202 Lotus blogs updated hourly. Who will post next? Home | Blogs | Search | About 
 
Latest 7 Posts
DB2 on Windows - where does the db2nodes.cfg file live ?
Thu, Dec 7th 2017 41
Windows Server 2012 - Ooops, I locked my account
Thu, Dec 7th 2017 120
Nagios and NRPE - There's more ...
Wed, Dec 6th 2017 68
Nagios Remote Plugin Executor (NRPE) and xinetd on Red Hat Enterprise Linux
Wed, Dec 6th 2017 46
WebSphere Liberty Profile - Monitoring via JMX over REST using Jython
Wed, Dec 6th 2017 45
WebSphere Liberty Profile - Snooping About
Wed, Dec 6th 2017 43
Mozilla Firefox Quantum - Suppressing Autoplay Videos
Wed, Dec 6th 2017 80
Top 10
Windows Server 2012 - Ooops, I locked my account
Thu, Dec 7th 2017 120
Mozilla Firefox Quantum - Suppressing Autoplay Videos
Wed, Dec 6th 2017 80
Running IBM HTTP Server via Linux scripts and sudo - an update
Mon, Dec 4th 2017 68
JKS Keystores - Pain with Passwords
Mon, Dec 4th 2017 68
Nagios and NRPE - There's more ...
Wed, Dec 6th 2017 68
Using Nagios to monitor IBM HTTP Server and IBM WebSphere Liberty Profile
Tue, Dec 5th 2017 63
WebSphere Liberty Profile - why doesn't HTTPS work ?
Mon, Dec 4th 2017 61
Hmmm, macOS Sierra and XQuartz and X11
Thu, Oct 27th 2016 56
Executing external Python/Jython scripts from within WebSphere Application Server's wsadmin tool
Thu, Feb 27th 2014 55
And there's more - running WebSphere Liberty Profile via Linux scripts
Mon, Dec 4th 2017 55


Transport Layer Security (TLS) 1.2 and SoapUI
Twitter Google+ Facebook LinkedIn Addthis Email Gmail Flipboard Reddit Tumblr WhatsApp StumbleUpon Yammer Evernote Delicious
   

We hit an interesting glitch yesterday, whilst trying to test IBM Business Monitor using the SoapUI tool ( http://www.soapui.org/ ).

Having configured IBM HTTP Server (IHS), in front of Monitor, to only support Transport Layer Security (TLS) 1.2, via this directive in httpd.conf : -

SSLProtocolDisable SSLv3 SSLv2 TLSv10 TLSv11

we then saw

handshake_failure

when trying to connect to the Business Monitor REST emitter, which is fronted by IHS and the WebSphere Plugin.

Having confirmed that we could happily access the REST URL, via HTTPS, using Firefox, we realised that the issue was with SoapUI.

A few Google searches later, we found this: -


...
The following parameter must be added to the soapUI vmoptions file:

-Dsoapui.https.protocols=TLSv1.2
...

A spot of trial and some error later, we found that this is the file to which the article refers: -

SoapUI-5.0.0.vmoptions

*BUT* that we needed to start the client using the .EXE file: -

SoapUI-5.0.0.exe

rather than the supplied batch file ( which appears to ignore the .vmoptions file ).

Once we made this change, and started the tool, it all worked.



---------------------
http://portal2portal.blogspot.com/2015/06/transport-layer-security-tls-12-and.html
Jun 12, 2015
40 hits



Recent Blog Posts
41
DB2 on Windows - where does the db2nodes.cfg file live ?
Thu, Dec 7th 2017 2:13p   Dave Hay
I was briefly tinkering with the need to update the db2nodes.cfg file to help DB2 Express 11.1 cope with the hostname change of a Windows Server 2012 R2 boxen.I'd created a new VM, via OpenStack, using a snapshot from an existing VM - which I'd NOT yet deleted.Therefore, OpenStack, being the nice IaaS solution that it is, kindly helped me out by creating the new instance with a new hostname.This borked DB2, as you'd expect ….I've seen similar issues with DB2 on Linux: -SQL10003C There are
120
Windows Server 2012 - Ooops, I locked my account
Thu, Dec 7th 2017 11:59a   Dave Hay
One of my colleagues had a bad day with a shared Windows Server 2012 R2 environment, in that he locked out the main account that we use to access the box, via Remote Desktop Protocol (RDP).This is NOT an Active Directory environment, so there's no domain controller in the mix; these are merely local accounts.Thankfully, I had another account that WASN'T locked out, so I RDP'd into the box using that account and used the Advanced User Accounts Control Panel ( aka netplwiz ), which did the tric
68
Nagios and NRPE - There's more ...
Wed, Dec 6th 2017 6:25p   Dave Hay
Following on from my earlier post: -Nagios Remote Plugin Executor (NRPE) and xinetd on Red Hat Enterprise Linuxthings are starting to become more clear.As far as I can establish, on the NRPE client/agent side, we have several components at work here.So we have the NRPE agent itself, as started using xinetd : -/etc/xinetd.d/nrpe # default: on# description: NRPE (Nagios Remote Plugin Executor)service nrpe{ flags = REUSE socket_type = stream port = 5666 w
46
Nagios Remote Plugin Executor (NRPE) and xinetd on Red Hat Enterprise Linux
Wed, Dec 6th 2017 2:15p   Dave Hay
As per a few previous posts, I'm tinkering ( there's that word again, I must think of another simile ) with Nagios.This time I'm looking to have my Nagios monitoring server ( which runs on Ubuntu ) execute an agent on a remote boxen running Red Hat Enterprise Linux (RHEL).Having installed the pre-requisites ( and I do need to document those steps more clearly ), I setup a NRPE script to be started using xinetd ( A Powerful Replacement For Inetd )cat /etc/xinetd.d/nrpe # default: on# descripti
45
WebSphere Liberty Profile - Monitoring via JMX over REST using Jython
Wed, Dec 6th 2017 1:39p   Dave Hay
For this, I'm using two excellent IBM developerWorks articles as inspiration: -Retrieve performance metrics from the WebSphere Liberty profile, Part 1 - Setup and configurationRetrieve performance metrics from the WebSphere Liberty profile, Part 2 - Data collection by using JythonWithout reposting the entire pair of articles ( which would be a daft idea ), here's a short-cut of what I ended up doing.For the record, I am using Liberty 17.0.0.3: -/opt/ibm/WebSphere/Liberty/bin/server versionWebS
43
WebSphere Liberty Profile - Snooping About
Wed, Dec 6th 2017 11:51a   Dave Hay
I've written about the SuperSnoop Servlet before: -WebSphere Application Server - Binary ScannerWebSphere Liberty Profile on macOS - SuperSnoopingWebSphere Application Server 9 - Snooping AboutWebSphere Application Server - Liberty Profile - Oh, what funand it's one tool that I use, and reuse, whenever I'm testing a build of WebSphere Application Server etc.However, it niggled me that, whilst it DOES run on WebSphere Liberty Profile, it doesn't actually work.Having deployed it: -cp SuperSnoo
80
Mozilla Firefox Quantum - Suppressing Autoplay Videos
Wed, Dec 6th 2017 6:26a   Dave Hay
So I mostly love the new Firefox 57, aka Quantum, although I have a few niggles with it; my main gripe is that the LastPass plugin appears to have been totally borked.One other issue - autoplay videos :-(Given that I don't use Adobe Flash, I was somewhat grumpy to find that the BBC News site was full of videos that'd start auto-playing as soon as I hit the site.Thankfully, the internet came to the rescue - AGAINHow can I stop videos from automatically starting (autoplay)?This takes one off to
55
Monitoring WebSphere Liberty Profile via JMX and REST over HTTPS
Tue, Dec 5th 2017 8:44p   Dave Hay
This is another of those pesky Work-in-Progress articles, and follows on from an earliest post: -Using Nagios to monitor IBM HTTP Server and IBM WebSphere Liberty ProfileMy objective is to have Nagios actively pull various Java-related attributes from WebSphere Liberty Profile, using the Java Management Extensions (JMX) API over REST over HTTPS.This is what I've inferred thus far, using the Liberty REST Explorer: -https://mfp.uk.ibm.com:8443/ibm/api/explorer/#/IBMJMXConnectorRESTand a Google Ch
63
Using Nagios to monitor IBM HTTP Server and IBM WebSphere Liberty Profile
Tue, Dec 5th 2017 8:33p   Dave Hay
This ties up with a piece of work upon which I'm currently engaged.I've configured Nagios 4.3.4 to test IBM HTTP Server (IHS) 8.5.5.12 and the MobileFirst Platform (MFP) runtime, which runs on WebSphere Liberty Profile 17.0.0.3.This is using the out-of-the-box Nagios plugin called check_http: -/usr/local/nagios/libexec/check_httpwhich can be invoked thusly: -/usr/local/nagios/libexec/check_http -H mfp.uk.ibm.com -p 8443 -SHTTP OK: HTTP/1.1 200 OK - 3710 bytes in 0.014 second response time |tim
61
WebSphere Liberty Profile - why doesn't HTTPS work ?
Mon, Dec 4th 2017 10:58p   Dave Hay
It took me a while to work out where I'd gone wrong earlier.I was configuring a newly installed WebSphere Liberty Profile environment ( actually hosting IBM Mobile First Platform ) for HTTPS, and couldn't work out why the server wasn't listening on port 9443.This is, in brief, what I did: -Create Default Server/opt/ibm/WebSphere/Liberty/bin/server createServer defaultServer created.Install MFP/opt/ibm/InstallationManager/eclipse/tools/imcl -input /mnt/ResponseFiles/installMFP8.rsp -acceptLice




Created and Maintained by Yancy Lent - About - Planet Lotus Blog - Advertising - Mobile Edition