Security

This section describes known issues and associated solutions related to Application Server and web application security and certificates.

Cannot Run WebServiceSecurity Applications on Enterprise Edition With J2SE 5.0 (ID 6183318)

WebServiceSecurity applications cannot run with J2SE 5.0 for the following reasons:

• J2SE 5.0 PKCS11 does not support UNWRAP mode

• J2SE 5.0 PKCS11 does not support RSA/ECB/OAEPWithSHA1AndMGF1Padding with PKCS11

Solution

Use J2SE 1.4.2 with any other JCE provider (not the one included by default). Note that hardware accelerator support will not be present in this configuration.

SSL Termination Not Working (ID 6269102)

When Load Balancer (Hardware) is configured for SSL termination, the Application Server changes the protocol from https to http during redirection.

Solution

Add a software load balancer between the hardware load balancer and the Application Server.