Sunday, October 28, 2018

OEM 13c secure agent is failing with javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated

Today, i was doing the installation of OEM 13c Release 2 and as part of that installing the agent in the new host was error'ed óut with the below




Manually running the secure agent was also failing.

[oracle@rac2 agent]$ cd /u01/oem/oracle/agent/agent_inst/bin
[oracle@rac2 bin]$ ./emctl secure agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
Agent is already stopped...   Done.
Securing agent...   Started.
Enter Agent Registration Password :
Securing agent...   Failed.



Thus i checked the secure.log and found the message as "
2018-09-05 08:45:19,938 [main] ERROR agent.SecureAgentCmd main.353 - Failed to secure the Agent:
javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
        at sun.security.ssl.SSLSessionImpl.getPeerCertificateChain(SSLSessionImpl.java:470)
        at oracle.sysman.emctl.secure.agent.SecureAgentCmd.checkUpload(SecureAgentCmd.java:665)
        at oracle.sysman.emctl.secure.agent.SecureAgentCmd.secureAgent(SecureAgentCmd.java:450)
        at oracle.sysman.emctl.secure.agent.SecureAgentCmd.main(SecureAgentCmd.java:346)
2018-09-05 08:45:19,941 [main] INFO  agent.SecureAgentCmd main.355 - Re-trying. Trials left:0
[05-09-2018 08:45:19] USERINFO ::Securing agent...   Failed.""



Solution:-The time in the client machine as not correct. Changed it using the root user

[root@rac2 agent]# date -s "22:04:00 OCT 27, 2018"
Sat Oct 27 22:04:00 EDT 2018
[root@rac2 agent]# date
Sat Oct 27 22:04:06 EDT 2018


Thereafter Secure agent command got a successful run.


[oracle@rac2 bin]$ ./emctl secure agent
Oracle Enterprise Manager Cloud Control 13c Release 2
Copyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.
Agent is already stopped...   Done.
Securing agent...   Started.
Enter Agent Registration Password :
Securing agent...   Successful.


Hope it helps someone.