Weblogic Urgent issue:

[Arun Kumar]

​​

Hi Guys, some urgent issues related to Weblogic.

Issue: We have one third party application, through which weblogic makes a call to webservices. Actually this issues is seen when customer check-outs any item and tries to pay through paypal account, the page after hitting paypal seems hanging. Looks like this is intermittent issue. Below are the three webservices, that weblogic makes a call to:

https://ws2.ondemand.qas.com/ProOnDemand/V3/ProOnDemandService.asmx
https://us.ws2.ondemand.qas.com/ProOnDemand/V3/ProOnDemandService.asmx   
https://us2.ws2.ondemand.qas.com/ProOnDemand/V2/ProOnDemandService.asmx

I am seeing below error and vendor requested me to impoet ssl certificates for the weblogic for the above end points.Also, make sure the firewalls are configured to allow access to these end points. He also pointed that it might be some network issue.

Below are the errors i see in logs, one might be code related but others are pretty much weblogic related asfar as i am concerned(not sure though)


Error-1 : Which occurs very frequently 

Apr 15, 2014 11:12:33 AM weblogic.wsee.jaxws.spi.WLSServiceDelegate addWsdlDefinitionFeature 
SEVERE: Failed to create WsdlDefinitionFeature for wsdl location: https://ws2.ondemand.qas.com/ProOnDemand/V3/ProOnDemandService.asmx?WSDL, error: com.sun.xml.ws.wsdl.parser.InaccessibleWSDLException, message: 2 counts of InaccessibleWSDLException. 


Error-2: Occurs sometimes and throws 500 Internal Server Error 

<Apr 15, 2014 11:13:56 AM EDT> <Error> <HTTP> <BEA-101214> <Included resource or file "/m/left_nav.jsp" not found from requested resource "/m/viewRegistry".> 
log4j:ERROR setFile(null,true) call failed. 
java.io.FileNotFoundException: /logs/samplecode/proweb.log (No such file or directory) 
      at java.io.FileOutputStream.openAppend(Native Method) 
      at java.io.FileOutputStream.<init>(FileOutputStream.java:192) 
      at java.io.FileOutputStream.<init>(FileOutputStream.java:116) 
      at org.apache.log4j.FileAppender.setFile(FileAppender.java:289) 
      at org.apache.log4j.FileAppender.activateOptions(FileAppender.java:163) 

Error-3: Some other error 

<Apr 15, 2014 3:33:03 PM EDT> <Error> <HTTP> <BEA-101020> <[ServletContext@786625416[app:qas module:qas.war path:/qas-mobile spec-version:2.5]] Servlet failed with Exception 
com.sun.xml.ws.client.ClientTransportException: HTTP transport error: java.net.ConnectException: Tried all: 1 addresses, but could not connect over HTTPS to server: ws2.ondemand.qas.com port: 443 
      at com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java:138) 
      at com.sun.xml.ws.transport.http.client.HttpTransportPipe.process(HttpTransportPipe.java:187) 
      at com.sun.xml.ws.transport.http.client.HttpTransportPipe.processRequest(HttpTransportPipe.java:124) 
      at com.sun.xml.ws.transport.DeferredTransportPipe.processRequest(DeferredTransportPipe.java:121) 
      at com.sun.xml.ws.api.pipe.Fiber.__doRun(Fiber.java:866) 
      Truncated. see log file for complete stacktrace 
Caused By: java.net.ConnectException: Tried all: 1 addresses, but could not connect over HTTPS to server: ws2.ondemand.qas.com port: 443 
      at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:300) 
      at weblogic.net.http.HttpsClient.openServer(HttpsClient.java:364) 
      at weblogic.net.http.HttpsClient.New(HttpsClient.java:527) 
      at weblogic.net.http.HttpsURLConnection.connect(HttpsURLConnection.java:239) 
      at com.sun.xml.ws.transport.http.client.HttpClientTransport.getOutput(HttpClientTransport.java:136) 
      Truncated. see log file for complete stacktrace 
 

Any help will be greatly appreciated.

Thank You !!!

Arun

[ramesh kumar]

Error 1 can be ignored. 

Error2: can be valid. 

But main issue is Error 3. connection exception. Import the client cert in your java keystore where your jvm is running. verify the cert on your keystore. recycle the jvm. since you are using 443 port for making webservice calls the url if you mentioned is exposed to internet. then you wouldn't need firewall. 

Search for keytool import command to import. 

Hope this helps. 

Thanks,

Ramesh.

--
You received this message because you are subscribed to the Google Groups "sko_guys" group.
To unsubscribe from this group and stop receiving emails from it, send an email to skolix123+...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Arun K. Mishra]

Thank you Ramesh a lot!! I will try that I keep you posted.

---

From: ramesh kumar
Sent: ‎5/‎1/‎2014 9:16 PM
To: skol...@googlegroups.com
Cc: skoli...@googlegroups.com
Subject: Re: Weblogic Urgent issue:

[The entire original message is not included.]

[Arun Kumar]

Ramesh,

Can you please elaborate what do you mean by Client Cert? can you please provide me a link with some steps to follow?

[Arun Kumar]

Hi Ramesh,

Sorry to bother you brother but i have some confusion regarding the above issue. I have attached the screen shots with my current java keystore and the pointed one is the third party cert whose webservices the weblogic calls. I also found this article where it says add the following properties in the startup script? Is this correct, if correct,what would be the cert i should define on following parameters and keystore type( not sure if he is talking about demo trust keystore)

Finally found the solution! Weblogic seems to over-ride the keystore configurations if it is done through Java as above. The thing that worked for me was to configure the SSL settings on JVM level, at web-logic start-up. 
To make it work, I just added these Java options in the start-script for weblogic:

-Djavax.net.ssl.keyStore=MyPath/cert.pfx
-Djavax.net.ssl.keyStoreType=MyPwd
-Djavax.net.ssl.keyStorePassword=PKCS12

Restarted web-logic and SSL has been working great since then :)

http://stackoverflow.com/questions/15086608/client-certificate-using-weblogic

Thank you Brother for all your information and help. It would be of great help if you could assit me little bit more.

Thank you!!!

Arun

On Thu, May 1, 2014 at 9:15 PM, ramesh kumar <krames...@gmail.com> wrote: