Posts

Apache Disable Outdated SSL/TLS versions

Following configurations will get you high security cipher SSL configurations in Apache by updating the ssl config file. ##To disable TLS 1.0/1.1 and SSL 2.0/3.0 SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ## To enable only high degree of protection SSLCipherSuite HIGH:!aNULL:!MD5:!3DES ## To use server cipher preferences instead of client preferences SSLHonorCipherOrder on

Weblogic 12c & Apache 2.4 troubleshooting

Error -   libonssys.so: cannot open shared object file : httpd: Syntax error on line 355 of /etc/httpd/conf/httpd.conf: Syntax error on line 1 of /data/apps/apache2/conf.d/vhost.conf: Cannot load /etc/httpd/modules/mod_wl_24.so into server: libonssys.so: cannot open shared object file: No such file or directory Solution: 1) Copy all supported  Download Oracle WebLogic Web Server Plug-Ins 12c from Oracle website : http://www.oracle.com/technetwork/middleware/webtier/downloads/index-jsp-156711.html Extract the downloaded archive and find (correct file according to your architecture) mod_wl_24.so (This is for Apache2.4.x) & libonssys.so & libonsssl.so & libdms2.so copy into /etc/httpd/modules/ folder. 2) Set the  LD_LIBRARY_PATH inside the  /etc/sysconfig/httpd file.  echo $ LD_LIBRARY_PATH first and copy paste the same in httpd file along with  /etc/httpd/modules location. Example in my case: File:  /etc/syscon...

Set Local_Listener value to localhost in Oracle DB

Steps: SQL> alter system set local_listener = 'localhost' scope=memory; SQL> alter system register; SQL> show parameter local_list NAME TYPE VALUE ------------------------------------ ----------- ------------------------------ local_listener string (ADDRESS = (PROTOCOL=TCP)(HOST =localhost)(PORT=1521)) 

Enabling WL-Proxy-SSL HTTP header in WebLogic

Scenario : Weblogic server will be always behind the LoadBalancer or Apache layer. Most of the time the SSL's will be either offloaded in LoadBalancer or Apache layer.  To construct applicaitons URL's with the right protocol will be a challenge while using weblogic as application server.  To achieve this scenario we have to enable  WL-Proxy-SSL and WebLogic Plug-In Enabled. Solution: - Update the LoadBalancer configurations/iRules to set the RequestHeader WL-Proxy-SSL to  true . - Follow the below steps to set the WebLogic 'Plugin Enabled' flag to Yes. (Following steps are based on the weblogic version 12.1.2)    - Login into weblogic console    - Click on Lock & Edit button     - Click on the domain name    - Under Configurations tab go to "Web Applications" sub tab    - Select the check box "WebLogic Plugin Enabled" and click "save" button    - Finally click on "Activate C...

Suppress Server Header in JBoss EAP 6

Modify or suppress "Server" header and "X-Powered-By" header in JBoss EAP 6.x: Solution: Following  section to be added to disable X-powered-by header value in standalone.xml file <subsystem xmlns="urn:jboss:domain:web:1.1" default-virtual-server="default-host" native="false">             <configuration>                 <jsp-configuration x-powered-by="false"/>             </configuration>        ...        ... </subsystem> Modify Server header value using system property org.apache.coyote.http11.Http11Protocol.SERVER in standalone.xml file <system-properties>      <property name="org.apache.coyote.http11.Http11Protocol.SERVER" value="foo"/> </system-properties>

ScenarioManager & WorkFlowManager startup errors

While starting weblogic server, following exceptions thrown with " unknown protocol: dynamosystemresource " while starting ScenarioManger : Error stack trace: **** info       Mon Jul 31 09:22:43 EDT 2017    1501507363023   /atg/scenario/XrefParserManager XrefParserManager startup complete **** Error      Mon Jul 31 09:22:43 EDT 2017    1501507363708   /       Unable to start service "/atg/scenario/ScenarioManager": atg.nucleus.ServiceException: The configuration file XMLFile(/atg/scenario/scenarioManager.xml) could not be read: java.net.MalformedURLException: unknown protocol: dynamosystemresource **** Error      Mon Jul 31 09:22:44 EDT 2017    1501507364054   /       Unable to set configured property "/com/tap/commerce/pricing/ShippingChargeManager.defaultShippingOptions" atg.nucleus.ConfigurationException: Unable to resolve component /sparkred/paypal/PayPa...

GIT Useful tips

GIT Commands: Renaming Branch: ** Rename branch locally to the new name      git branch -m old_branch_name new_branch_name ** Delete the old branch on remote. Where <remote> is like origin      git push <remote> :old_name      Eg: git push origin :old_branch ** Push the new branch to remote              git push --set-upstream <remote> new_name     Eg: git push --set-upstream origin new_branch -------------------------------------------------------------------------------------------------------------------- GIT Push issues: Symptoms : While pushing the file to GIT repository, facing issues like "insufficient permissions" while using  "git push" command with below errors. Counting objects: 3, done. Delta compression using up to 8 threads. Compressing objects: 100% (2/2), done. Writing objects: 100% (3/3), 312 bytes | 0 bytes/s, done. Total...