error 11321 Connection from browser cannot be established

After enabling SSL on both SSO and Oracle Portal/WebCache you see the 
following errors in your Oracle WebCache event_log:

webcache.webcache-> pwd
/u01/app/oracle/product/10gAS/webcache/logs

tail event_log

[01/Mar/2007:23:17:30 -0800] [req-info] [ecid: 144405569959,0] [client: 198.201.137.178] [host: -] [url: -]
[01/Mar/2007:23:17:30 -0800] [error 11321] [ecid: 144405569959,0] Connection from browser cannot be established.
[01/Mar/2007:23:17:30 -0800] [req-info] [ecid: 131520668052,0] [client: 198.201.137.178] [host: -] [url: -]
[01/Mar/2007:23:17:30 -0800] [error 11321] [ecid: 131520668052,0] Connection from browser cannot be established.
[01/Mar/2007:23:17:30 -0800] [req-info] [ecid: 161585439167,0] [client: 198.201.137.178] [host: -] [url: -]
[01/Mar/2007:23:17:30 -0800] [error 11321] [ecid: 161585439167,0] Connection from browser cannot be established.
[01/Mar/2007:23:17:30 -0800] [req-info] [ecid: 148700537266,0] [client: 198.201.137.178] [host: -] [url: -]
[01/Mar/2007:23:17:30 -0800] [error 11321] [ecid: 148700537266,0] Connection from browser cannot be established.
[01/Mar/2007:23:18:09 -0800] [req-info] [ecid: 110045831524,0] [client: 198.201.137.178] [host: -] [url: -]
[01/Mar/2007:23:18:09 -0800] [error 11321] [ecid: 110045831524,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 161585538981,0] [client: 198.201.137.101] [host: -] [url: -]
[01/Mar/2007:23:19:47 -0800] [error 11321] [ecid: 161585538981,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 148700637079,0] [client: 198.201.137.101] [host: -] [url: -]
[01/Mar/2007:23:19:47 -0800] [error 11321] [ecid: 148700637079,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 144405669771,0] [client: 198.201.137.101] [host: -] [url: -]
[01/Mar/2007:23:19:47 -0800] [error 11321] [ecid: 144405669771,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 131520767865,0] [client: 198.201.137.101] [host: -] [url: -]
[01/Mar/2007:23:19:47 -0800] [error 11321] [ecid: 131520767865,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 118635865961,0] [client: 198.201.137.101] [host: -] [url: -]
[01/Mar/2007:23:19:47 -0800] [error 11321] [ecid: 118635865961,0] Connection from browser cannot be established.
[01/Mar/2007:23:19:47 -0800] [req-info] [ecid: 110045931333,0] [client: 198.201.137.101] [host: -] [url: -]

At the same time your OEM dashboard shows both Portal and SSO targets as Down (red arrow).

SOLUTION:

Configure OEM Beacons to Monitor Web Applications Over HTTPS

Explanation:
    This is required so that OEM can monitor Targets via an HTTPS URL
    if not done Single Sign-On:orasso and Portal:portal will have a Red status (Down)
    in the Application Server: infra.db.domain.com dashboard and
           Application Server: portal.web.domain.com


Add all required Certificates of that Certificate Authority to the list of 
Certificate Authorities recognized by Beacon software.

Out of the box Beacon software is preconfigured to recognize most 
commercial Certificate Authorities but in this case SSL certificate
was signed by a CA that is not recognized by the Beacon software.
You need to add the Certificate of that Certificate Authority
to the list of Certificate Authorities recognized by Beacon.

Your CA should provide you with the CA certificates required for installation.
These certificates are in a form of BASE64 encoding -- you will need to add all
of them to the end of b64InternetCertificate.txt file:


Edit the b64InternetCertificate.txt file and add the contents of the Certificate file

NOTE: DO THIS FOR BOTH INFRA (db.domain.com) and PORTAL (web.domain.com)

cp -p $ORACLE_HOME/sysman/config/b64InternetCertificate.txt \
      $ORACLE_HOME/sysman/config/b64InternetCertificate.txt.bak

vi $ORACLE_HOME/sysman/config/b64InternetCertificate.txt

add all nessesary CA certificates at the end of the file, for example:

-----BEGIN CERTIFICATE-----
MIIETzCCAzegAwIBAgIQHM5EYpUZep1jUvnyI6m2mDANBgkqhkiG9w0BAQUFADCB
lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug
Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho
dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt
SGFyZHdhcmUwHhcNMDUwNjA3MDgwOTEwWhcNMTkwNzA5MTgxOTIyWjBvMQswCQYD
...
gIAoQYFQtxMuyLnJegB2aEbQiIxh/tC21UcFF7ktdnDoTlA6w3pLuvunaI84Of3o
2YBrhzkTbCfaYk5JRlTpudW9DkUkHBsyx3nknPKnplkIGaK0jgn8E0n+SFabYaHk
I9LroYT/+JtLefh9lgBdAgVv0UPbzoGfuDsrk/Zh+UrgbLFpHoVnElhzbkh64Z0X
OGaJunQc68cCZu5HTn/aK7fBGMcVflRCXLVEQpU9PIAdGA8Ynvg684t8GMaKsRl1
jIGZ
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIETzCCAzegAwIBAgIQHM5EYpUZep1jUvnyI6m2mDANBgkqhkiG9w0BAQUFADCB
lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug
Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho
dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt
SGFyZHdhcmUwHhcNMDUwNjA3MDgwOTEwWhcNMTkwNzA5MTgxOTIyWjBvMQswCQYD
VQQGEwJTRTEUMBIGA1UEChMLQWRkVHJ1c3QgQUIxJjAkBgNVBAsTHUFkZFRydXN0
...
2YBrhzkTbCfaYk5JRlTpudW9DkUkHBsyx3nknPKnplkIGaK0jgn8E0n+SFabYaHk
I9LroYT/+JtLefh9lgBdAgVv0UPbzoGfuDsrk/Zh+UrgbLFpHoVnElhzbkh64Z0X
OGaJunQc68cCZu5HTn/aK7fBGMcVflRCXLVEQpU9PIAdGA8Ynvg684t8GMaKsRl1
jIGZ
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIEdDCCA1ygAwIBAgIQRL4Mi1AAJLQR0zYq/mUK/TANBgkqhkiG9w0BAQUFADCB
lzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAlVUMRcwFQYDVQQHEw5TYWx0IExha2Ug
Q2l0eTEeMBwGA1UEChMVVGhlIFVTRVJUUlVTVCBOZXR3b3JrMSEwHwYDVQQLExho
dHRwOi8vd3d3LnVzZXJ0cnVzdC5jb20xHzAdBgNVBAMTFlVUTi1VU0VSRmlyc3Qt
SGFyZHdhcmUwHhcNOTkwNzA5MTgxMDQyWhcNMTkwNzA5MTgxOTIyWjCBlzELMAkG
...
CJChicsZUN/KHAG8HQQZexB2lzvukJDKxA4fFm517zP4029bHpbj4HR3dHuKom4t
3XbWOTCC8KucUvIqx69JXn7HaOWCgchqJ/kniCrVWFCVH/A7HFe7fRQ5YiuayZSS
KqMiDP+JJn1fIytH1xUdqWqeUQ0qUZ6B+dQ7XnASfxAynB67nfhmqA==
-----END CERTIFICATE-----


REFERENCE:
   4.7.2 Configuring Beacons to Monitor Web Applications Over HTTPS