Troubleshooting SSL
ORA-28786: Decryption of Encrypted Private Key Failure
ORA-28858: SSL Protocol Error
ORA-28859 SSL Negotiation Failure
ORA-28862: SSL Connection Failed
7-32 Oracle Database Advanced Security Administrator's Guide
Ensure that the correct wallet location is specified in the sqlnet.ora file.
Note: this should be the same directory location where you saved the
wallet.
Enable Oracle Net tracing to determine the name of the file that cannot be
opened and the reason.
Ensure that auto login was enabled when you saved the wallet. See
Auto Login"
on page 8-19
Cause: An incorrect password was used to decrypt an encrypted private key.
Frequently, this happens because an
Action: Use Oracle Wallet Manager to turn the auto login feature on for the
wallet. Then re-save the wallet. See
Cause: This is a generic error that can occur during SSL handshake negotiation
between two processes.
Action: Enable Oracle Net tracing and attempt the connection again to produce
trace output. Then contact Oracle customer support with the trace output.
Cause: An error occurred during the negotiation between two processes as part
of the SSL protocol. This error can occur when two sides of the connection do
not support a common cipher suite.
Action: Check the following:
Use Oracle Net Manager to ensure that the SSL versions on both the client
and the server match, or are compatible. For example, if the server accepts
only SSL 3.0 and the client accepts only TLS 1.0, then the SSL connection
will fail.
Use Oracle Net Manager to check what cipher suites are configured on the
client and the server, and ensure that compatible cipher suites are set on
both. See
"Step 4: Set the Client SSL Cipher Suites (Optional)"
for details about setting compatible cipher suites on the client and the
server. Note: if you do not configure any cipher suites, then all available
cipher suites are enabled.
Cause: This error occurred because the peer closed the connection.
auto login wallet
is not being used.
"Using Auto Login"
on page 8-19.
"Using
on page 7-28
Need help?
Do you have a question about the Oracle Database B10772-01 and is the answer not in the manual?