Guenadi N Jilevski's Oracle BLOG

Fix ‘failed.javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated’ in OEM DC Console

Fix ‘failed.javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated’ in OEM DC Console

OEM Database control (DC) was showing ‘Connection as user grid failed. javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated’ on any occasion I was asked to specify the host credentials in OEM DC – part of Oracle 11.2 installation on OEL 5.4 x86_64.

It turned out that SSL certificate or emkey was corrupted and DB Console GUI was not unable to connect to its agent and verify the credentials (MOS 1157069.1).

Fixing the problem required re-securing the console as shown below.

1. Stop the console
   

   [oracle@raclinux1 ~]$ emctl stop dbconsole
   

   Oracle Enterprise Manager 11g Database Control Release 11.2.0.3.0
   

   Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
   

   
   https://raclinux1.gj.com:1158/em/console/aboutApplication
   

   Stopping Oracle Enterprise Manager 11g Database Control …
   

   … Stopped.
   

   [oracle@raclinux1 ~]$
   

2. Unsecure the console
   

   [oracle@raclinux1 config]$ emctl unsecure dbconsole
   

   Oracle Enterprise Manager 11g Database Control Release 11.2.0.3.0
   

   Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
   

   
   https://raclinux1.gj.com:1158/em/console/aboutApplication
   

   Configuring DBConsole for HTTP… Done.
   

   DBCONSOLE already stopped… Done.
   

   Agent is already stopped… Done.
   

   Unsecuring dbconsole… Started.
   

   DBConsole is now unsecured… Done.
   

   Unsecuring dbconsole… Sucessful.
   

   [oracle@raclinux1 config]$
   

3. Secure the console
   

   [oracle@raclinux1 config]$ emctl secure dbconsole
   

   Oracle Enterprise Manager 11g Database Control Release 11.2.0.3.0
   

   Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
   

   
   http://raclinux1.gj.com:1158/em/console/aboutApplication
   

   Please enter repository password:
   

   DBCONSOLE already stopped… Done.
   

   Agent is already stopped… Done.
   

   Securing dbconsole… Started.
   

   Please enter repository schema password:
   

   Securing dbconsole… Sucessful.
   

   [oracle@raclinux1 config]$
   

4. Start the console
   

   [oracle@raclinux1 ~]$ emctl start dbconsole
   

   Oracle Enterprise Manager 11g Database Control Release 11.2.0.3.0
   

   Copyright (c) 1996, 2011 Oracle Corporation. All rights reserved.
   

   
   https://raclinux1.gj.com:1158/em/console/aboutApplication
   

   Starting Oracle Enterprise Manager 11g Database Control …………………….. started.
   

   ——————————————————————
   

   Logs are generated in directory /u01/app/oracle/product/11.2.0/db_3/raclinux1_RACDB/sysman/log
   

   [oracle@raclinux1 ~]$
   

January 10, 2012 - Posted by gjilevski | oracle