Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...
Date: Fri, 13 Nov 2015 14:46:42 -0600
Message-ID: <CAP79kiSQfaiMtg-vRwsddK1iXTzjN3wVHvm89wc8D=Gr-iz5eg_at_mail.gmail.com>
*Supposedly *Java 1.7 (any version) is supported with Weblogic 10.3.6 and 12.x (according to the metalink documents). There wasn't a clear certification matrix that was easy to tie WLS 10.3.6/12.x to specific JDK versions and updates that I could find however.
Chris
On Fri, Nov 13, 2015 at 11:07 AM, Peter Sharman <pete.sharman_at_oracle.com> wrote:
> Sigh, we DO certify versions for a reason, you know! ;)
>
>
>
> Pete
>
> [image: Oracle logo]
>
> Pete Sharman
> Database Architect, DBaaS / DBLM
> Enterprise Manager Product Suite
> 33 Benson Crescent CALWELL ACT 2905 AUSTRALIA
>
> Phone: +61262924095 | | Mobile: *+61414443449 <%2B61414443449>*
> Email: pete.sharman_at_oracle.com Twitter: _at_SharmanPete LinkedIn:
> au.linkedin.com/in/petesharman
> Website: petewhodidnottweet.com
> ------------------------------
>
> "Controlling developers is like herding cats."
>
> Kevin Loney, Oracle DBA Handbook
>
>
>
> "Oh no, it's not, it's much harder than that!"
>
> Bruce Pihlamae, long term Oracle DBA
> ------------------------------
>
>
>
> *From:* Chris Taylor [mailto:christopherdtaylor1994_at_gmail.com]
> *Sent:* Saturday, November 14, 2015 12:39 AM
> *To:* Niall Litchfield <niall.litchfield_at_gmail.com>
> *Cc:* Tim Hall <tim_at_oracle-base.com>; Oracle-L Freelists <
> oracle-l_at_freelists.org>
> *Subject:* Re: WHY WHY does Oracle OEM 12c (12.1.0.5) use the following...
>
>
>
> In the spirit of full ownership of crap I spew, Niall is exactly right. I
> updated the JRE for the OEM 12c (12.1.0.5) and immediately things started
> breaking. Apparently, after Java 1.7 u 85, RC4 ciphers have been removed
> which Grid apparently uses so you have to update some things. *sigh*
>
>
>
> Metalink Docs of note:
>
> *How to Install and Maintain the Java SE Installed or Used with FMW
> 11g/12c Products (Doc ID 1492980.1)*
>
> *MBean Error Accessing HTTP Server Configuration in FMW Control (/em) -
> After Upgrading JDK (Doc ID 2049077.1)*
>
> Note 1067411.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1067411.1> How
> To Disable Anonymous and Weak Cipher Suites in Oracle WebLogic Server
>
> Note 1463846.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1463846.1> JDK
> 7 BREAKS EM CONSOLE WHEN ATTEMPTING TO EDIT CONFIG FILES FMW 11.1.1.6 -
> 11.1.2.1
>
> Note 1598061.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1598061.1> JDK
> 7: OWM Fails with the Error, "This function should be called while holding
> treeLock"
>
> Note 1943873.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1943873.1> Latest
> JDK 6 or 7: Patch 17337741 Causes Error "Too few bytes (1) received from
> OPMN response" While Trying to Manage System Components Using FMW Control
> Note 1450179.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1450179.1> Solaris
> OS: Managed Servers of a Portal, Forms, Reports, Discoverer Installation
> Fail to Start with Java 7 with the Error "Unknown keyword
> 'useEcX963Encoding"
> Note 1987534.1
> <https://support.oracle.com/epmos/faces/DocumentDisplay?parent=DOCUMENT&sourceId=1492980.1&id=1987534.1> IBM
> JDK: When Trying To Login To EM FMW Control - Error Is Returned:
> "User is not authorized to login to WebLogic
> Domain. User should be part of one or more Administrative roles to be able
> to login"
>
>
>
>
>
> On Thu, Nov 12, 2015 at 6:24 PM, Niall Litchfield <
> niall.litchfield_at_gmail.com> wrote:
>
> I suspect you underestimate the engineering effort required to ensure that
> that change of JVM doesn't in fact hobble anything. I mean why does anyone
> run apps against Oracle 11.2 - 12.1 is just a version change right :)
>
>
>
> On Fri, Nov 13, 2015 at 12:12 AM, Chris Taylor <
> christopherdtaylor1994_at_gmail.com> wrote:
>
> Well, that makes me feel better at least - that I'm not alone in
> scratching my head over it I mean. Seems crazy to ship out a product that
> contains significant vulnerabilities when they could re-package it with a
> known good java version.
>
>
>
> Chris
>
>
>
> On Thu, Nov 12, 2015 at 5:33 PM, Tim Hall <tim_at_oracle-base.com> wrote:
>
> Well:
>
> 1) Many (but not all) of the major security alerts around Java6 have
> actually been on the client side, when running the Java plugins in
> browser, so server side Java is not so much of a problem (insert
> caveats here).
> 2) Cloud Control is not for public access, so...
> 3) WebLogic 11g (10.3.6) is still by far the most popular version at
> this time. Oracle Fusion Apps is currently built on WebLogic 11g
> 10.3.6 using ADF 11.1.1.9. To my knowledge, it has not been migrated
> to WebLogic 12c yet. With that in mind, it's hardly surprising other
> projects have not moved forward yet.
> 4) The teams in Oracle each have their own deadlines and
> time-to-market pressures mean they rarely use the latest products.
> Testing your code base against a later release of the software takes
> time that could be spent adding new features. This happens to all of
> us. :)
> 5) Cloud Control is a shrink-wrapped application. You shouldn't be
> using it for your own stuff, so why do you care what it's built with,
> provided it passes your external penetration testing? I treat it like
> a black box.
> 6) Oracle teams very rarely seem to look outside of themselves for
> best practices provided by other teams. As proof I offer you the
> database installations associated with eBusiness Suite, which don't
> seem to follow simple best practices that I would consider DBA101.
> Even if you are a good DBA, you have to check your real DBA hat in and
> pick up a Oracle Apps DBA hat before doing any work on them, because
> if you do things "correctly", the apps die. :)
>
> This is not a defence of it, it's just an observation. I made a
> similar comment about Java 6 when I first installed 12.1.0.5.
>
>
> https://oracle-base.com/blog/2015/06/17/oracle-enterprise-manager-cloud-control-12c-release-5-12-1-0-5-my-first-two-installations/
>
> I too get a little frustrated by this, but it is what I've come to
> expect of nearly every large software vendor. Check out what's under
> the hood of Microsoft BizTalk Server and you will see much the same
> issues. It's cobbled together with loads of old bits of software, but
> sold as a current "enterprise" solution... :)
>
> Cheers
>
> Tim...
>
>
>
>
>
>
>
> --
>
> Niall Litchfield
> Oracle DBA
> http://www.orawin.info
>
>
>
-- http://www.freelists.org/webpage/oracle-lReceived on Fri Nov 13 2015 - 21:46:42 CET