{"id":456,"date":"2021-02-15T13:37:20","date_gmt":"2021-02-15T12:37:20","guid":{"rendered":"https:\/\/anjo.pt\/keyword-oracle\/?p=456"},"modified":"2021-02-15T13:37:21","modified_gmt":"2021-02-15T12:37:21","slug":"oem-agent-error-with-handshake-has-no-peer","status":"publish","type":"post","link":"https:\/\/anjo.pt\/keyword-oracle\/2021\/02\/15\/oem-agent-error-with-handshake-has-no-peer\/","title":{"rendered":"OEM Agent error with [handshake has no peer]"},"content":{"rendered":"\n<p>At a client, there is OEM 13.4 running without problems, being patched every three months with the latest PSU.<\/p>\n\n\n\n<p>Some old VMs have old Agents, like OEM Agent 13.2. <\/p>\n\n\n\n<p>Recently we noticed one corrective action failed with:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\nCorrective action output=Step aborted after 30 failed attempts to run. Last captured error message was: Caught agent exception&#x5B;unable to connect to http server at https:\/\/srv01234.domain.com:3872\/emd\/main\/. &#x5B;handshake has no peer](oracle.sysman.emSDK.agent.comm.exception.VerifyConnectionException)]\nError communicating with agent. Please also check incident console for possible job-system related problems.\n<\/pre><\/div>\n\n\n<p>The problem is that OEM Agent 13.2 uses by default the following Ciphers to communicate:<\/p>\n\n\n\n<!--more-->\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\n$ &amp;lt;AGENT_HOME&gt;\/bin\/emctl getproperty agent -name SSLCipherSuites\nOracle Enterprise Manager Cloud Control 13c Release 2\nCopyright (c) 1996, 2016 Oracle Corporation.  All rights reserved.\nSSLCipherSuites is unset; default value is SSL_RSA_WITH_RC4_128_MD5:SSL_RSA_WITH_RC4_128_SHA:SSL_RSA_WITH_3DES_EDE_CBC_SHA\n<\/pre><\/div>\n\n\n<p>But currently none of those Ciphers is supported with latest OEM 13.4.<\/p>\n\n\n\n<p>There is a Metalink note: <a rel=\"noreferrer noopener\" href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocContentDisplay?id=2381313.1\" target=\"_blank\">EM 13c: OMS Communication to all Agents Failing with &#8220;[handshake has no peer]&#8221; but Agents are able to Upload Successfully to the OMS (Doc ID 2381313.1)<\/a> which does not really bring the solution. <\/p>\n\n\n\n<p>One needs to check on <a rel=\"noreferrer noopener\" href=\"https:\/\/support.oracle.com\/epmos\/faces\/DocContentDisplay?id=2138391.1\" target=\"_blank\">13c: How to Disable Weak SSLCipherSuites in Enterprise Manager 13c Cloud Control (Doc ID 2138391.1)<\/a>, under Agent, to see how to configure Ciphers that are acceptable for both Agent 13.2 and OEM 13.4. <\/p>\n\n\n\n<p>The solution is then:<\/p>\n\n\n<div class=\"wp-block-syntaxhighlighter-code \"><pre class=\"brush: plain; title: ; notranslate\" title=\"\">\n$ &amp;lt;AGENT_HOME&gt;\/bin\/emctl setproperty agent -name SSLCipherSuites -value  TLS_RSA_WITH_AES_128_CBC_SHA:TLS_RSA_WITH_AES_256_CBC_SHA:RSA_WITH_AES_256_CBC_SHA256\n$ &amp;lt;AGENT_HOME&gt;\/bin\/emctl stop agent\n$ &amp;lt;AGENT_HOME&gt;\/bin\/emctl start agent\n<\/pre><\/div>\n\n\n<p>Of course a better solution would be to upgrade the OEM Agent to 13.4. \ud83d\ude42<\/p>\n","protected":false},"excerpt":{"rendered":"<p>At a client, there is OEM 13.4 running without problems, being patched every three months with the latest PSU. Some old VMs have old Agents, like OEM Agent 13.2. Recently we noticed one corrective action failed with: The problem is that OEM Agent 13.2 uses by default the following Ciphers to communicate:<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30],"tags":[],"class_list":{"0":"post-456","1":"post","2":"type-post","3":"status-publish","4":"format-standard","6":"category-oms","7":"czr-hentry"},"_links":{"self":[{"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/posts\/456","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/comments?post=456"}],"version-history":[{"count":1,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/posts\/456\/revisions"}],"predecessor-version":[{"id":457,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/posts\/456\/revisions\/457"}],"wp:attachment":[{"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/media?parent=456"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/categories?post=456"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/anjo.pt\/keyword-oracle\/wp-json\/wp\/v2\/tags?post=456"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}