Showing posts with label TLS. Show all posts
Showing posts with label TLS. Show all posts

Thursday, March 3, 2016

liboraInstaller.so which might have disabled stack guard

Encounter below error while applying patch on Oracle EBS 12.1.3 10.1.3 ($IAS_ORACLE_HOME)



System Command: /u01/EP1/apps/tech_st/10.1.2/jdk/jre/bin/java    -Doracle.installer.invPtrLoc=/etc/oraInst.loc -Dopatch.retry=10 -Dopatch.delay=30  -classpath "/u01/EP1/apps/tech_st/10.1.2/oui/jlib/OraInstaller.jar:/u01/EP1/apps/tech_st/10.1.2/oui/jlib/srvm.jar:/u01/EP1/apps/tech_st/10.1.2/OPatch/jlib/opatch.jar:/u01/EP1/apps/tech_st/10.1.2/oui/jlib/xmlparserv2.jar:/u01/EP1/apps/tech_st/10.1.2/oui/jlib/share.jar" opatch/CheckConflict "/u01/EP1/apps/tech_st/10.1.2/oui" "/u01/EP1/apps/tech_st/10.1.2" opatch.pl 1.0.0.0.64 16271876 "16271876 " "/u01/patch/tls_patches/16271876/etc/config/actions" "/u01/patch/tls_patches/16271876/etc/config/inventory"
Result :

Java HotSpot(TM) 64-Bit Server VM warning: You have loaded library /u01/EP1/apps/tech_st/10.1.2/oui/lib/linux/liboraInstaller.so which might have disabled stack guard. The VM will try to fix the stack guard now.
It's highly recommended that you fix the library with 'execstack -c <libfile>', or link it with '-z noexecstack'.
java.lang.UnsatisfiedLinkError: /u01/EP1/apps/tech_st/10.1.2/oui/lib/linux/liboraInstaller.so: /u01/EP1/apps/tech_st/10.1.2/oui/lib/linux/liboraInstaller.so: wrong ELF class: ELFCLASS32 (Possible cause: architecture word width mismatch)
        at java.lang.ClassLoader$NativeLibrary.load(Native Method)
        at java.lang.ClassLoader.loadLibrary1(ClassLoader.java:1968)
        at java.lang.ClassLoader.loadLibrary0(ClassLoader.java:1893)
        at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1854)
        at java.lang.Runtime.load0(Runtime.java:795)
        at java.lang.System.load(System.java:1062)
        at oracle.sysman.oii.oiip.osd.unix.OiipuUnixOps.loadNativeLib(OiipuUnixOps.java:372)


Solution:
To implement the solution please execute the following steps:
1. Replace the 64 bit java by the 32 bit version of java.
2. Re-test the issue.

Tuesday, February 23, 2016

Invalid command 'SLCipherSuite'

Unable to start Oracle EBS 12.1.3 after TLS Upgrade

Issue: found below issue in httpd.conf file

/u01/EP1/inst/apps/EP1_example/ora/10.1.3/Apache/Apache/bin/apachectl startssl: execing httpd
Syntax error on line 124 of /u01/EP1/inst/apps/EP1_example/ora/10.1.3/Apache/Apache/conf/ssl.conf:
Invalid command 'SLCipherSuite', perhaps mis-spelled or defined by a module not included in the server configuration


Solution:
edit template file and change the below value 

$FND_TOP/admin/template/custom/ssl_conf_1013.tmp

#SLCipherSuite ECDHE:!NULL:!3DES:!RC4:+aRSA:AES128-SHA
SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP

Friday, January 1, 2016

Cannot load mod_ssl.so into server

Oracle EBS, Unable to start OHS after TLS Implementation


Error from Logfile:

/u01/EP1/inst/apps/EP1_example/ora/10.1.3/Apache/Apache/bin/apachectl startssl: execing httpd
Syntax error on line 270 of /u01/EP1/inst/apps/EP1_example/ora/10.1.3/Apache/Apache/conf/httpd.conf:
Cannot load /u01/EP1/apps/tech_st/10.1.3/Apache/Apache/modules/mod_ssl.so into server: /u01/EP1/apps/tech_st/10.1.3/Apache/Apache/modules/mod_ssl.so: cannot open shared object file: No such file or directory


Finding:
Check issue and notice that one module was loaded incorrectly in httpd.conf file .

$INST_TOP/ora/10.1.3/Apache/Apache/conf/httpd.conf


Solution:
Edit httpd.conf file and implement this change.


$INST_TOP/ora/10.1.3/Apache/Apache/conf/httpd.conf

From:
LoadModule ssl_module modules/mod_ssl.so

to:
LoadModule ssl_module   libexec/mod_ssl.so

Azure AKS - Diag Logs - KQL

AzureDiagnostics | where Category == "kube-audit" | summarize requests = count() by bin(TimeGenerated, 5m), userAgent_s | orde...