修改了系统时间,导致oem挂掉,然后oms也无法启动。为了记录这个解决办法,贴帖如下:
Note: In case of a multi-OMS setup, perform the steps below on each OMS Host
1.Make sure you take backup of DemoIdentity.jks and DemoTrust.jks files in the location /wlserver_10.3/server/lib/ folder
2.Set the necessary environment variables:
$ cd /user_projects/domains/GCDomain/bin
$ . ./setDomainEnv.sh
Note that you need to replace with the full path to the gc_inst directory.
3.Execute the command below to in any folder ($MIDDLEWARE_HOME/keystores is used as an example) to generate identity entities (server certificate plus key)
of keystrength 1024
$java utils.CertGen -keyfilepass DemoIdentityPassPhrase -certfile democert -keyfile demokey -strength 1024
Eg:
$ java utils.CertGen -keyfilepass DemoIdentityPassPhrase -certfile democert -keyfile demokey -strength 1024
Generating a certificate with common name srraghav-pc.idc.oracle.com and key strength 1024
issued by CA with certificate from /u02/12c2/Middleware/wlserver_10.3/server/lib/CertGenCA.der file and key from
/u02/12c2/Middleware/wlserver_10.3/server/lib/CertGenCAKey.der file
NOTE: This will create the files below in the current working directory.
democert.der
democert.pem
demokey.der
demokey.pem
4.Now execute the below command in same location to create a keystore and import the server certificate :
$java utils.ImportPrivateKey -keystore DemoIdentity.jks -storepass DemoIdentityKeyStorePassPhrase -keyfile demoKey -keyfilepass DemoIdentityPassPhrase -
certfile democert.pem -keyfile demokey.pem -alias demoidentity
Eg:
$java utils.ImportPrivateKey -keystore DemoIdentity.jks -storepass DemoIdentityKeyStorePassPhrase -keyfile demoKey -keyfilepass DemoIdentityPassPhrase -
certfile democert.pem -keyfile demokey.pem -alias demoidentity
No password was specified for the key entry
Key file password will be used
disable this change, specify -Dweblogic.security.allowCryptoJDefaultPRNG=true>
Imported private key demokey.pem and certificate democert.pem
into a new keystore DemoIdentity.jks of type jks under alias demoidentity
NOTE: This would create "DemoIdentity.jks" in the present working directory.
5.Confirm that the certificate (along with key) is imported:
keytool -list -v -keystore DemoIdentity.jks
(Listing keystore doesn't require password to be entered. Hence, user can simply press enter when prompted for password.)
Eg:
keytool -list -v -keystore DemoIdentity.jks
Enter keystore password:
***************** WARNING WARNING WARNING *****************
NOTE: The following files can be cleaned from the present directory as they are no longer needed:
democert.der
democert.pem
demokey.der
demokey.pem
5.Stop the OMS
/bin>./emctl stop oms -all
Ensure no process is running from MIDDLEWARE_HOME path.
6.Copy the newly created DemoIdentity.jks to /wlserver_10.3/server/lib/ directory
7.Start the OMS
/bin>./emctl start oms
请大家帮忙看看是什么原因,哪里有问题吗?急!谢谢!