Skip to Main Content

Integration

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Nzos_handshake errors 29039

user2922994Dec 13 2011 — edited Jan 19 2012
Have a clean installation on Microsoft Windows Server 2008 32bit of Oracle Weblogic 10.3.4 32 bit using Java JDK 1.6.0_29-b11 and have successfuly created a Wallet and switched to SSL in Fusion Middleware 11g.

Responsivenes is slow at times and clients get bumped with the coinciding errors in the server OHS1.log as below.

[2011-12-13T17:14:08.8954-05:00] [OHS] [ERROR:32] [OHS-2079] [core.c] [host_id: ctsapp7] [host_addr: 192.168.1.100] [pid: 3080] [tid: 1532] [user: SYSTEM] [VirtualHost: ctsapp7.yd.gov:443] nzos handshake error, nzos_Handshake returned 29039(server ctsapp7.yd.gov:443, client 127.0.0.1)

[2011-12-13T17:14:08.8954-05:00] [OHS] [ERROR:32] [OHS-2171] [core.c] [host_id: ctsapp7] [host_addr: 192.168.1.100] [pid: 3080] [tid: 1532] [user: SYSTEM] [VirtualHost: ctsapp7.yd.gov:443] NZ Library Error: SSL negotiation error [Hint: too restrictive SSLCipherSuite]



For respective error code and indication of the problem:
NZE-29039: There are no matching cipher suites. Cause: Neither end of the handshake can agree on a cipher suite.
Action: Check to ensure that both sides of the handshake select cipher suites that are supported.

Have tried modifying the SSLCipherSuite and the SSLprotocols to no avail. Plyed with the client systems and the server settings. Metalink and general web SSL searches yield very little on these error codes and syntax. Have performed three clean installs and still get this crippling error. Any thoughts?
Comments
Locked Post
New comments cannot be posted to this locked post.
Post Details
Locked on Feb 16 2012
Added on Dec 13 2011
1 comment
2,196 views