weblogic

WebLogic 8.1 two-way SSL authentication on a web app full example?

大兔子大兔子 提交于 2019-12-22 18:36:12
问题 Does anybody has a WebLogic 8.1 two-way SSL full example? I am developing a small web application (1 HTML, 1 Servlet, 1 JSP) to send confidential data. The client could be a web browser. The server is WebLogic 8.1. The information should travel encrypted. Besides, the web application needs to authenticate the client, using more than a username/password combination. I thought implementing using HTTPS and two-way SSL authentication. This way, the user should send me her certificate, I installed

How can I deploy an exploded web app through WebLogic 11g administrative console?

亡梦爱人 提交于 2019-12-22 18:32:38
问题 I need to deploy a web applicataion as an exploded archive (instead of .war) due to some legacy servlet path location code used in it (ServletContext.getRealPath()). I only have web-based admin console access to the WebLogic 11g server that I intend to deploy to. However, I can't figure how to do it. I see an option for deploying archives, but not directories. Thanks! 回答1: http://download.oracle.com/docs/cd/E13222_01/wls/docs81/deployment/overview.html "WebLogic Server supports deployments

Record WLST Scripts for Adapter Settings for creating Outbound Connection Pools

て烟熏妆下的殇ゞ 提交于 2019-12-22 18:21:18
问题 I am new to the Record WLST Scripts tool. I am trying to record within my Weblogic Administrative Console Settings for JmsAdapter to create a new Outbound Connection Pool, but the Record tool does not seem to be able to capture changes within adapter settings as the file is blank after the changes have been made. Does anyone know why that is? Is there a way to make the Record tool work for Adapter settings? If not would anyone know the functions/directories needed in a WLST in order to create

WebLogic 12c - Error: ADRS_DOMAIN_PASSWORD environment variable not set

孤街醉人 提交于 2019-12-22 12:32:10
问题 I'm trying to implement push notification in Oracle MAF (2.3.1) application. I need to deploy Push Server application on WebLogic server. When i try to run Integrated WebLogic Server (WL-12c) from JDeveloper 12c IDE , I'm keep getting Error: ADRS_DOMAIN_PASSWORD environment variable not set. in console log. Seeems it is not creating domain at all. I have also attached complete Build log on below for your reference, Adding environment variable to WLST script USER_MEM_ARGS = -Xms32m -Xmx1024m

Error: Could not find or load main class weblogic.security.Encrypt

廉价感情. 提交于 2019-12-22 08:08:05
问题 I am trying to encrypt a database password for my Java EE Application in the terminal. according to this tutorial The steps are as follows: Change directory to your domain’s bin folder (For Eg. cd WLS_home\user_projects\domains\mydomain\bin) Use setDomainEnv.cmd/sh script to setup the environment Run java weblogic.security.Encrypt which will prompt for the password and will print the encrypted value in stdout. However, when I execute 'java weblogic.security.Encrypt', I am presented with the

enabling SSL on weblogic

一世执手 提交于 2019-12-22 04:48:10
问题 Is this enough to enable SSL on weblogic server? Open console > Environment > Servers > open a managed server where your application is deployed > check 'SSL Listen Port Enabled' checkbox. Once I did that, I could open my application on HTTPS using HTTPS port. Why I am asking this question because on this page: http://docs.oracle.com/cd/E13222_01/wls/docs81/secmanage/ssl.html In section - Configuring SSL, they're not suggesting this simple step. I understand that by enabling SSL using the way

Comparing string and boolean in Expression language

℡╲_俬逩灬. 提交于 2019-12-22 04:08:39
问题 I have this behaviour I do not really understand ${someVar} ${someVar.class.name} ${someVar == 'error'} outputs false java.lang.Boolean true How can it be exlpained? What it the correct way to write the test in order to first test if the two 'things' have the same type and then if their value is the same? 回答1: This is the behaviour of the language as defined in the EL specification: A {==,!=,eq,ne} B other rules elided If A or B is Boolean coerce both A and B to Boolean, apply operator Coerce

WebLogic 两处任意文件上传漏洞动态分析(CVE-2018-2894)

天涯浪子 提交于 2019-12-22 01:25:50
0x01 前言 CNCERT前几天发公告称发现Oracle公司出品的基于JavaEE结构的中间件WebLogic产品存在一个远程上传漏洞,并得到了厂商的确认,危害程度评分高达9.8分。鉴于厂商已进行了安全修复,笔者对该漏洞进行了一次分析。WebLogic管理端未授权的两个页面存在任意上传getshell漏洞,可直接获取权限。两个页面分别为/ws_utc/begin.do,/ws_utc/config.do;漏洞的影响范围 Oracle WebLogic Server,版本10.3.6.0,12.1.3.0,12.2.1.2,12.2.1.3;相关链接: http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html#AppendixFMW , 下文笔者从这两个文件入手来系统调试跟踪找出漏洞产生的原理和位置。 0x02 漏洞流程 笔者首先访问了一下 http://IP/ws_utc/config.do 并且将默认的目录WSTestPageWorkDir修改了为 user_projects\domains\base_domain\tmp\sd\ 如下图 工作台设置一个新的目录后,weblogic会将原来目录下的子目录和文件一起转移到新设定的目录下,但旧的目录依然保留。因为不是重点

JPA 2.0 in WebLogic Server 10.3.6

最后都变了- 提交于 2019-12-21 20:38:25
问题 I need to use JPA 2.0 (with the EclipseLink implementation). The problem is that I also need to deploy this app in a WebLogic 10.3.6 server, which implements the Java EE 5 specification, and so, it is not required to support JPA 2. I know that there are patches that can be used to add support for JPA 2.0 in this version, but the sysadmin doesn't want to change anything in the server at all I tried adding the javax.persistence-2.1.0.jar file to my war thinking that my app would just use this

Automatic Jax-RS registration in Weblogic 12.2.1 when adding eclipselink artifact

别等时光非礼了梦想. 提交于 2019-12-21 17:33:20
问题 I have observed a very strange behavior in the latest Weblogic server, version 12.2.1.2. When an eclipselink dependency is added to your Java servlet application, Weblogic server is going to automatically trigger Jax-RS Jersey REST service under /resources/* path. To remove any doubts, I have created a very simple helloworld war file. A sample war file can be created by following the instruction from this page (http://geekabyte.blogspot.com/2015/07/how-to-create-war-files-with-intellij.html)