Smart Update Error on Linux

I recently hit a SSL Handshake error when trying to apply a WebLogic Portal patch using Smart Update.

Smart Update simply tells that "Cannot verify account status", however, obviously my account is valid.

Environment:
Linux 2.6.32 x86_64 (on x86 probably the same, if not plz let me know)
Sun Java6 JDK 1.6.0_20
Oracle JRockit Mission Control 4.0.0 x86_64
WebLogic Portal 10.3.2 Sunshine release on top of WebLogic Server 10.3.2.0

Checking the Error Message in the stdout, you'll see something like below:

root@lucid:/opt/Oracle/Middleware/utils/bsu# ./bsu.sh
javax.xml.rpc.ServiceException: Error processing WSDL document:
javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: algorithm check failed: MD2withRSA is disabled
at org.apache.axis.client.Service.initService(Service.java:250)
at org.apache.axis.client.Service.(Service.java:165)
at org.apache.axis.client.ServiceFactory.createService(ServiceFactory.java:198)
at com.bea.plateng.patch.AbstractPatchServicesImpl.init(AbstractPatchServicesImpl.java:90)
at com.bea.plateng.patch.DefaultPatchProducerServicesImpl.(DefaultPatchProducerServicesImpl.java:8)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:39)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:27)
at java.lang.reflect.Constructor.newInstance(Constructor.java:513)
at com.bea.plateng.patch.PatchServicesFactory.create(PatchServicesFactory.java:180)
at com.bea.plateng.patch.PatchLoginManager.login(PatchLoginManager.java:90)
at com.bea.plateng.patch.gui.PatchGUIHelper$1.call(PatchGUIHelper.java:192)
at com.bea.plateng.patch.gui.PatchGUIHelper$1.call(PatchGUIHelper.java:189)
at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:303)
at java.util.concurrent.FutureTask.run(FutureTask.java:138)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.access$301(ScheduledThreadPoolExecutor.java:98)
at java.util.concurrent.ScheduledThreadPoolExecutor$ScheduledFutureTask.run(ScheduledThreadPoolExecutor.java:207)
at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:886)
at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:908)
at java.lang.Thread.run(Thread.java:619)

Cause

Aha, we caught the fish: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: algorithm check failed: MD2withRSA is disabled

The problem is happening with latest version of Sun JDK from 160_18 onwards, Sun has disabled “MD2withRSA” with latest version of JDK’s stating that its vulnerability. This is Defect 9776340 in WebLogic.

Workaround

Use JRockit as the JVM instead. Suppose JRockit is installed in /opt/jrmc-4.0.0-1.6.0

1. Session Wide (temporary)

Open a terminal, set session wide environment variables:

export JAVA_HOME=/opt/jrmc-4.0.0-1.6.0/jre
export CLASSPATH=.
export PATH=$JAVA_HOME/bin:$PATH

run ./bsu.sh from this Termial

java -jar patch-client.jar

2. Permanent workaround

edit utils/bsu.sh

update JAVA_HOME

JAVA_HOME="/opt/jrmc-4.0.0-1.6.0/jre"

Run

./bsu.sh

Reference:

http://forums.oracle.com/forums/thread.jspa?threadID=1066924

WebCenter Interaction 10gR3 Patch 1

AFAIK, this is the first patchset for ALUI/WCI done by Oracle after the BEA acquisition.

I have to say that the new versioning in line with Oracle Database or Fusion middleware is a bit confusing to old Plumtree and ALUI customers.

In fact, WCI 10gR3 (10.3.0.0.0) is equivalent to ALI 6.5 MP2 (6.5.2). So 10gR3 patch 1 is equivalent to 10.3.0.1.0.

Yesterday, Oracle announced the release of 10.3.0.1 of WebCenter Interaction and Collaboration a patch release on top of the 10gR3 versions of each product. These patch releases contain a set of bug fixes related to each product as well as a new Desktop Integration feature for Collaboration called the Office Task Bar Panel. Each of the bugs that have been fixed are listed and summarized within the Release Notes for each product. Links to each can be found below:

WCI 10.3.0.1 Release Notes

WebCenter Collaboration 10.3.0.1 Release Notes

The patches for all certified operating systems are now available on Metalink (soon to be My Oracle Support).

Log into Metalink and go to the Patches & Updates tab, and do a Simple Search for patch number 8935278 (WCI) or 8935708 (WCC) and you can download the patch.

Follow the instructions in the Upgrade Guide for WCI 10.3.0.1.0 to perform the upgrade. Have fun!

It looks like 10gR3 (6.5) branch is still being maintained by Oracle. Also, based on the SOD documenent from Oracle website, there will be 11g release for WCI to replace the 10gR3 in WebCenter Suite 11gR1 stack. Let's wait and see.

Skype Sound Devices settings on Ubuntu (Dell D620/D630)

There are so many different sound architectures and solutions on Linux, like OSS, ALSA and Pulse audio. It seems that ALSA is the dominant one and Pulse is something new to take its place, not sure yet. It is very confusing and frustrating for new users.

I have had bad experience setting up sound input and output with OSS and ALSA earlier. It is not as easy and pleasant as on Mac and Windows.

I am a huge fan of Skype, as the PC to PC call is free and the voice/video quality is excellent. Also because it is cross platform, it is available on iPhone (Skype for iPhone and Fring) and portable devices powered by Windows Mobile or Symbian (e71 using Fring), PSP..., probably more to come.

1 of the most important point to use it is that communications between clients and servers are encrypted by AES without any configuration. So all text and voice chats are secured basically until it reaches PSTN.

For more info:
Why Are Skype Calls encrypted?
Are my Skype calls secure or encrypted?
What type of encryption is used?

Other IMs like Google Talk also offers communication over SSL, but it requires configuration on different client tools like Pidgin, Empathy, InstantBird, Adium or official client. So Skype is still the easiest tool for average crowd.

In fact I switched to Ubuntu from Fedora Core 5 in mid 2006, installed on Dell Latitude D620 which was my working laptop. It went smoothly and I was pretty happy with almost everything except the sound input and output.

I tried to get the built-in mic work in Hardy and Intrepid, but for some reason, I didn't make it. I can hear others talking but they can't hear me because I didn't seem to have the right Sound devices settings for Skype.

After upgrading to 9.04 Jaunty Jackalope in April, I tried to call my wife to test Skype. Holy cow! I found that the Dell Latitude D620 built-in microphone was working with the same Intrepid settings.

Check the settings below, it has been tested and proved to be working on Dell Latitude D620 and D630 with the built-in mic.

Hope this is useful to those who has trouble setting Skype sound devices.

References for Linux sound solutions:
OSS Open Sound System
ALSA Advanced Linux Sound Architecture
PulseAudio

Oracle BPM (ALBPM) Resources

This is a quick post to put all publicly available Oracle BPM resources all together to avoid wasting time doing pointless searches.

Technical Forums:
Oracle Business Process Management Suite

Forum in Simplified Chinese:
http://cn.forums.oracle.com/forums/forum.jspa?forumID=315

Downloads:
http://www.oracle.com/technology/software/products/bpm/index.html

or go to http://edelivery.oracle.com/

Documentations:

Oracle BPM Configuration Matrix

10gR3
http://download.oracle.com/docs/cd/E13154_01/bpm/docs65/index.html

Docs for previous version are no longer available on edocs.bea.com for some reason. Well, we can still access them via the links below. But I have no idea how long they are going to last.

6.0
http://edocs.bea.com/albsi/docs60/index.html

5.7
http://edocs.bea.com/albsi/docs57/index.html

5.5
http://edocs.bea.com/albsi/docs55/index.html

Patches:

Where to download Oracle BPM patches now?

Linux omitted by banks

Yesterday I played around the newly enhanced Netbank of Commonwealth Bank (CBA). Generally speaking, the new UI is good. Although it is not working very well when zoomed in. Also, the new web edition for iPhone is fully functioning now. It's good to see banks are doing someting in this economic downturn.

Something weird I found when clicking on Run Optimization Check link.


I found this matrix from the link: FAQ

The system requirements to use NetBank are:

Browser	Operating System
	Windows 2000	Windows XP	MAC OSX	Vista
Internet Explorer 6 SP2
Internet Explorer 7
Mozilla Firefox 2
Mozilla Firefox 3
Safari 2
Safari 3

I understand that GNU/Linux is not a mainstream OS for ordinary users, market share is close to 1%. As a *NIX fan, I still feel uncomfortable to see Linux being ignored. The fact is that Mozilla Firefox itself is cross platform. As a result, all OS Firefox supports should be supported, right?

In fact, I use Linux + Firefox or Opera (swith to Chrome for Linux later this year) to access Netbank and other web based internet banking services most of the time, 90%+. It is actually a supported platform. The Netbank team should be able to do the compatibility test, resource should not a problem. If not, I would be more than happy to be a tester as if CBA offers me a VIP account or something like that:)

BTW: Of course I am still with some stupid banks who are still with IE + ActiveX combination and Windows only client. It sucks. My workaround is to run a guest Windows instance.

CBA is not the the only bank that omits GNU/Linux. Here I am not criticising CBA. I wish in the future the banks can take Linux into their account when doing compatibility test.

We all know that Linux is quite something, it is going to make a big noise in the OS market soon. Please do not omit it.

Ubuntu at Sydney Airport

It has been a while since my last post here. 2009 is a busy year for me, it is a shame on me to find more than 20 drafts to be posted:).

I travelled to Shanghai again on March 4, from Sydney. I found the same Free Internet Access machines sponsored by Oputs at Kingsford Smith airport. In fact I discovered this interesting thing last October when I went back to Shanghai to see my family. However, at that time I was in a hurry and I didn't have time play with it.

Operating System: Ubuntu Drapper Drake 6.06 LTS.
Desktop Environment: Gnome
Web Browser: Opera 9

How do I know that?
They did some tricks to limit user controls within a full-screened Opera Web Browser, key combination to switch to other pseudo consoles disabled. For some reason, they forgot to disable the key combination to restart X11 (U know what I am talking about, right?). I can't believe it! Hope they won't see this post:).

BTW:
Dapper Drake was my first Ubuntu version. At that time I was using Fedora Core 5. I have been using Fedora Core (now renamed to Fedora) for the past few years since it's initial release. Later on I decided to move to Debian/Ubuntu because of the APT package management. RPM really sucks.

I am more than happy to see GNU/Linux and open source apps to be used for non-profit or public services. It makes sense to make non-IT people aware that there are choices other than Microsoft Windows, and it's free of charge!

Bon voyage, Ubuntu! Well done, Debian GNU/Linux and the open source community.

Where to download Oracle BPM patches now?

The legacy BEA site will be ditched soon. We can see that http://albpmsupport.bea.com is no longer updated. Latest Oracle BPM patches are not listed there any more.

All Oracle customers are redirected to Metalink for all product support and patches.

After logging in Metalink, do a quick search with keywords 'albpm hotfix' and there will be a KB article with instructions on how to download Oracle BPM patches from 5.5 to 10gR3 or above.

Subject: How to download Oracle BPM (OBPM) patch (HotFix ) or patchset / maintenance or service Pack (MP / SP) using Oracle Metalink.

Steps:

• Once logged in the Metalink, click on “Patches and Updates”
• Click on “Advanced Search”
• Product or Product Family: Click on the flashlight, on the search window enter “BPM” and click “Go”. The search result should show “Oracle Business Process Management Suite (beaalbpm)” product. Check the “Select” box (or click on “Check all”) and click on “Select” button.
• Now you should see Oracle Business Process Management Suite (beaalbpm) in the Product or Product Family search field.
• Select the Release: click on the flashlight near the “Release” search field and choose the appropriate version.
• Ignore the rest of the search criteria and click “Go”
• You should get all the list of available Oracle BPM patches and patchsets.
• Please verify the build number, the product (Studio, Enterprise SA and EnterpriseJEE) and the type (Patch / Hotfix or Patchset / MP ).

Hope this helps the confused and frustrated users.