Weblogic 11gR2 (10.3.3) FIPS-140 호환

Question

Ear 응용 프로그램은 Weblogic 10.3.3 서버에서 호스팅됩니다.

이 응용 프로그램은 BO 4.1와 상호 작용하는 우리는이 오류가 지금에 연결을 시도해야 :

com.tranme.guide.commonservices.report.InteractionBOException: com.crystaldecisions.sdk.exception.SDKException$ConfidentialChannelFailed: Impossible d'굡blir un canal confidentiel. (FWM 02119) 
cause:com.businessobjects.bcm.exception.FIPSError: Cryptographic library is not FIPS-140-compliant. 
detail:Impossible d'굡blir un canal confidentiel. (FWM 02119) Cryptographic library is not FIPS-140-compliant. 
    at com.tranme.guide.commonservices.report.CrystalReportHelper.getReportInfoObjectsByReportName(CrystalReportHelper.java:515) 
    at com.tranme.guide.notificationmgt.manager.reports.util.ReportManagementTools.getReportInstanceStatuses(ReportManagementTools.java:81) 
    at com.tranme.guide.notificationmgt.manager.reports.util.ReportManagementTools.getGenerationStatusResults(ReportManagementTools.java:51) 
    at com.tranme.guide.notificationmgt.manager.BaseNotificationManager.updateReportGenerationStatus(BaseNotificationManager.java:217) 
    at com.tranme.guide.notificationmgt.business.ejb.impl.NotificationManagementFacadeBeanImpl.updateReportGenerationStatus(NotificationManagementFacadeBeanImpl.java:123) 
    at com.tranme.guide.notificationmgt.business.ejb.impl.NotificationManagementFacadeBeanImpl_z3lp9c_EOImpl.updateReportGenerationStatus(NotificationManagementFacadeBeanImpl_z3lp9c_EOImpl.java:140) 
    at com.tranme.guide.notificationmgt.business.ejb.impl.NotificationManagementFacadeBeanImpl_z3lp9c_EOImpl_WLSkel.invoke(Unknown Source) 
    at weblogic.rmi.internal.BasicServerRef.invoke(BasicServerRef.java:589) 
    at weblogic.rmi.cluster.ClusterableServerRef.invoke(ClusterableServerRef.java:230) 
    at weblogic.rmi.internal.BasicServerRef$1.run(BasicServerRef.java:477) 
    at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:363) 
    at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:147) 
    at weblogic.rmi.internal.BasicServerRef.handleRequest(BasicServerRef.java:473) 
    at weblogic.rmi.internal.wls.WLSExecuteRequest.run(WLSExecuteRequest.java:118) 
    at weblogic.work.ExecuteThread.execute(ExecuteThread.java:201) 
    at weblogic.work.ExecuteThread.run(ExecuteThread.java:173) 
Caused by: com.crystaldecisions.sdk.exception.SDKException$ConfidentialChannelFailed: Impossible d'굡blir un canal confidentiel. (FWM 02119) 
cause:com.businessobjects.bcm.exception.FIPSError: Cryptographic library is not FIPS-140-compliant. 
detail:Impossible d'굡blir un canal confidentiel. (FWM 02119) Cryptographic library is not FIPS-140-compliant. 
    at com.crystaldecisions.sdk.occa.security.internal.ConfidentialChannelService.establishConfidentialChannel(ConfidentialChannelService.java:199) 
    at com.crystaldecisions.sdk.occa.security.internal.ConfidentialChannelService.createConfidentialChannel(ConfidentialChannelService.java:145) 
    at com.crystaldecisions.sdk.occa.security.internal.CCMap.locateCCItem(CCMap.java:63) 
    at com.crystaldecisions.sdk.occa.security.internal.LogonService.doUserLogon(LogonService.java:845) 
    at com.crystaldecisions.sdk.occa.security.internal.LogonService.doUserLogon(LogonService.java:805) 
    at com.crystaldecisions.sdk.occa.security.internal.LogonService.userLogon(LogonService.java:210) 
    at com.crystaldecisions.sdk.occa.security.internal.SecurityMgr.userLogon(SecurityMgr.java:166) 
    at com.crystaldecisions.sdk.framework.internal.SessionMgr.logon_aroundBody0(SessionMgr.java:454) 
    at com.crystaldecisions.sdk.framework.internal.SessionMgr.logon_aroundBody1$advice(SessionMgr.java:512) 
    at com.crystaldecisions.sdk.framework.internal.SessionMgr.logon(SessionMgr.java:1) 
    at com.tranme.guide.commonservices.report.CrystalReportHelper.getSession(CrystalReportHelper.java:156) 
    at com.tranme.guide.commonservices.report.CrystalReportHelper.getReportInfoObjectsByReportName(CrystalReportHelper.java:502) 
    ... 15 more 
Caused by: com.businessobjects.bcm.exception.FIPSError: Cryptographic library is not FIPS-140-compliant. 
    at com.businessobjects.bcm.internal.BcmRsaLib.CheckStartupErrors(BcmRsaLib.java:28) 
    at com.businessobjects.bcm.internal.DHKeyAgreeImpl.<init>(DHKeyAgreeImpl.java:22) 
    at com.businessobjects.bcm.BCM.createKeyAgreement(BCM.java:1080) 
    at com.crystaldecisions.sdk.occa.security.internal.ConfidentialChannelService.establishConfidentialChannel(ConfidentialChannelService.java:175) 
    ... 26 more 

보 SDK의 lib 디렉토리 (웹 로직 클래스 경로에이 내 앞에 dev에 구현하기로 결정하는 방법이다 그들).

나는 이미 행운없이 SAP 포럼에서 제안한 솔루션을 시도해 보았습니다.

Answer 1

WLS 11g는 이러한 일들이 FIPS-compliant SSL connections 구성 할 필요가있다 :

• cryptojFIPS.jar가 PRE_CLASSPATH 변수에 추가됩니다
• 명령 줄 인수 (이것은 무엇 SAP 포럼 suggested 비슷한 무언가를) -Dweblogic.security.SSL.nojce=true 이 지정됩니다.
• JVM에는 무제한 JCE가 있습니다 (자세한 내용은 여기 for WLS12C이지만 단계는 유사합니다). 이미 설정되었을 수 있습니다.