Translate

2018년 8월 24일 금요일

[WebLogic][Error] 어드민서버에서 매니지드서버 기동 시 FAILED_NOT_RESTARTABLE 상태 오류










실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6



증상
1004lucifer
노드매니저 구성 후 서버 기동 시 아래와 같이 기동이 실패를 한다.



로그는 아래와 같다.

# 해당 매니지드서버(인스턴스서버) out로그
[weblogic@ae2793daea03 weblogic1036]$ cat /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out
<Aug 24, 2018 2:01:38 AM> <INFO> <NodeManager> <Server output log file is '/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out'>
Exception in thread "main" java.lang.NoClassDefFoundError: weblogic/Server
Caused by: java.lang.ClassNotFoundException: weblogic.Server
        at java.net.URLClassLoader$1.run(URLClassLoader.java:202)
        at java.security.AccessController.doPrivileged(Native Method)
        at java.net.URLClassLoader.findClass(URLClassLoader.java:190)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:306)
        at sun.misc.Launcher$AppClassLoader.loadClass(Launcher.java:301)
        at java.lang.ClassLoader.loadClass(ClassLoader.java:247)
Could not find the main class: weblogic.Server.  Program will exit.
<Aug 24, 2018 2:01:39 AM> <FINEST> <NodeManager> <Waiting for the process to die: 2334>
<Aug 24, 2018 2:01:39 AM> <INFO> <NodeManager> <Server failed during startup so will not be restarted>
<Aug 24, 2018 2:01:39 AM> <FINEST> <NodeManager> <runMonitor returned, setting finished=true and notifying waiters>
[weblogic@ae2793daea03 weblogic1036]$

1004lucifer

# 기동버튼 클릭 시 노드매니저 로그
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Boot identity properties saved to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/boot.properties">
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Boot identity properties saved to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/boot.properties"
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Startup configuration properties saved to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/startup.properties">
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Startup configuration properties saved to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/startup.properties"
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Rotated server output log to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out00018">
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.LogFileRotationUtil log
INFO: Rotated server output log to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out00018"
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Server error log also redirected to server log>
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.LogFileRotationUtil log
INFO: Server error log also redirected to server log
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Starting WebLogic server with command line: /app/jdk1.6.0_45/bin/java -Dweblogic.Name=ManagedServer01 -Dbea.home=/app/weblogic1036/wlserver_10.3/common/nodemanager -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.management.server=http://172.17.0.2:7001 -Djava.library.path=/app/jdk1.6.0_45/jre/lib/amd64/server:/app/jdk1.6.0_45/jre/lib/amd64:/app/jdk1.6.0_45/jre/../lib/amd64:/app/weblogic1036/patch_wls1036/profiles/default/native:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64/oci920_8:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib -Djava.class.path=/app/weblogic1036/utils/utils.jar -Dweblogic.system.BootIdentityFile=/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/boot.properties -Dweblogic.nodemanager.ServiceEnabled=true -Dweblogic.security.SSL.ignoreHostnameVerification=false -Dweblogic.ReverseDNSAllowed=false -Xms256m -Xmx512m -XX:PermSize=128m -XX:MaxPermSize=256m weblogic.Server >
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Starting WebLogic server with command line: /app/jdk1.6.0_45/bin/java -Dweblogic.Name=ManagedServer01 -Dbea.home=/app/weblogic1036/wlserver_10.3/common/nodemanager -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.management.server=http://172.17.0.2:7001 -Djava.library.path=/app/jdk1.6.0_45/jre/lib/amd64/server:/app/jdk1.6.0_45/jre/lib/amd64:/app/jdk1.6.0_45/jre/../lib/amd64:/app/weblogic1036/patch_wls1036/profiles/default/native:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64/oci920_8:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib -Djava.class.path=/app/weblogic1036/utils/utils.jar -Dweblogic.system.BootIdentityFile=/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/boot.properties -Dweblogic.nodemanager.ServiceEnabled=true -Dweblogic.security.SSL.ignoreHostnameVerification=false -Dweblogic.ReverseDNSAllowed=false -Xms256m -Xmx512m -XX:PermSize=128m -XX:MaxPermSize=256m weblogic.Server
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Working directory is '/app/weblogic1036/domains/1004lucifer_domain'>
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Working directory is '/app/weblogic1036/domains/1004lucifer_domain'
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Rotated server output log to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out00019">
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.LogFileRotationUtil log
INFO: Rotated server output log to "/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out00019"
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Server error log also redirected to server log>
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.LogFileRotationUtil log
INFO: Server error log also redirected to server log
<Aug 24, 2018 2:01:38 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Server output log file is '/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out'>
Aug 24, 2018 2:01:38 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Server output log file is '/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out'
<Aug 24, 2018 2:01:39 AM> <INFO> <1004lucifer_domain> <ManagedServer01> <Server failed during startup so will not be restarted>
Aug 24, 2018 2:01:39 AM weblogic.nodemanager.server.AbstractServerManager log
INFO: Server failed during startup so will not be restarted
<Aug 24, 2018 2:01:39 AM> <WARNING> <Exception while starting server 'ManagedServer01'>
java.io.IOException: Server failed to start up. See server output log for more details.
        at weblogic.nodemanager.server.AbstractServerManager.start(AbstractServerManager.java:196)
        at weblogic.nodemanager.server.ServerManager.start(ServerManager.java:23)
        at weblogic.nodemanager.server.Handler.handleStart(Handler.java:609)
        at weblogic.nodemanager.server.Handler.handleCommand(Handler.java:121)
        at weblogic.nodemanager.server.Handler.run(Handler.java:71)
        at java.lang.Thread.run(Thread.java:662)

Aug 24, 2018 2:01:39 AM weblogic.nodemanager.server.Handler handleStart
WARNING: Exception while starting server 'ManagedServer01'
java.io.IOException: Server failed to start up. See server output log for more details.
        at weblogic.nodemanager.server.AbstractServerManager.start(AbstractServerManager.java:196)
        at weblogic.nodemanager.server.ServerManager.start(ServerManager.java:23)
        at weblogic.nodemanager.server.Handler.handleStart(Handler.java:609)
        at weblogic.nodemanager.server.Handler.handleCommand(Handler.java:121)
        at weblogic.nodemanager.server.Handler.run(Handler.java:71)
        at java.lang.Thread.run(Thread.java:662)








원인

매니지드서버설정에서 '구성-서버시작' 항목의 클래스경로 항목에 문자열 입력 시 기존 CLASSPATH 가 덮어씌워져 웹로직 구동시 필요한 weblogic.jar 파일이 CLASSPATH에 추가되지 않아 웹로직을 기동할 수 없다.







해경방법


 - 클래스경로에 $WL_HOME/server/lib/weblogic.jar 경로를 넣어준다.

PS.
 - CLASSPATH의 구분자는 리눅스는 콜론(:), 윈도우는 세미콜론(;)을 넣어줘야 한다. 리눅스에서 세미콜론을 넣게되면 기존과 똑같은 에러가 발생한다.






클래스경로 수정 후 다시 기동 시 정상적으로 기동 되는 것을 확인 할 수 있다.


[WebLogic][Error] 노드매니저로 서버 기동 후 발생한 PermGen OOME 에러










실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6



증상

노드매니저 구성 후 처음으로 매니지드서버를 기동했는데 웹페이지에서 계속 로딩중 표시만 나오며 Response 를 받아오지 못하고 있었다.
1004lucifer
로그를 보니 아래와 같이 PermGen space OOME(Out Of Memory Error) 가 발생을 했다.
단순 web.xml 파일과 index.jsp 파일 하나있는 소스인데 이게 발생을 할 수 있나 싶었는데..
PermGen 용량을 지정해주니 문제가 해결이 되었다.



# 실습환경 웹로직 관련 홈디렉토리 경로
# $BEA_HOME(웹로직 설치디렉토리): /app/weblogic1036/
[weblogic@ae2793daea03 bin]$ tail -f /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out
<Aug 23, 2018 11:43:47 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias 1004lucifer_key from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_key.jks.>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_cert.jks.>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 172.17.0.2:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 127.0.0.1:8006 for protocols iiops, t3s, ldaps, https.> 1004lucifer
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 172.17.0.2:8006 for protocols iiops, t3s, ldaps, https.>
<Aug 23, 2018 11:43:48 AM UTC> <Notice> <WebLogicServer> <BEA-000332> <Started WebLogic Managed Server "ManagedServer01" for domain "1004lucifer_domain" running in Development Mode>
<Aug 23, 2018 11:43:50 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Aug 23, 2018 11:43:50 AM UTC> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>
Exception in thread "Timer-1" java.lang.OutOfMemoryError: PermGen space
Exception in thread "ExecuteThread: '0' for queue: 'weblogic.socket.Muxer'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[ACTIVE] ExecuteThread: '0' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[STANDBY] ExecuteThread: '1' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "ExecuteThread: '2' for queue: 'weblogic.socket.Muxer'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[STANDBY] ExecuteThread: '3' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[STANDBY] ExecuteThread: '2' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "ExecuteThread: '1' for queue: 'weblogic.socket.Muxer'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[STANDBY] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space
Exception in thread "[STANDBY] ExecuteThread: '4' for queue: 'weblogic.kernel.Default (self-tuning)'" java.lang.OutOfMemoryError: PermGen space






조치방법
1004lucifer
'서버요약-서버선택' => '구성-서버시작'
위의 항목에서 인수에 아래와 같이 PermGen 크기를 지정해준다.
-XX:PermSize=128m -XX:MaxPermSize=256m






위와같이 지정 후 노드매니저를 통해 어드민서버에서 매니지드서버를 재기동하면 정상적으로 웹페이지가 보여진다.




2018년 8월 23일 목요일

[WebLogic][Admin Console] 서버 기동/중지 기능을 위한 노드매니저(Node Manager) 구성










실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6



해당 작업은 구성요소중에 노드매니저에 해당된다.





노드매니저(Node Manager)란?


 - 웹로직에서 제공하는 유틸리티 (웹로직의 시스템과 연계되는 관리자)
 - 어드민서버와 연동하여 매니지드서버에 기동/중지/재기동 명령을 전달가능





노드매니저 구성 시 Admin Console 에서 매니지드서버의 기동/중지를 컨트롤 할 수 있다.
노드매니저 구성없이 어드민서버에서 기동을 하려 할 시 아래와 같이 보여진다.
(v10.3.6 에서 중지기능은 노드매니저 구성없이 작동 확인)
1004lucifer
선택된 모든 서버는 현재 이 작업과 호환되지 않는 상태이거나 실행 중인 노드 관리자와 연관되어 있지 않습니다. 또는 요청된 작업을 수행할 권한이 없습니다. 작업이 수행되지 않습니다.





작업 순서는 아래와 같다.

1. 리눅스콘솔
  - 노드매니저 구성
2. 어드민서버
  - 시스템생성
  - 시스템에 관리서버(인스턴스서버) 추가
  - 관리서버 기동


1. 노드매니저 구성


# 실습환경 웹로직 관련 홈디렉토리 경로
# $BEA_HOME(웹로직 설치디렉토리): /app/weblogic1036/
# $WL_HOME(웹로직 구성요소 디렉토리): $BEA_HOME/wlserver_10.3/
# $NODEMGR_HOME(노드매니저 설정 디렉토리): $WL_HOME/common/nodemanager/
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$ pwd
/app/weblogic1036/wlserver_10.3
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# v12.1.1 이하 $NODEMGR_HOME 위치: $WL_HOME/common/nodemanager/
# v12.2.2 이상 $NODEMGR_HOME 위치: $DOMAIN_HOME/nodemanager/
# 노드매니저 스크립트 실행전 domains 파일 하나만 있다.
[weblogic@ae2793daea03 wlserver_10.3]$ ls -al common/nodemanager/
total 12
drwxrwxr-x  2 weblogic weblogic 4096 Aug  6 00:36 .
drwxrwxr-x 11 weblogic weblogic 4096 Aug  5 10:21 ..
-rw-r-----  1 weblogic weblogic  151 Aug  6 00:36 nodemanager.domains
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# 최초 노드매니저 스크립트 실행
# v12.1.1 이하 스크립트 위치: $WL_HOME/server/bin/startNodeManager.sh
# v12.1.2 이상 스크립트 위치: $DOMAIN_HOME/bin/startNodeManager.sh
[weblogic@ae2793daea03 wlserver_10.3]$ ./server/bin/startNodeManager.sh
+ CLASSPATH=/app/weblogic1036/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/app/jdk1.6.0_45/lib/tools.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic_sp.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic.jar:/app/weblogic1036/modules/features/weblogic.server.modules_10.3.6.0.jar:/app/weblogic1036/wlserver_10.3/server/lib/webservices.jar:/app/weblogic1036/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/app/weblogic1036/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/app/weblogic1036
+ '[' '!' -z '' ']'
+ '[' '!' -z '' ']'
+ export CLASSPATH
+ export PATH
+ cd /app/weblogic1036/wlserver_10.3/common/nodemanager
+ set -x
+ '[' '' '!=' '' ']'
+ '[' '' '!=' '' ']'
+ /app/jdk1.6.0_45/bin/java -client -Xms32m -Xmx200m -XX:MaxPermSize=128m -Dbea.home=/app/weblogic1036 -Xverify:none -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.nodemanager.javaHome=/app/jdk1.6.0_45 weblogic.NodeManager -v
<Aug 22, 2018 2:43:50 PM> <INFO> <Loading domains file: /app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains>
Aug 22, 2018 2:43:50 PM weblogic.nodemanager.server.NMServerConfig initDomainsMap
INFO: Loading domains file: /app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains
<Aug 22, 2018 2:43:52 PM> <INFO> <Loading identity key store: FileName=/app/weblogic1036/wlserver_10.3/server/lib/DemoIdentity.jks, Type=jks, PassPhraseUsed=true>
Aug 22, 2018 2:43:52 PM weblogic.nodemanager.server.SSLConfig loadKeyStoreConfig
INFO: Loading identity key store: FileName=/app/weblogic1036/wlserver_10.3/server/lib/DemoIdentity.jks, Type=jks, PassPhraseUsed=true
<Aug 22, 2018 2:43:52 PM> <WARNING> <Node manager configuration properties file '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties' not found. Using default settings.>
Aug 22, 2018 2:43:52 PM weblogic.nodemanager.server.NMServer <init>
WARNING: Node manager configuration properties file '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties' not found. Using default settings.
<Aug 22, 2018 2:43:52 PM> <INFO> <Saving node manager configuration properties to '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties'>
Aug 22, 2018 2:43:52 PM weblogic.nodemanager.server.NMServer <init>
INFO: Saving node manager configuration properties to '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties'
Node manager v10.3

Configuration settings:
1004lucifer NodeManagerHome=/app/weblogic1036/wlserver_10.3/common/nodemanager
ListenAddress=
ListenPort=5556
ListenBacklog=50
SecureListener=true
AuthenticationEnabled=true
NativeVersionEnabled=true
CrashRecoveryEnabled=false
JavaHome=/app/jdk1.6.0_45/jre
StartScriptEnabled=false
StopScriptEnabled=false
StartScriptName=startWebLogic.sh
StopScriptName=
LogFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.log
LogLevel=INFO
LogLimit=0
LogCount=1
LogAppend=true
LogToStderr=true
LogFormatter=weblogic.nodemanager.server.LogFormatter
DomainsFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains
DomainsFileEnabled=true
StateCheckInterval=500
UseMACBroadcast=false
DomainRegistrationEnabled=false
DomainsDirRemoteSharingEnabled=false

Domain name mappings:

1004lucifer_domain -> /app/weblogic1036/domains/1004lucifer_domain

<Aug 22, 2018 2:43:52 PM UTC> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Aug 22, 2018 2:43:52 PM UTC> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Aug 22, 2018 2:43:52 PM UTC> <Info> <Security> <BEA-090908> <Using default WebLogic SSL Hostname Verifier implementation.>
<Aug 22, 2018 2:43:52 PM> <INFO> <Secure socket listener started on port 5556>
Aug 22, 2018 2:43:52 PM weblogic.nodemanager.server.SSLListener run
INFO: Secure socket listener started on port 5556
^C+ set +x Ctrl+C (중지)
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# 노드매니저 스크립트를 수행 시 기본 설정파일들이 생성된다.
[weblogic@ae2793daea03 wlserver_10.3]$ ls -al common/nodemanager/
total 24
drwxrwxr-x  2 weblogic weblogic 4096 Aug 22 14:44 .
drwxrwxr-x 11 weblogic weblogic 4096 Aug  5 10:21 ..
-rw-r-----  1 weblogic weblogic  130 Aug 22 14:43 nm_data.properties
-rw-r-----  1 weblogic weblogic  151 Aug  6 00:36 nodemanager.domains
-rw-r-----  1 weblogic weblogic  721 Aug 22 14:43 nodemanager.log
-rw-r-----  1 weblogic weblogic  820 Aug 22 14:43 nodemanager.properties
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# 노드매니저 설정파일 편집
[weblogic@ae2793daea03 wlserver_10.3]$ vi common/nodemanager/nodemanager.properties
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# 노드매니저 설정파일 편집내용 확인
[weblogic@ae2793daea03 wlserver_10.3]$ cat common/nodemanager/nodemanager.properties
#Wed Aug 22 14:43:52 UTC 2018
DomainsFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains
LogLimit=0
PropertiesVersion=10.3
DomainsDirRemoteSharingEnabled=false
javaHome=/app/jdk1.6.0_45
AuthenticationEnabled=true
NodeManagerHome=/app/weblogic1036/wlserver_10.3/common/nodemanager
JavaHome=/app/jdk1.6.0_45/jre
LogLevel=INFO
DomainsFileEnabled=true
StartScriptName=startWebLogic.sh
# 웹로직과 연동시 통신에 문제가 될 가능성 있어 localhost / 127.0.0.1 대신 노드매니저가 운영될 IP입력을 권장
ListenAddress=localhost
NativeVersionEnabled=true
ListenPort=5556
LogToStderr=true
# 인증서가 없는경우 SSL 옵션 비활성화
SecureListener=false
LogCount=1
DomainRegistrationEnabled=false
StopScriptEnabled=false
QuitEnabled=false
LogAppend=true
StateCheckInterval=500
CrashRecoveryEnabled=false
StartScriptEnabled=false
LogFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.log
LogFormatter=weblogic.nodemanager.server.LogFormatter
ListenBacklog=50
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
[weblogic@ae2793daea03 wlserver_10.3]$
# 설정파일 변경 후 다시 노드매니저 스크립트 실행
[weblogic@ae2793daea03 wlserver_10.3]$ ./server/bin/startNodeManager.sh
+ CLASSPATH=/app/weblogic1036/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/app/jdk1.6.0_45/lib/tools.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic_sp.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic.jar:/app/weblogic1036/modules/features/weblogic.server.modules_10.3.6.0.jar:/app/weblogic1036/wlserver_10.3/server/lib/webservices.jar:/app/weblogic1036/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/app/weblogic1036/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/app/weblogic1036
+ '[' '!' -z '' ']'
+ '[' '!' -z '' ']'
+ export CLASSPATH
+ export PATH
+ cd /app/weblogic1036/wlserver_10.3/common/nodemanager
+ set -x
+ '[' '' '!=' '' ']'
+ '[' '' '!=' '' ']'
+ /app/jdk1.6.0_45/bin/java -client -Xms32m -Xmx200m -XX:MaxPermSize=128m -Dbea.home=/app/weblogic1036 -Xverify:none -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.nodemanager.javaHome=/app/jdk1.6.0_45 weblogic.NodeManager -v
<Aug 22, 2018 3:00:27 PM> <INFO> <Loading domains file: /app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains>
Aug 22, 2018 3:00:27 PM weblogic.nodemanager.server.NMServerConfig initDomainsMap
INFO: Loading domains file: /app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains
<Aug 22, 2018 3:00:27 PM> <INFO> <Loaded node manager configuration properties from '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties'>
Aug 22, 2018 3:00:27 PM weblogic.nodemanager.server.NMServer <init>
INFO: Loaded node manager configuration properties from '/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.properties'
Node manager v10.3

Configuration settings:

NodeManagerHome=/app/weblogic1036/wlserver_10.3/common/nodemanager
ListenAddress=localhost
ListenPort=5556
ListenBacklog=50
SecureListener=false
AuthenticationEnabled=true
NativeVersionEnabled=true
CrashRecoveryEnabled=false
JavaHome=/app/jdk1.6.0_45/jre
StartScriptEnabled=false
StopScriptEnabled=false
StartScriptName=startWebLogic.sh
StopScriptName=
LogFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.log
LogLevel=INFO
LogLimit=0
LogCount=1
LogAppend=true
LogToStderr=true
LogFormatter=weblogic.nodemanager.server.LogFormatter
DomainsFile=/app/weblogic1036/wlserver_10.3/common/nodemanager/nodemanager.domains
DomainsFileEnabled=true
StateCheckInterval=500
UseMACBroadcast=false
DomainRegistrationEnabled=false
DomainsDirRemoteSharingEnabled=false

Domain name mappings:

1004lucifer_domain -> /app/weblogic1036/domains/1004lucifer_domain

<Aug 22, 2018 3:00:28 PM> <INFO> <Plain socket listener started on port 5556, host localhost>
Aug 22, 2018 3:00:28 PM weblogic.nodemanager.server.Listener run
INFO: Plain socket listener started on port 5556, host localhost








2. 어드민콘솔과 노드매니전 연동


- 시스템생성



기본 수신포트는 5556, 위에서 노드매니저 구성 시 설정파일에서 변경이 가능하다.



- 관리서버(매니지드서버) 추가


관리할 매니지드서버(인스턴스서버) 추가

추가된 관리서버 확인

'모니터링 - 노드관리자상태' 항목에서 '연결가능' 상태 확인



- 매니지드서버 노드매니저 구동설정 (옵션/권장)
'구성-서버시작' 항목에서 PermSize 옵션 줄것을 권장
(v10.3.6 에서 PermSize 옵션 없을 시 OOME 에러 발생 - 링크)




- 매니지드서버 컨트롤(기동/중지) 확인








- 프로세스 확인


[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$ ps -ef | grep java
# 웹로직(어드민서버포함) 프로세스
weblogic  2020  1973  1 12:20 pts/3    00:01:37 /app/jdk1.6.0_45/bin/java -client -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m -XX:MaxPermSize=256m -Dweblogic.Name=AdminServer -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Xverify:none -da -Dplatform.home=/app/weblogic1036/wlserver_10.3 -Dwls.home=/app/weblogic1036/wlserver_10.3/server -Dweblogic.home=/app/weblogic1036/wlserver_10.3/server -Dweblogic.management.discover=true -Dwlw.iterativeDev= -Dwlw.testConsole= -Dwlw.logErrorsToConsole= -Dweblogic.ext.dirs=/app/weblogic1036/patch_wls1036/profiles/default/sysext_manifest_classpath weblogic.Server
# 노드매니저 프로세스
weblogic  2189  2157  0 12:47 pts/1    00:00:11 /app/jdk1.6.0_45/bin/java -client -Xms32m -Xmx200m -XX:MaxPermSize=256m -Dbea.home=/app/weblogic1036 -Xverify:none -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.nodemanager.javaHome=/app/jdk1.6.0_45 weblogic.NodeManager -v
# 기동된 매니지드서버 프로세스
# 부모PID가 노드매니저PID와 같다.
weblogic  2253  2189  1 12:51 ?        00:00:47 /app/jdk1.6.0_45/bin/java -Dweblogic.Name=ManagedServer01 -Dbea.home=/app/weblogic1036/wlserver_10.3/common/nodemanager -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.management.server=http://172.17.0.2:7001 -Djava.library.path=/app/jdk1.6.0_45/jre/lib/amd64/server:/app/jdk1.6.0_45/jre/lib/amd64:/app/jdk1.6.0_45/jre/../lib/amd64:/app/weblogic1036/patch_wls1036/profiles/default/native:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64:/app/weblogic1036/wlserver_10.3/server/native/linux/x86_64/oci920_8:/usr/java/packages/lib/amd64:/usr/lib64:/lib64:/lib:/usr/lib -Djava.class.path=/app/weblogic1036/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/app/jdk1.6.0_45/lib/tools.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic_sp.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic.jar:/app/weblogic1036/modules/features/weblogic.server.modules_10.3.6.0.jar:/app/weblogic1036/wlserver_10.3/server/lib/webservices.jar:/app/weblogic1036/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/app/weblogic1036/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar::/app/weblogic1036 -Dweblogic.system.BootIdentityFile=/app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/data/nodemanager/boot.properties -Dweblogic.nodemanager.ServiceEnabled=true -Dweblogic.security.SSL.ignoreHostnameVerification=false -Dweblogic.ReverseDNSAllowed=false -Xms256m -Xmx512m -XX:PermSize=128m -XX:MaxPermSize=256m weblogic.Server
weblogic  2296   389  0 13:48 pts/3    00:00:00 grep java
[weblogic@ae2793daea03 weblogic1036]$








- 로그 확인


# 로그파일 위치: $DOMAIN_HOME/servers/[SERVER_NAME]/logs/[SERVER_NAME].out
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$ tail -f /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.out
<Aug 23, 2018 12:51:31 PM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Aug 23, 2018 12:51:31 PM UTC> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias 1004lucifer_key from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_key.jks.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_cert.jks.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 172.17.0.2:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 127.0.0.1:8006 for protocols iiops, t3s, ldaps, https.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 172.17.0.2:8006 for protocols iiops, t3s, ldaps, https.>
<Aug 23, 2018 12:51:32 PM UTC> <Notice> <WebLogicServer> <BEA-000332> <Started WebLogic Managed Server "ManagedServer01" for domain "1004lucifer_domain" running in Development Mode>
<Aug 23, 2018 12:51:34 PM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Aug 23, 2018 12:51:34 PM UTC> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>








- 매니지드서버 정상기동여부 확인








노드매니저 구성 후 서버 기동 시 발생할 수 있는 이슈

 - 노드매니저로 서버 기동 후 발생한 PermGen OOME 에러
 - 어드민서버에서 매니지드서버 기동 시 FAILED_NOT_RESTARTABLE 상태 오류






참고서적

설치에서 트러블슈팅까지 웹로직의 모든 것 WebLogic Expert - 10점
이규석.김민수 지음/에이콘출판


2018년 8월 18일 토요일

[WebLogic][Admin Console] 서버에 HTTPS(SSL) 적용방법 (ver. 9.0 이상)










지원 WebLogic ver: 9.0 ~


실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6




준비사항


 - 필수사항: 개인키인증서 (파일+별칭+패스워드)
 - 옵션사항: 보안키인증서 (파일+패스워드)


 - 실습에 사용된 정보 (링크에서 제작한 인증서로 실습)
 1. 개인키 인증서
   1) 인증서 파일: 1004lucifer_key.jks
   2) 인증서 별칭(alias): 1004lucifer_key
   3) 인증서 패스워드: 1234qwer

 2. 보안키 인증서
   1) 인증서 파일: 1004lucifer_cert.jks
   2) 인증서 패스워드: 1234qwer








적용방법


- 서버 선택



- SSL항목 확인을 위해 테이블 정보 노출할 수 있도록 작업 (옵션)
1004lucifer




- 매니지드서버(Managed Server) 선택하여 '구성-일반' 항목에서 'SSL 수신 포트 사용' 항목 체크 및 'SSL 수신 포트' 입력



- '키 저장소' 항목에서 키저장소 타입을 변경

1004lucifer

- 인증서 파일 경로 및 패스워드 입력 (저장소유형: JKS입력)
 1) 필수: 사용자 정의 ID 키 (개인키인증서)
 2) 옵션: 사용자 정의 보안 키 (보안인증서)
  - 보안인증서 항목은 공란으로 두어도 HTTPS 작동하는데 문제 없다.



- 'SSL' 항목에서 개인키 별칭(alias)와 비밀번호를 입력한다.






서버 구동
- HTTPS(SSL) 이 정상적으로 적용되지 않은경우 아래의 로그에 어디에 문제가 있는지 알려주니 확인이 필요하다.


[weblogic@ae2793daea03 bin]$ ./startManagedWebLogic.sh ManagedServer01 t3://localhost:7001
.
. 1004lucifer
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=256m
.
WLS Start Mode=Development
.
CLASSPATH=/app/weblogic1036/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/app/jdk1.6.0_45/lib/tools.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic_sp.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic.jar:/app/weblogic1036/modules/features/weblogic.server.modules_10.3.6.0.jar:/app/weblogic1036/wlserver_10.3/server/lib/webservices.jar:/app/weblogic1036/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/app/weblogic1036/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:/app/weblogic1036/wlserver_10.3/common/derby/lib/derbyclient.jar:/app/weblogic1036/wlserver_10.3/server/lib/xqrl.jar
.
PATH=/app/weblogic1036/wlserver_10.3/server/bin:/app/weblogic1036/modules/org.apache.ant_1.7.1/bin:/app/jdk1.6.0_45/jre/bin:/app/jdk1.6.0_45/bin:/usr/local/bin:/bin:/usr/bin:/home/weblogic/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
starting weblogic with Java version:
java version "1.6.0_45"
Java(TM) SE Runtime Environment (build 1.6.0_45-b06)
Java HotSpot(TM) 64-Bit Server VM (build 20.45-b01, mixed mode)
Starting WLS with line:
/app/jdk1.6.0_45/bin/java -client   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=256m -Dweblogic.Name=ManagedServer01 -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.security.SSL.trustedCAKeyStore=/app/weblogic1036/wlserver_10.3/server/lib/cacerts  -Xverify:none  -da -Dplatform.home=/app/weblogic1036/wlserver_10.3 -Dwls.home=/app/weblogic1036/wlserver_10.3/server -Dweblogic.home=/app/weblogic1036/wlserver_10.3/server   -Dweblogic.management.discover=false -Dweblogic.management.server=t3://localhost:7001  -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/app/weblogic1036/patch_wls1036/profiles/default/sysext_manifest_classpath  weblogic.Server
<Aug 18, 2018 12:57:11 AM UTC> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Aug 18, 2018 12:57:12 AM UTC> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Aug 18, 2018 12:57:12 AM UTC> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 20.45-b01 from Sun Microsystems Inc.>
<Aug 18, 2018 12:57:13 AM UTC> <Info> <Security> <BEA-090065> <Getting boot identity from user.>
Enter username to boot WebLogic server:1004lucifer
Enter password to boot WebLogic server:
<Aug 18, 2018 12:57:21 AM UTC> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.6.0  Tue Nov 15 08:52:36 PST 2011 1441050 >
<Aug 18, 2018 12:57:24 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 18, 2018 12:57:24 AM UTC> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Aug 18, 2018 12:57:24 AM UTC> <Notice> <LoggingService> <BEA-320400> <The log file /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 18, 2018 12:57:24 AM UTC> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log00061. Log messages will continue to be logged in /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log.>
<Aug 18, 2018 12:57:24 AM UTC> <Notice> <Log Management> <BEA-170019> <The server log file /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log is opened. All server side log events will be written to this file.>
<Aug 18, 2018 12:57:28 AM UTC> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Aug 18, 2018 12:57:30 AM UTC> <Notice> <LoggingService> <BEA-320400> <The log file /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/access.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 18, 2018 12:57:30 AM UTC> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/access.log00022. Log messages will continue to be logged in /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/access.log.>
<Aug 18, 2018 12:57:31 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STANDBY>
<Aug 18, 2018 12:57:31 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 18, 2018 12:57:31 AM UTC> <Warning> <Munger> <BEA-2156203> <A version attribute was not found in element web-app in the deployment descriptor in /tmp/testapp/WEB-INF/web.xml. A version attribute is required, but this version of the Weblogic Server will assume that the JEE5 is used. Future versions of the Weblogic Server will reject descriptors that do not specify the JEE version.>
<Aug 18, 2018 12:57:32 AM UTC> <Notice> <Log Management> <BEA-170027> <The Server has established connection with the Domain level Diagnostic Service successfully.>
<Aug 18, 2018 12:57:32 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to ADMIN>
<Aug 18, 2018 12:57:32 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RESUMING>
<Aug 18, 2018 12:57:32 AM UTC> <Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored under the alias 1004lucifer_key from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_key.jks.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <Security> <BEA-090169> <Loading trusted certificates from the JKS keystore file /app/weblogic1036/ssl/1004lucifer_cert.jks.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <Server> <BEA-002613> <Channel "Default" is now listening on 172.17.0.2:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <Server> <BEA-002613> <Channel "Default[1]" is now listening on 127.0.0.1:9001 for protocols iiop, t3, ldap, snmp, http.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure[1]" is now listening on 127.0.0.1:8006 for protocols iiops, t3s, ldaps, https.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 172.17.0.2:8006 for protocols iiops, t3s, ldaps, https.>
<Aug 18, 2018 12:57:33 AM UTC> <Notice> <WebLogicServer> <BEA-000332> <Started WebLogic Managed Server "ManagedServer01" for domain "1004lucifer_domain" running in Development Mode>
<Aug 18, 2018 12:57:35 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to RUNNING>
<Aug 18, 2018 12:57:35 AM UTC> <Notice> <WebLogicServer> <BEA-000360> <Server started in RUNNING mode>




에러나는 경우 확인사항
- 서버의 로그를 보고 로그레벨이 Notice 가 아닌 로그에 대해서 유심시 살펴보고 BEA-XXXXX 와 같은 코드와 메시지를 확인해 본다.

작업을 하다보니 아래 링크와 같은 오류사항을 볼 수 있었다.
- [WebLogic][Error] HTTPS(SSL) 설정 후 서버 기동 시 BEA-000297 / BEA-090034 / BEA-090132 / BEA-090133 / BEA-090164 / BEA-090172 / BEA-090503 에러






브라우저 확인

WebLogic v10.3.6 패치 없는경우 아래의 캡쳐와 같이 보여지며 조치방법은 아래의 링크를 참조
 - 링크: 특정 브라우저에서 HTTPS 접속 시 화면이 보이지 않는경우 (Cipher Suites 이슈)



- IE


- 크롬





WebLogic SSL/TLS 적용을 하면서 발생할 수 있는 문제에 대해 아래와 같이 추가적인 정보가 필요할 수 있다.

 - [Java] SSL/TLS 디버깅 방법 및 로그분석
 - [WebLogic] HTTPS(SSL/TLS) 사용 시 Cipher Suites 강제 지정하기
 - [Java] JDK의 암호화 알고리즘 키 제한 이슈 (Illegal key size 오류)
 - [Java][WAS] Cannot support {Cipher_Suite_Name} with currently installed providers 에러
 - [Java][WAS] 특정 브라우저에서 HTTPS 접속 시 화면이 보이지 않는경우 (Cipher Suites 이슈)


[WebLogic][Error] 서버 기동 시 BEA-141151 / BEA-090870 / BEA-000362 에러 - The admin server could not be reached at {URL}










실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6



증상

매니지드서버(Managed Server) 기동 시 아래와 같은 에러가 발생하며 정상적으로 기동이 되지 않았다.





원인


 - 나의 경우에는 매니지드서버 기동 시 마지막에 Admin Server URL 이 잘못되어 정상적으로 기동되지 않았다.
 - t3://localhost:7001 과 같이 제대로 넣으니 정상적으로 기동이 되었다.





[weblogic@ae2793daea03 bin]$ ./startManagedWebLogic.sh ManagedServer01 t3://localhost7001
. 1004lucifer
.
JAVA Memory arguments: -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=256m
.
WLS Start Mode=Development
.
CLASSPATH=/app/weblogic1036/patch_wls1036/profiles/default/sys_manifest_classpath/weblogic_patch.jar:/app/jdk1.6.0_45/lib/tools.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic_sp.jar:/app/weblogic1036/wlserver_10.3/server/lib/weblogic.jar:/app/weblogic1036/modules/features/weblogic.server.modules_10.3.6.0.jar:/app/weblogic1036/wlserver_10.3/server/lib/webservices.jar:/app/weblogic1036/modules/org.apache.ant_1.7.1/lib/ant-all.jar:/app/weblogic1036/modules/net.sf.antcontrib_1.1.0.0_1-0b2/lib/ant-contrib.jar:/app/weblogic1036/wlserver_10.3/common/derby/lib/derbyclient.jar:/app/weblogic1036/wlserver_10.3/server/lib/xqrl.jar
.
PATH=/app/weblogic1036/wlserver_10.3/server/bin:/app/weblogic1036/modules/org.apache.ant_1.7.1/bin:/app/jdk1.6.0_45/jre/bin:/app/jdk1.6.0_45/bin:/usr/local/bin:/bin:/usr/bin:/home/weblogic/bin
.
***************************************************
*  To start WebLogic Server, use a username and   *
*  password assigned to an admin-level user.  For *
*  server administration, use the WebLogic Server *
*  console at http://hostname:port/console        *
***************************************************
starting weblogic with Java version:
java version "1.6.0_45"
Java(TM) SE Runtime Environment (build 1.6.0_45-b06)
Java HotSpot(TM) 64-Bit Server VM (build 20.45-b01, mixed mode)
Starting WLS with line:
/app/jdk1.6.0_45/bin/java -client   -Xms256m -Xmx512m -XX:CompileThreshold=8000 -XX:PermSize=128m  -XX:MaxPermSize=256m -Dweblogic.Name=ManagedServer01 -Djava.security.policy=/app/weblogic1036/wlserver_10.3/server/lib/weblogic.policy -Dweblogic.security.SSL.trustedCAKeyStore=/app/weblogic1036/wlserver_10.3/server/lib/cacerts  -Xverify:none  -da -Dplatform.home=/app/weblogic1036/wlserver_10.3 -Dwls.home=/app/weblogic1036/wlserver_10.3/server -Dweblogic.home=/app/weblogic1036/wlserver_10.3/server   -Dweblogic.management.discover=false -Dweblogic.management.server=t3://localhost7001  -Dwlw.iterativeDev=false -Dwlw.testConsole=false -Dwlw.logErrorsToConsole=false -Dweblogic.ext.dirs=/app/weblogic1036/patch_wls1036/profiles/default/sysext_manifest_classpath  weblogic.Server
<Aug 18, 2018 12:11:17 AM UTC> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Aug 18, 2018 12:11:17 AM UTC> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Aug 18, 2018 12:11:18 AM UTC> <Info> <WebLogicServer> <BEA-000377> <Starting WebLogic Server with Java HotSpot(TM) 64-Bit Server VM Version 20.45-b01 from Sun Microsystems Inc.>
<Aug 18, 2018 12:11:19 AM UTC> <Info> <Security> <BEA-090065> <Getting boot identity from user.>
Enter username to boot WebLogic server:1004lucifer
Enter password to boot WebLogic server:
<Aug 18, 2018 12:11:25 AM UTC> <Info> <Management> <BEA-141107> <Version: WebLogic Server 10.3.6.0  Tue Nov 15 08:52:36 PST 2011 1441050 >
<Aug 18, 2018 12:11:26 AM UTC> <Emergency> <Management> <BEA-141151> <The admin server could not be reached at http://localhost7001.>
<Aug 18, 2018 12:11:26 AM UTC> <Info> <Configuration Management> <BEA-150018> <This server is being started in managed server independence mode in the absence of the admin server.>
<Aug 18, 2018 12:11:26 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to STARTING>
<Aug 18, 2018 12:11:26 AM UTC> <Info> <WorkManager> <BEA-002900> <Initializing self-tuning thread pool>
<Aug 18, 2018 12:11:26 AM UTC> <Notice> <LoggingService> <BEA-320400> <The log file /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log will be rotated. Reopen the log file if tailing has stopped. This can happen on some platforms like Windows.>
<Aug 18, 2018 12:11:26 AM UTC> <Notice> <LoggingService> <BEA-320401> <The log file has been rotated to /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log00056. Log messages will continue to be logged in /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log.>
<Aug 18, 2018 12:11:26 AM UTC> <Notice> <Log Management> <BEA-170019> <The server log file /app/weblogic1036/domains/1004lucifer_domain/servers/ManagedServer01/logs/ManagedServer01.log is opened. All server side log events will be written to this file.>
<Aug 18, 2018 12:11:29 AM UTC> <Error> <Security> <BEA-090870> <The realm "myrealm" failed to be loaded: weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: com.bea.common.store.service.StoreInitializationException: [Security:099060]The URL specified for the data store connection is invalid: ldap://localhost7001:-1,please check all host configuration parameters..
weblogic.security.service.SecurityServiceException: com.bea.common.engine.ServiceInitializationException: com.bea.common.store.service.StoreInitializationException: [Security:099060]The URL specified for the data store connection is invalid: ldap://localhost7001:-1,please check all host configuration parameters.
        at weblogic.security.service.CSSWLSDelegateImpl.initializeServiceEngine(CSSWLSDelegateImpl.java:341)
        at weblogic.security.service.CSSWLSDelegateImpl.initialize(CSSWLSDelegateImpl.java:220)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.InitializeServiceEngine(CommonSecurityServiceManagerDelegateImpl.java:1789)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initializeRealm(CommonSecurityServiceManagerDelegateImpl.java:443)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.loadRealm(CommonSecurityServiceManagerDelegateImpl.java:841)
        Truncated. see log file for complete stacktrace
Caused By: com.bea.common.engine.ServiceInitializationException: com.bea.common.store.service.StoreInitializationException: [Security:099060]The URL specified for the data store connection is invalid: ldap://localhost7001:-1,please check all host configuration parameters.
        at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:365)
        at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
        at com.bea.common.engine.internal.ServiceEngineImpl.lookupService(ServiceEngineImpl.java:257)
        at com.bea.common.engine.internal.ServicesImpl.getService(ServicesImpl.java:72)
        at weblogic.security.service.internal.WLSIdentityServiceImpl.initialize(WLSIdentityServiceImpl.java:46)
        Truncated. see log file for complete stacktrace
Caused By: com.bea.common.store.service.StoreInitializationException: [Security:099060]The URL specified for the data store connection is invalid: ldap://localhost7001:-1,please check all host configuration parameters.
        at com.bea.common.ldap.properties.LDAPStoreServicePropertiesConfigurator.convertStoreProperties(LDAPStoreServicePropertiesConfigurator.java:53)
        at com.bea.common.security.internal.service.StoreServiceImpl.initJDOProperties(StoreServiceImpl.java:101)
        at com.bea.common.security.internal.service.StoreServiceImpl.init(StoreServiceImpl.java:73)
        at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:363)
        at com.bea.common.engine.internal.ServiceEngineImpl.findOrStartService(ServiceEngineImpl.java:315)
        Truncated. see log file for complete stacktrace
>
<Aug 18, 2018 12:11:29 AM UTC> <Notice> <Security> <BEA-090082> <Security initializing using security realm myrealm.>
<Aug 18, 2018 12:11:29 AM UTC> <Critical> <WebLogicServer> <BEA-000362> <Server failed. Reason:

There are 1 nested errors:

weblogic.security.service.SecurityServiceRuntimeException: [Security:090399]Security Services Unavailable
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.doBootAuthorization(CommonSecurityServiceManagerDelegateImpl.java:917)
        at weblogic.security.service.CommonSecurityServiceManagerDelegateImpl.initialize(CommonSecurityServiceManagerDelegateImpl.java:1054)
        at weblogic.security.service.SecurityServiceManager.initialize(SecurityServiceManager.java:873)
        at weblogic.security.SecurityService.start(SecurityService.java:141)
        at weblogic.t3.srvr.SubsystemRequest.run(SubsystemRequest.java:64)
        at weblogic.work.ExecuteThread.execute(ExecuteThread.java:256)
        at weblogic.work.ExecuteThread.run(ExecuteThread.java:221)

>
<Aug 18, 2018 12:11:29 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FAILED> 1004lucifer
<Aug 18, 2018 12:11:29 AM UTC> <Error> <WebLogicServer> <BEA-000383> <A critical service failed. The server will shut itself down>
<Aug 18, 2018 12:11:29 AM UTC> <Notice> <WebLogicServer> <BEA-000365> <Server state changed to FORCE_SHUTTING_DOWN>
[weblogic@ae2793daea03 bin]$





2018년 8월 17일 금요일

[WebLogic] HTTP(SSL) 테스트 인증서 파일 생성하기 (ver. 7.0 이상)










지원 WebLogic ver: 7.0 ~


실습환경
 - OS: OracleLinux 5
 - WebLogic ver: 10.3.6




# 생성할 파일 및 정보
# - 개인키인증서: /app/weblogic1036/ssl/1004lucifer_key.jks (alias:1004lucifer_key)
# - 보안키인증서: /app/weblogic1036/ssl/1004lucifer_cert.jks (alias:1004lucifer_cert)
# - 패스워드: 1234qwer (개인키|보안키 동일하게 셋팅)

 1004lucifer
# $BEA_HOME(웹로직 설치디렉토리): /app/weblogic1036/
[weblogic@ae2793daea03 weblogic1036]$ pwd
/app/weblogic1036
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 인증서가 위치할 디렉토리 생성
[weblogic@ae2793daea03 weblogic1036]$ mkdir ssl
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$ ll
total 184
-rw-rw-r-- 1 weblogic weblogic    986 Aug 15 04:47 decrypt.py
-rw-rw---- 1 weblogic weblogic    200 Aug  6 00:36 domain-registry.xml
drwxr-x--- 3 weblogic weblogic   4096 Aug  6 00:36 domains
drwxrwxr-x 2 weblogic weblogic   4096 Aug 15 07:13 logs
drwxrwxr-x 7 weblogic weblogic  36864 Aug  5 10:21 modules
-rw-rw-r-- 1 weblogic weblogic    625 Aug  5 10:22 ocm.rsp
-rw-rw-r-- 1 weblogic weblogic 108827 Aug  5 10:22 registry.dat
-rw-rw-r-- 1 weblogic weblogic   1728 Aug  5 10:22 registry.xml
drwxrwxr-x 2 weblogic weblogic   4096 Aug 15 06:39 security
drwxrwxr-x 2 weblogic weblogic   4096 Aug 16 12:26 ssl
drwxrwxr-x 8 weblogic weblogic   4096 Aug  5 10:21 utils
drwxrwxr-x 8 weblogic weblogic   4096 Aug  5 10:22 wlserver_10.3
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 웹로직 유틸리티를 사용하기 위해 weblogic.jar 위치 검색
[weblogic@ae2793daea03 weblogic1036]$ find . -name weblogic.jar
./wlserver_10.3/server/lib/weblogic.jar
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 웹로직 CertGen 유틸리티 사용 (인증서생성)
# 보안인증서 생성 경로: ssl/1004lucifer_cert.(der|pem)
# 개인인증서 생성 경로: ssl/1004lucifer_key.(der|pem)
# 개인인증서 패스워드: 1234qwer
# 사용할 도메인: 1004lucifer.co.kr
# (apache 같은 웹서버에서 인증서 바로 사용 가능)
[weblogic@ae2793daea03 weblogic1036]$ java -cp wlserver_10.3/server/lib/weblogic.jar utils.CertGen -certfile ssl/1004lucifer_cert -keyfile ssl/1004lucifer_key -keyfilepass 1234qwer -cn 1004lucifer.co.kr
Generating a certificate with common name 1004lucifer.co.kr and key strength 1024
issued by CA with certificate from /app/weblogic1036/wlserver_10.3/server/lib/CertGenCA.der file and key from /app/weblogic1036/wlserver_10.3/server/lib/CertGenCAKey.der file
# RootCA는 위와같이 CertGenCA.der/CertGenCAKey.der가 사용이 되었다.
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 생성된 보안인증서 / 개인인증서 확인
[weblogic@ae2793daea03 weblogic1036]$ ll ssl
total 24
-rw-rw-r-- 1 weblogic weblogic  571 Aug 16 12:43 1004lucifer_cert.der
-rw-rw-r-- 1 weblogic weblogic  830 Aug 16 12:43 1004lucifer_cert.pem
-rw-rw-r-- 1 weblogic weblogic  676 Aug 16 12:43 1004lucifer_key.der
-rw-rw-r-- 1 weblogic weblogic  993 Aug 16 12:43 1004lucifer_key.pem
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 웹로직 ImportPrivateKey 유틸리티 사용 (개인키인증서 생성)
# 개인키인증서 생성 경로: ssl/1004lucifer_key.jks
# 개인키인증서 패스워드: 1234qwer
# 개인키인증서 별칭(alias): 1004lucifer_key
[weblogic@ae2793daea03 weblogic1036]$ java -cp wlserver_10.3/server/lib/weblogic.jar utils.ImportPrivateKey -keystore ssl/1004lucifer_key.jks -storepass 1234qwer -keypass 1234qwer -alias 1004lucifer_key -certfile ssl/1004lucifer_cert.pem -keyfile ssl/1004lucifer_key.pem -keyfilepass 1234qwer
<Aug 16, 2018 1:35:14 PM UTC> <Info> <Security> <BEA-090905> <Disabling CryptoJ JCE Provider self-integrity check for better startup performance. To enable this check, specify -Dweblogic.security.allowCryptoJDefaultJCEVerification=true>
<Aug 16, 2018 1:35:14 PM UTC> <Info> <Security> <BEA-090906> <Changing the default Random Number Generator in RSA CryptoJ from ECDRBG to FIPS186PRNG. To disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
<Aug 16, 2018 1:35:14 PM UTC> <Info> <Security> <BEA-090908> <Using default WebLogic SSL Hostname Verifier implementation.>
 1004lucifer Imported private key ssl/1004lucifer_key.pem and certificate ssl/1004lucifer_cert.pem
into a new keystore ssl/1004lucifer_key.jks of type jks under alias 1004lucifer_key
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 개인키인증서 생성여부 확인
[weblogic@ae2793daea03 weblogic1036]$ ll ssl
total 24
-rw-rw-r-- 1 weblogic weblogic  571 Aug 16 12:43 1004lucifer_cert.der
-rw-rw-r-- 1 weblogic weblogic  830 Aug 16 12:43 1004lucifer_cert.pem
-rw-rw-r-- 1 weblogic weblogic  676 Aug 16 12:43 1004lucifer_key.der
-rw-rw-r-- 1 weblogic weblogic 1350 Aug 16 13:35 1004lucifer_key.jks
-rw-rw-r-- 1 weblogic weblogic  993 Aug 16 12:43 1004lucifer_key.pem
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# keytool 이용하여 보안키인증서 생성
# 보안키인증서 생성 경로: ssl/1004lucifer_cert.jks
# 보안키인증서 패스워드: 1234qwer
# 보안키인증서 별칭(alias): 1004lucifer_cert
[weblogic@ae2793daea03 weblogic1036]$ keytool -import -v -trustcacerts -alias 1004lucifer_cert -file ssl/1004lucifer_cert.pem -keystore ssl/1004lucifer_cert.jks -storepass 1234qwer
Owner: CN=1004lucifer.co.kr, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Issuer: CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Serial number: -1867f3d65d68945ce7ded7f45297204f
Valid from: Wed Aug 15 12:43:35 UTC 2018 until: Tue Aug 16 12:43:35 UTC 2033
Certificate fingerprints:
         MD5:  7B:9B:C5:14:A6:A8:70:E7:6B:38:70:1C:5F:74:EF:A0
         SHA1: DD:53:D5:83:E9:1A:8E:00:F5:99:2E:02:8A:36:9F:A1:7A:AE:99:10
         Signature algorithm name: MD5withRSA
         Version: 1
Trust this certificate? [no]:  yes
Certificate was added to keystore
[Storing ssl/1004lucifer_cert.jks]
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 보안키인증서 생성여부 확인
[weblogic@ae2793daea03 weblogic1036]$ ll ssl
total 24
-rw-rw-r-- 1 weblogic weblogic  571 Aug 16 12:43 1004lucifer_cert.der
-rw-rw-r-- 1 weblogic weblogic  644 Aug 16 13:33 1004lucifer_cert.jks
-rw-rw-r-- 1 weblogic weblogic  830 Aug 16 12:43 1004lucifer_cert.pem
-rw-rw-r-- 1 weblogic weblogic  676 Aug 16 12:43 1004lucifer_key.der
-rw-rw-r-- 1 weblogic weblogic 1350 Aug 16 13:35 1004lucifer_key.jks
-rw-rw-r-- 1 weblogic weblogic  993 Aug 16 12:43 1004lucifer_key.pem
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 보안키인증서 내용 확인
[weblogic@ae2793daea03 weblogic1036]$ keytool --list -v -keystore ssl/1004lucifer_cert.jks
Enter keystore password: 1234qwer

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry
 1004lucifer Alias name: 1004lucifer_cert
Creation date: Aug 17, 2018
Entry type: trustedCertEntry

Owner: CN=1004lucifer.co.kr, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Issuer: CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Serial number: 13aef1540209c5afa5604e5735011496
Valid from: Thu Aug 16 13:17:59 UTC 2018 until: Wed Aug 17 13:17:59 UTC 2033
Certificate fingerprints:
         MD5:  86:65:53:6B:42:A4:97:20:14:E9:3C:01:E7:1A:06:B2
         SHA1: 81:7A:FE:4B:0B:F4:43:3E:14:45:F8:01:BB:1F:22:2B:A0:7A:17:CA
         Signature algorithm name: MD5withRSA
         Version: 1


*******************************************
*******************************************


[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
[weblogic@ae2793daea03 weblogic1036]$
# 개인키인증서 내용 확인
[weblogic@ae2793daea03 weblogic1036]$ keytool --list -v -keystore ssl/1004lucifer_key.jks
Enter keystore password: 1234qwer

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

Alias name: 1004lucifer_key
Creation date: Aug 17, 2018
Entry type: PrivateKeyEntry
Certificate chain length: 1
Certificate[1]:
Owner: CN=1004lucifer.co.kr, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Issuer: CN=CertGenCAB, OU=FOR TESTING ONLY, O=MyOrganization, L=MyTown, ST=MyState, C=US
Serial number: 13aef1540209c5afa5604e5735011496
Valid from: Thu Aug 16 13:17:59 UTC 2018 until: Wed Aug 17 13:17:59 UTC 2033
Certificate fingerprints:
         MD5:  86:65:53:6B:42:A4:97:20:14:E9:3C:01:E7:1A:06:B2
         SHA1: 81:7A:FE:4B:0B:F4:43:3E:14:45:F8:01:BB:1F:22:2B:A0:7A:17:CA
         Signature algorithm name: MD5withRSA
         Version: 1


*******************************************
*******************************************


[weblogic@ae2793daea03 weblogic1036]$







PS.
정상적으로 만들어진 인증서파일을 이용하여 웹로직(v 10.3.6) SSL 설정 후 브라우저에서 확인해보니 아래와 같이 보여졌다.

WebLogic 설정이슈이며 아래의 글을 참고
 - 링크: 특정 브라우저에서 HTTPS 접속 시 화면이 보이지 않는경우 (Cipher Suites 이슈)

- IE

- 크롬