BEA-090482

<Mar 18, 2010 3:21:12 PM GMT+08:00> <Warning> <Security> <BEA-090482> <BAD_CERTIFICATE alert was received from fwktdb2 - 133.0.175.5. Check the peer to determine why it rejected the certificate chain (trusted CA configuration, hostname verification). SSL debug tracing may be required to determine the exact reason the certificate was rejected.>
<Mar 18, 2010 3:21:12 PM> <Warning> <Uncaught exception in server handler: javax.net.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from fwktdb2 - 133.0.175.5. Check the peer to determine why it rejected the certificate chain (trusted CA configuration, hostname verification). SSL debug tracing may be required to determine the exact reason the certificate was rejected.>
javax.net.ssl.SSLKeyException: [Security:090482]BAD_CERTIFICATE alert was received from fwktdb2 - 133.0.175.5. Check the peer to determine why it rejected the certificate chain (trusted CA configuration, hostname verification). SSL debug tracing may be required to determine the exact reason the certificate was rejected.
 at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)
 at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertReceived(Unknown Source)
 at com.certicom.tls.record.alert.AlertHandler.handle(Unknown Source)
 at com.certicom.tls.record.alert.AlertHandler.handleAlertMessages(Unknown Source)
 at com.certicom.tls.record.MessageInterpreter.interpretContent(Unknown Source)
 at com.certicom.tls.record.MessageInterpreter.decryptMessage(Unknown Source)
 at com.certicom.tls.record.ReadHandler.processRecord(Unknown Source)
 at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)
 at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)
 at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)
 at com.certicom.tls.record.ReadHandler.read(Unknown Source)
 at com.certicom.io.InputSSLIOStreamWrapper.read(Unknown Source)
 at sun.nio.cs.StreamDecoder$CharsetSD.readBytes(StreamDecoder.java:452)
 at sun.nio.cs.StreamDecoder$CharsetSD.implRead(StreamDecoder.java:494)
 at sun.nio.cs.StreamDecoder.read(StreamDecoder.java:222)
 at java.io.InputStreamReader.read(InputStreamReader.java:177)
 at java.io.BufferedReader.fill(BufferedReader.java:148)
 at java.io.BufferedReader.readLine(BufferedReader.java:311)
 at java.io.BufferedReader.readLine(BufferedReader.java:374)
 at weblogic.nodemanager.server.Handler.run(Handler.java:66)
 at java.lang.Thread.run(Thread.java:736)

 

BAD_CERTIFICATE （未正确签名导致 SSL 握手失败）

解决：

修改adminserver的ssl默认参数Hostname Verification:None

 

 

关于SSL: http://www.gzsec.com/bbs/dispbbs.asp?boardID=7&ID=195&page=1