Skip to main content
Solved

Oracle Wallet Update Requires Reboot?


GPIE
Hero (Customer)
Forum|alt.badge.img+11
  • Hero (Customer)
  • 113 replies

Hi all,

We connected IFS to Slack to send notifications rather than using IFS Notify and it has worked perfectly until yesterday, when Slack changed their root certificates causing a trust failure. We imported the new root certificates into the Oracle wallet but the issue remains (see below). We also imported the root certs into Windows trusted root store as recommended by Slack.

The question is: Does anything need to be restarted, i.e. Oracle service, Oracle server, Middleware server etc?

Many thanks.

 

[Error] Execution (1: 1): ORA-29273: HTTP request failed

ORA-29024: Certificate validation failure

ORA-06512: at "SYS.UTL_HTTP", line 380

ORA-06512: at "SYS.UTL_HTTP", line 1127

ORA-06512: at line 36

 

Best answer by GPIE

Thanks Charith. The API call is being done by the database server so is independent of the middleware server.

As suspected, after adding the trusted root certificates to the wallet and restarting the server, Slack comms worked again (although I’m not sure if just a database restart would have worked just as well). The process looked something like this:

  1. Download DER root certificates and copy to E:\app\oracle\wallet\
  2. Start Menu > “Oracle - OraDB12Home1” > Wallet Manager
  3. Wallet > Open
  4. Do you want to continue > Yes
  5. Select Directory E:\app\oracle\wallet\
  6. Enter password
  7. Wallet > RMB on Trusted Certificates branch > Import Trusted Certificate
  8. Select a file that contains the certificate
  9. Browse to E:\app\oracle\wallet\
  10. Choose certificate(s) > OK
  11. Wallet > Save
  12. Restart Oracle or Database Server
View original
Did this topic help you find an answer to your question?

3 replies

Charith Epitawatta
Ultimate Hero (Employee)
Forum|alt.badge.img+31

Hi @GPIE,

Not sure how this integration is setup, but could you try importing the certificate to the MWS Java truststore by following the steps mentioned in below documentation:

https://docs.ifs.com/techdocs/foundation1/020_installation/400_installation_options/003_security/020_configure_outbound_ssl/default.htm

Hope this helps!


GPIE
Hero (Customer)
Forum|alt.badge.img+11
  • Author
  • Hero (Customer)
  • 113 replies
  • Answer
  • March 16, 2023

Thanks Charith. The API call is being done by the database server so is independent of the middleware server.

As suspected, after adding the trusted root certificates to the wallet and restarting the server, Slack comms worked again (although I’m not sure if just a database restart would have worked just as well). The process looked something like this:

  1. Download DER root certificates and copy to E:\app\oracle\wallet\
  2. Start Menu > “Oracle - OraDB12Home1” > Wallet Manager
  3. Wallet > Open
  4. Do you want to continue > Yes
  5. Select Directory E:\app\oracle\wallet\
  6. Enter password
  7. Wallet > RMB on Trusted Certificates branch > Import Trusted Certificate
  8. Select a file that contains the certificate
  9. Browse to E:\app\oracle\wallet\
  10. Choose certificate(s) > OK
  11. Wallet > Save
  12. Restart Oracle or Database Server

Rusiiiru
Sidekick (Partner)
Forum|alt.badge.img+8
  • Sidekick (Partner)
  • 43 replies
  • April 8, 2024

In Linux DB Server what are the step to do this?

 


Reply


Cookie policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie settings