Wednesday, September 30, 2015

RDBMS -- ORA-28750: unkown error in SSL web service call

If you are trying to do someting like the following and end up with ORA-28750 error, then the server that you are trying to connect, is probably using an SHA2 ssl certificate.

SQL> DECLARE
2 lo_req UTL_HTTP.req;
3 lo_resp UTL_HTTP.resp;
4 BEGIN
5 UTL_HTTP.SET_WALLET ('file:/wallet/','welcome1');
6 lo_req := UTL_HTTP.begin_request('https://ip_address/erman?wsdl');
7 lo_resp := UTL_HTTP.get_response(lo_req);
8 dbms_output.put_line(lo_resp.status_code);
9 UTL_HTTP.end_response(lo_resp);
10 END;
11 /

DECLARE
*
ERROR at line 1:

ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1029
ORA-28750: unknown error
ORA-06512: at line

You may think that you wallet is problematic but it is not..
If that 's the case, then you are probably using an older version of Oracle Database :)
Something like 11.1.0.7 maybe... SHA2 is certified in Oracle Database 11.2.0.3 and above.
(To check the certificate you can just save it to your laptop, rename it to .cer then double click on it..)

So if that 's case, then you are two options:

1) upgrade your db ..
2) If the server that gives that web services is on your control, change the server side certificate to be 'GeoTrustSSLCA-G3'

We choose option 1 :) , as it is time.. it is even the time for an 12c upgrade..

4 comments :

  1. Hi Emran,

    I'm really stuck with this. Is there any way to make it work with oracle XE?

    Is there is any patch set to fix it? It tried to find patch 11.2.0.3 or higher for express edition with no luck.

    ReplyDelete
  2. Hi,

    check this url: https://blog.hazrulnizam.com/openssl-workaround-oracle-xe-wallet/
    There is a workaround there. I did not check it, but it worths to try maybe...

    ReplyDelete
  3. Hi Erman,
    Hope you would be able to see this comment. I have the exact issue but we are running Exadata on 11.2.0.2 and though upgrade is in planning, we need to do something to make this http call work. I have a ticket with support too. would they give a patch for this or do you think it is possible only after upgrading to 11.2.0.4?

    Thanks
    Kumar Ramalingam

    ReplyDelete
  4. Thanks a ton for your blog..saved my day..Oracle 11g version issue was not easy to find it out

    ReplyDelete

If you will ask a question, please don't comment here..

For your questions, please create an issue into my forum.

Forum Link: http://ermanarslan.blogspot.com.tr/p/forum.html

Register and create an issue in the related category.
I will support you from there.