Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...

  • From: Chris Taylor <christopherdtaylor1994@xxxxxxxxx>
  • To: Peter Sharman <pete.sharman@xxxxxxxxxx>
  • Date: Fri, 13 Nov 2015 14:46:42 -0600

*Supposedly *Java 1.7 (any version) is supported with Weblogic 10.3.6 and
12.x (according to the metalink documents). There wasn't a clear
certification matrix that was easy to tie WLS 10.3.6/12.x to specific JDK
versions and updates that I could find however.

Chris


On Fri, Nov 13, 2015 at 11:07 AM, Peter Sharman <pete.sharman@xxxxxxxxxx>
wrote:

Sigh, we DO certify versions for a reason, you know! ;)



Pete

[image: Oracle logo]

Pete Sharman
Database Architect, DBaaS / DBLM
Enterprise Manager Product Suite
33 Benson Crescent CALWELL ACT 2905 AUSTRALIA

Phone: +61262924095 | | Mobile: *+61414443449 <%2B61414443449>*
Email: pete.sharman@xxxxxxxxxx Twitter: @SharmanPete LinkedIn:
au.linkedin.com/in/petesharman
Website: petewhodidnottweet.com
------------------------------

"Controlling developers is like herding cats."

Kevin Loney, Oracle DBA Handbook



"Oh no, it's not, it's much harder than that!"

Bruce Pihlamae, long term Oracle DBA
------------------------------



*From:* Chris Taylor [mailto:christopherdtaylor1994@xxxxxxxxx]
*Sent:* Saturday, November 14, 2015 12:39 AM
*To:* Niall Litchfield <niall.litchfield@xxxxxxxxx>
*Cc:* Tim Hall <tim@xxxxxxxxxxxxxxx>; Oracle-L Freelists <
oracle-l@xxxxxxxxxxxxx>
*Subject:* Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...



In the spirit of full ownership of crap I spew, Niall is exactly right. I
updated the JRE for the OEM 12c (12.1.0.5) and immediately things started
breaking. Apparently, after Java 1.7 u 85, RC4 ciphers have been removed
which Grid apparently uses so you have to update some things. *sigh*



Metalink Docs of note:

*How to Install and Maintain the Java SE Installed or Used with FMW
11g/12c Products (Doc ID 1492980.1)*

*MBean Error Accessing HTTP Server Configuration in FMW Control (/em) -
After Upgrading JDK (Doc ID 2049077.1)*

Note 1067411.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1067411.1>
How
To Disable Anonymous and Weak Cipher Suites in Oracle WebLogic Server

Note 1463846.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1463846.1>
JDK
7 BREAKS EM CONSOLE WHEN ATTEMPTING TO EDIT CONFIG FILES FMW 11.1.1.6 -
11.1.2.1

Note 1598061.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1598061.1>
JDK
7: OWM Fails with the Error, "This function should be called while holding
treeLock"

Note 1943873.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1943873.1>
Latest
JDK 6 or 7: Patch 17337741 Causes Error "Too few bytes (1) received from
OPMN response" While Trying to Manage System Components Using FMW Control
Note 1450179.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1450179.1>
Solaris
OS: Managed Servers of a Portal, Forms, Reports, Discoverer Installation
Fail to Start with Java 7 with the Error "Unknown keyword
'useEcX963Encoding"
Note 1987534.1
<https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1987534.1>
IBM
JDK: When Trying To Login To EM FMW Control - Error Is Returned:
"User is not authorized to login to WebLogic
Domain. User should be part of one or more Administrative roles to be able
to login"





On Thu, Nov 12, 2015 at 6:24 PM, Niall Litchfield <
niall.litchfield@xxxxxxxxx> wrote:

I suspect you underestimate the engineering effort required to ensure that
that change of JVM doesn't in fact hobble anything. I mean why does anyone
run apps against Oracle 11.2 - 12.1 is just a version change right :)



On Fri, Nov 13, 2015 at 12:12 AM, Chris Taylor <
christopherdtaylor1994@xxxxxxxxx> wrote:

Well, that makes me feel better at least - that I'm not alone in
scratching my head over it I mean. Seems crazy to ship out a product that
contains significant vulnerabilities when they could re-package it with a
known good java version.



Chris



On Thu, Nov 12, 2015 at 5:33 PM, Tim Hall <tim@xxxxxxxxxxxxxxx> wrote:

Well:

1) Many (but not all) of the major security alerts around Java6 have
actually been on the client side, when running the Java plugins in
browser, so server side Java is not so much of a problem (insert
caveats here).
2) Cloud Control is not for public access, so...
3) WebLogic 11g (10.3.6) is still by far the most popular version at
this time. Oracle Fusion Apps is currently built on WebLogic 11g
10.3.6 using ADF 11.1.1.9. To my knowledge, it has not been migrated
to WebLogic 12c yet. With that in mind, it's hardly surprising other
projects have not moved forward yet.
4) The teams in Oracle each have their own deadlines and
time-to-market pressures mean they rarely use the latest products.
Testing your code base against a later release of the software takes
time that could be spent adding new features. This happens to all of
us. :)
5) Cloud Control is a shrink-wrapped application. You shouldn't be
using it for your own stuff, so why do you care what it's built with,
provided it passes your external penetration testing? I treat it like
a black box.
6) Oracle teams very rarely seem to look outside of themselves for
best practices provided by other teams. As proof I offer you the
database installations associated with eBusiness Suite, which don't
seem to follow simple best practices that I would consider DBA101.
Even if you are a good DBA, you have to check your real DBA hat in and
pick up a Oracle Apps DBA hat before doing any work on them, because
if you do things "correctly", the apps die. :)

This is not a defence of it, it's just an observation. I made a
similar comment about Java 6 when I first installed 12.1.0.5.


https://oracle-base.com/blog/2015/06/17/oracle-enterprise-manager-cloud-control-12c-release-5-12-1-0-5-my-first-two-installations/

I too get a little frustrated by this, but it is what I've come to
expect of nearly every large software vendor. Check out what's under
the hood of Microsoft BizTalk Server and you will see much the same
issues. It's cobbled together with loads of old bits of software, but
sold as a current "enterprise" solution... :)

Cheers

Tim...







--

Niall Litchfield
Oracle DBA
http://www.orawin.info



JPEG image

Other related posts:

  1. Home
  2. oracle-l
  3. Archive
  4. 11-2015