WebLogic supported Cyphers

The list of the possible strong cyphers not that long:

AES256-GCM-SHA384      TLSv1.2 Kx=RSA      Au=RSA  Enc=AESGCM(256) Mac=AEAD

AES256-SHA256                TLSv1.2 Kx=RSA     Au=RSA  Enc=AES(256)  Mac=SHA256

AES128-GCM-SHA256      TLSv1.2 Kx=RSA      Au=RSA  Enc=AESGCM(128) Mac=AEAD

AES128-SHA256                TLSv1.2 Kx=RSA     Au=RSA  Enc=AES(128)  Mac=SHA256

AES256-SHA                       SSLv3 Kx=RSA       Au=RSA  Enc=AES(256)  Mac=SHA1

DES-CBC3-SHA                  SSLv3 Kx=RSA      Au=RSA  Enc=3DES(168) Mac=SHA1

AES128-SHA                       SSLv3 Kx=RSA      Au=RSA  Enc=AES(128)  Mac=SHA1

and they are all supported by most popular Content Delivery appliances.

According to Oracle doc, WebLogic supports SSL3 and TLS1, you can restrict the protocols with the 2 properties weblogic.security.SSL.protocolVersion and weblogic.security.SSL.minimumProtocolVersion (funnily it seems that the property value is spelled slightly differently in the 2 properties)

Interestingly it seems that support for TLS version > 1.0 is available only with Java 7.

So if you run on Java 6 the only option available is using SSL3.

WebLogic these days supports only the "JSSE-based SSL implementation", and the Cypher Suites are listed here for Java 6 and Java 7

wlst goes in OutOfMemory... what to do?

If you invoke the wlst.sh, it's a can of worms of intricate shall calls, hard to disentangle:

/opt/oracle/fmw11_1_1_5/osb/common/bin/wlst.sh
/opt/oracle/fmw11_1_1_5/osb/common/bin/setHomeDirs.sh
/opt/oracle/fmw11_1_1_5/oracle_common/common/bin/wlst.sh
/opt/oracle/fmw11_1_1_5/wlserver_10.3/common/bin/wlst.sh
/opt/oracle/fmw11_1_1_5/wlserver_10.3/server/bin/setWLSEnv.sh



plus other stuff....

After some hunting, I discover that the JVM memory options are set in:


/opt/oracle/fmw11_1_1_5/wlserver_10.3/common/bin/commEnv.sh
and hardcoded to
MEM_ARGS=-Xms32m -Xmx200m -XX:MaxPermSize=128m

and there is no way you can pass these parameters BEFORE calling the script...

So finally your only option is to change commEnv.sh persistently...

Don't tell me this sucks, I already know...

So if you get the dreaded "Error: GC overhead limit exceeded", you can increase the MEM_ARGS settings or try to disable the error (I don't think this will help) with
-XX:-UseGCOverheadLimit

Israel bombing of Gaza: a very lame excuse

A few general meditations about the current destruction Israel is carrying out in a foreign country - in violation of all the possible international conventions.

*) 3 young Israelis are kidnapped by Palestinians on a road leading to a Settlement.
As far as I know all the roads to Settlements are strictly forbidden to Palestinians, apart the very few with a special permit. It should not be difficult to track them down and punish them.
What? 3 Israelis accepting to board a car driven by Palestinians? In an area where almost only Israeli people are driving by? That sound VERY weird.
A later version says that 2 of the kidnappers where Palestinians disguised as Jews. I think only a non-Jew could let himself fool into mistaking a Palestinian for a Traditional Jew, it's like for me to mistake a Norwegian for a Neapolitan... not for a split second... How many people can stay in a car, 5, the 3 kids and the 2 kidnappers.... so...

*) Minutes after the family receives a call from one of the boys, saying "we have been kidnapped".
Of course, nobody these days carries cell phones, how could the kidnappers think of searching the 3 boys for phones

*) in the phone call, 2 voices of the kidnappers are heard with strong Arabic accent, then shooting happens
of course, when the 3 kids boarded the car, the kidnappers were speaking perfect Hebrew without any accent...

*) despite the father reported to the police, they started acting only 3 hours later
Wait, Israel is spending zillions of dollars to bomb Gaza in retaliation, but when they were told they waited 3 hours to take into action? Mmmmmm..... And also, I am almost sure all the area is closely surveilled by satellite... are they searching for satellite images to detect who carried out the kidnapping?

*) The corpses of the 3 young Israelis are found the day after in Palestinian territory
As far as I know it's impossible to cross the border without being fully searched. Smuggling 3 corpses should be next to impossible.

More details are available here

I stop here... it's all really sad. I have full sympathy for Jews, but not for war criminals.

For those who like history, please read the event who brought to KristallNacht,  and tell me how different is what the Nazi did and what Israel is doing - a series of Pogroms against Palestinians.