Weblogic NodeManager SSL HandShake Exception while starting

Exception:

<May 19, 2016 4:37:35 AM PDT> <Warning> <Security> <BEA-090476> <Invalid/unknown SSL header was received from peer localhost - 127.0.0.1 during SSL handshake.>

<May 19, 2016 4:37:35 AM> <WARNING> <Uncaught exception in server handlerjavax.net.ssl.SSLHandshakeException: [Security:090476]Invalid/unknown SSL header was received from peer localhost - 127.0.0.1 during SSL handshake.>

javax.net.ssl.SSLHandshakeException: [Security:090476]Invalid/unknown SSL header was received from peer localhost - 127.0.0.1 during SSL handshake.

        at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireException(Unknown Source)

        at com.certicom.tls.interfaceimpl.TLSConnectionImpl.fireAlertSent(Unknown Source)

        at com.certicom.tls.record.ReadHandler.fireAlert(Unknown Source)

        at com.certicom.tls.record.ReadHandler.getProtocolVersion(Unknown Source)

        at com.certicom.tls.record.ReadHandler.checkVersion(Unknown Source)

        at com.certicom.tls.record.ReadHandler.readRecord(Unknown Source)

        at com.certicom.tls.record.ReadHandler.readUntilHandshakeComplete(Unknown Source)

        at com.certicom.tls.interfaceimpl.TLSConnectionImpl.completeHandshake(Unknown Source)

        at com.certicom.tls.record.ReadHandler.read(Unknown Source)

        at com.certicom.io.InputSSLIOStreamWrapper.read(Unknown Source)

Resolution:

By Default Node Manager will start in a secure port and it should be disabled in "nodemanager.properties"

<May 19, 2016 4:58:36 AM> <INFO> <Secure socket listener started on port 5556>

May 19, 2016 4:58:36 AM weblogic.nodemanager.server.SSLListener run

INFO: Secure socket listener started on port 5556

[weblogic@localhost nodemanager]$ more nodemanager.properties

#Tue May 10 00:52:47 PDT 2016

DomainsFile=/opt/wls/wlserver/common/nodemanager/nodemanager.domains

LogLimit=0

PropertiesVersion=10.3

DomainsDirRemoteSharingEnabled=false

javaHome=/usr/java/jdk1.7.0_79/

AuthenticationEnabled=false

NodeManagerHome=/opt/wls/wlserver/common/nodemanager

JavaHome=/usr/java/jdk1.7.0_79/jre

LogLevel=INFO

DomainsFileEnabled=true

StartScriptName=startWebLogic.sh

ListenAddress=

NativeVersionEnabled=true

ListenPort=5556

LogToStderr=true

SecureListener=false

LogCount=1

DomainRegistrationEnabled=false

StopScriptEnabled=false

QuitEnabled=false

LogAppend=true

StateCheckInterval=500

CrashRecoveryEnabled=false

StartScriptEnabled=false

Update the StartNodeManager.sh  JAVA_OPTS section with below startup argument  ( Update the StartNodeManager.sh and put this line before weblogic.NodeManager)

 "-Dweblogic.nodemanager.sslHostNameVerificationEnabled=false"

Update the AdminServer JAVA_OPTS with the below argument

java -server -Xmx512m -Xms512m -XX:MaxPermSize=128m -DWeblogic.Name=AdminServer -Dweblogic.Stdout="/tmp/AdminOut.log" -Dweblogic.Stderr="/tmp/AdminErr.log" -Dweblogic.security.SSL.ignoreHostnameVerification=true weblogic.Server

Start the Node Manager now using "/opt/wls/wlserver/server/bin/StartNodeManager.sh" script or by commandline as follows

/usr/java/jdk1.7.0_79//bin/java -Xms32m -Xmx200m -Dcoherence.home=@COHERENCE_HOME -Dbea.home=/opt/wls -Djava.security.policy=/opt/wls/wlserver/server/lib/weblogic.policy -Dweblogic.nodemanager.javaHome=/usr/java/jdk1.7.0_79/ -Djava.library.path=/opt/wls/wlserver/server/native/linux/x86_64/ -Dweblogic.nodemanager.sslHostNameVerificationEnabled=false weblogic.NodeManager

Check the Node manager Status in the Console. Now it should be Reachable