OEM13c: Attempting to Secure OEM Console Fails with "No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}"
(Doc ID 3008048.1)
Last updated on MARCH 01, 2024
Applies to:
Enterprise Manager Base Platform - Version 13.5.0.0.0 and laterInformation in this document applies to any platform.
Symptoms
On : 13.5.0.0.0 version, Security Framework
Attempting to Secure OEM Console Fails with "No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}"
$ $OMS_HOME/bin/emctl secure console -wallet /home/oracle/wallets
Oracle Enterprise Manager Cloud Control 13c Release 5
Copyright (c) 1996, 2021 Oracle Corporation. All rights reserved.
Securing Console... Started.
Enter Enterprise Manager Root (SYSMAN) Password :
Securing Console... Failed. Check the log /u02/oracle/gc_inst1/em/EMGC_OMS1/sysman/log/secure.log
secure.log from OEM shows entries like below.
2024-02-28 16:58:21,597 [main] INFO oms.SecureConsoleCmds - Wallet location: /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,608 [main] INFO oms.SecureConsoleCmds - Configuring external wallet for console: /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,609 [main] INFO oms.SecureConsoleCmds - Value of -host option: <Hostname.Domain>
2024-02-28 16:58:21,619 [main] INFO oms.SecureConsoleCmds - SLB Hostname property present in repos: null
2024-02-28 16:58:21,619 [main] INFO oms.SecureOMSCmds - Validating if user cert for <Hostname.Domain> exists in external wallet /home/oracle/wallets/oem_wallet/
2024-02-28 16:58:21,665 [main] ERROR oms.SecureConsoleCmds - Failed to secure the Console: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
java.io.IOException: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
at oracle.security.pki.OracleWallet.open(Unknown Source) ~[oraclepki.jar:?]
at oracle.sysman.emctl.secure.oms.SecureOMSCmds.validateExtWallet(SecureOMSCmds.java:2773) ~[emCoreSDKImpl.jar:?]
at oracle.sysman.emctl.secure.oms.SecureConsoleCmds.processSecureConsole(SecureConsoleCmds.java:344) ~[emCoreConsole.jar:?]
at oracle.sysman.emctl.secure.oms.SecureConsoleCmds.main(SecureConsoleCmds.java:172) [emCoreConsole.jar:?]
Caused by: oracle.security.crypto.asn1.ASN1FormatException: oracle.security.crypto.core.CipherException: oracle.security.crypto.core.InvalidKeyException: oracle.security.crypto.core.AlgorithmIdentifierException: No class found for OBJECT IDENTIFIER {1 2 840 113549 2 9}
at oracle.security.crypto.cert.PKCS12Safe.input(PKCS12Safe.java:222) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12Safe.<init>(PKCS12Safe.java:129) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12.input(PKCS12.java:179) ~[osdt_cert.jar:3.1.0]
at oracle.security.crypto.cert.PKCS12.<init>(PKCS12.java:122) ~[osdt_cert.jar:3.1.0]
at oracle.security.pki.OracleKeyStoreSpi.load(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleKeyStoreSpi.engineLoad(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleSSOKeyStoreSpi.engineLoad(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleSecretStore.load(Unknown Source) ~[oraclepki.jar:?]
at oracle.security.pki.OracleWallet.getSecretStore(Unknown Source) ~[oraclepki.jar:?]
... 4 more
Changes
Cause
To view full details, sign in with your My Oracle Support account. |
|
Don't have a My Oracle Support account? Click to get started! |
In this Document
Symptoms |
Changes |
Cause |
Solution |
References |