security - How to stop Weblogic when using domain administration port? -

i activated domain admin port(9042 in case) via admin console, no restart needed. changed stop script:

admin_url="t3s://localhost:9042" 

i changed setdomainenv.sh:

java_options="${java_options} -dweblogic.security.trustkeystore=demotrust" 

but when run stopweblogic.sh get:

javax.naming.communicationexception [root exception java.net.connectexception: t3s://localhost:9042: destination unreachable; nested exception is:      java.io.ioexception: stream closed.; no available router destination] problem invoking wlst - traceback (innermost last):   file "/home/pi/programs/oracle/middleware/sand_box/domains/prod_basic/shutdown.py", line 3, in ?   file "<iostream>", line 22, in connect   file "<iostream>", line 648, in raisewlstexception wlstexception: error occured while performing connect : error getting initial context. there no server running @ t3s://localhost:9042  use dumpstack() view full stacktrace 

what proper way of doing this?

p.d. tried other adminserver ports 7001 , 7002, of course says(as should):

wlstexception: error occured while performing connect : user 'principals=[weblogic, administrators]' has administration role. tasks adminstrators must go through administration port. 

i wanted ask clarification new , stackoverflow not allowing me ask clarification. hence posting answer.

if adminserver , managed servers share same ssl configuration (like demoidentity , demotrust) best practice modify setdomainenv.sh have done. if wls instances on other hand have different ssl configuration (like demoidentity , demotrust adminserver, , customidentity , javastandardtrust managed servers) best practice modify stop scripts "domain_home/bin/stopweblogic.sh" , "domain_home/bin/stopmanagedweblogic.sh", setting admin_url t3s based.

onto issue, try following 2 flags , see if helps find root-cause:

-dweblogic.security.ssl.verbose=true  -dweblogic.stdoutdebugenabled=true  

these give ssl debug entries while wlst session tries connect "localhost:9042".

additionally, if cn of demoidentity certificate other "localhost" (use command "keytool -list -v -keystore wl_home/server/lib/demoidentity.jks") , need set:

-dweblogic.security.ssl.ignorehostnameverification=true