryption or decryption i.e a series of well-defined steps that can be followed as a procedure. In SSL cipher suits are responsible for encryption.

To configure SSL in Weblogic follow this post

In Weblogic Application Server by default following ciphers are supported

Cipher Suite : TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA
Symmetric Key Strength (Bits): 168

Cipher Suite : TLS_DHE_RSA_WITH_DES_CBC_SHA
Symmetric Key Strength (Bits): 56

Cipher Suite : TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_DH_anon_WITH_3DES_EDE_CBC_SHA
Symmetric Key Strength (Bits): 168

Cipher Suite : TLS_DH_anon_WITH_RC4_128_MD5
Symmetric Key Strength (Bits): 128

Cipher Suite: TLS_DH_anon_WITH_DES_CBC_SHA
Symmetric Key Strength (Bits): 56

Cipher Suite : TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_DHE_RSA_EXPORT_WITH_DES_40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_DH_anon_EXPORT_WITH_DES_40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_RSA_WITH_RC4_128_SHA
Symmetric Key Strength (Bits): 128

Cipher Suite : TLS_RSA_WITH_RC4_128_MD5
Symmetric Key Strength (Bits): 128

Cipher Suite : TLS_RSA_WITH_DES_CBC_SHA
Symmetric Key Strength (Bits): 56

Cipher Suite : TLS_RSA_EXPORT_WITH_RC4_40_MD5
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_RSA_EXPORT_WITH_DES_40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
Symmetric Key Strength (Bits): 40

Cipher Suite : TLS_RSA_WITH_3DES_EDE_CBC_SHA
Symmetric Key Strength (Bits): 168

Cipher Suite : TLS_RSA_WITH_NULL_SHA
Symmetric Key Strength (Bits): 0

Cipher Suite : TLS_RSA_WITH_NULL_MD5
Symmetric Key Strength (Bits): 0

Cipher Suite : TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
Symmetric Key Strength (Bits): 56

Cipher Suite : TLS_RSA_EXPORT1024_WITH_RC4_56_SHA
Symmetric Key Strength (Bits): 56

Cipher Suite : TLS_RSA_WITH_AES_128_CBC_SHA
Symmetric Key Strength (Bits): 128

Cipher Suite : TLS_RSA_WITH_AES_256_CBC_SHA
Symmetric Key Strength (Bits): 256

In the above list there are some cipher which are vulnerable. To close this ciphers we have do following:
Step 1 Stop weblogic Admin / Managed Server

Step 2 Go to Domain Home
For eg
cd /app/Oracle/Middleware/user_projects/domains/vidyadhar/

Step 3 Now we have to modify config file.

cd /app/Oracle/Middleware/user_projects/domains/vidyadhar/config

First we will take a backup of existing config.xml file

cp config.xml config.xml.orig

Step 4 To disable weak ciphers you have to add following under ssl tag in config.xml

<ciphersuite>TLS_RSA_WITH_RC4_128_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_RC4_128_MD5</ciphersuite>

See the screenshot for better understanding

In my scenario I am having only single Admin Server which is running on https 7002 port. If you have managed server which is running on https port then you have to add above values in the SSL tag of managed server also.

Step 5 Now do the start the weblogic services.

You can test the cipher suites using SSLDigger

Installing Websphere Application Server 7 on Ubuntu

Officially IBM do not support installing Websphere Application Server (WAS) on Ubuntu. There are so many user like me who just want to evaluate the product by installing it on their desktop OS.

This is a how-to for installing IBM Websphere Application Server 7 on Ubuntu 11.10 (more…)

How to Install LibreOffice 3.5 RC 1 on Ubuntu

LibreOffice is the free power-packed Open Source personal productivity suite for Windows, Mac and Linux, that gives you six feature-rich applications for all your document production and data processing needs: Writer, Calc, Impress, Draw, Math and Base. Support and documentation is free from our large, dedicated community of users, contributors and developers.

Recently LibreOffice team has released LibreOffice 3.5 RC 1. In this tutorial we will see how to install LibreOffice 3.5 RC 1 on Ubuntu (more…)

Install / Upgrade Kernel 3.2 in Ubuntu

In this guide we will upgrade the Ubuntu kernel version. By default Ubuntu 11.10 ships with 3.0 Kernel version. We will install the new kernel 3.2 over existing 3.0 (more…)

Page 1 of 24123456»1020...Last »
rss twitter facbook

Categories

Archives