OJR-00010 Oracle AS 10gR3 OC4J Instances Fail to Start with "SSL Setup Failure: No Such Provider: OraclePKI"

(Doc ID 1531368.1)

Last updated on AUGUST 25, 2017

Applies to:

Oracle Containers for J2EE - Version 10.1.3.5.0 to 10.1.3.5.0 [Release AS10gR3]
Information in this document applies to any platform.

Symptoms

In Oracle AS 10gR3 version 10.1.3.5 , the OC4J instances fail to start after an application redeployment when the secure-web-site.xml has beein configured to listen SSL.

The problem is reproduced in OC4J Standalone instances too.

In all cases, secure-web-site.xml file was created for SSL support in OC4J instances, using oracle wallet as in following example:

Fragment of secure-web-site.xml:

<web-site xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/web-site-10_0.xsd" port="8890" secure="true" display-name="OC4J 10g (10.1.3) Default Web Site" schema-major-version="10" schema-minor-version="0" >

<ssl-config keystore="/u01/app/wallet/ewallet.p12" keystore-password="<PASSWORD>" />


Right after enabling the secure HTTP web site, applications are accessible over SSL correctly as for example  https://host:8890/local.jsp

But after application redeploying, secure-web-site.xml is automatically changed to:

<ssl-config factory="com.evermind.ssl.JSSESSLServerSocketFactory" provider="OraclePKI" keystore="/u01/app/wallet/ewallet.p12" keystore-password="<PASSWORD>" truststore-password=""/>


As a result OC4J cannot start and returns the following error in opmn/logs log file

2011-01-14 09:35:55.576 ERROR J2EE HTTP-10001 Could not create Secure http listener due to {0}
2011-01-14 09:35:55.580 ERROR J2EE OJR-00010 Exception starting HTTP server: SSL setup failure: no such provider: OraclePKI
11/01/14 09:35:55 Error initializing server: Unable to start HTTP-Server. default-web-site configuration may not be valid.
11/01/14 09:35:57 Fatal error: server exiting


And log.xml shows

<MSG_TEXT>Could not create Secure http listener due to {0}</MSG_TEXT>
<SUPPL_DETAIL><![CDATA[java.security.NoSuchProviderException: no such provider: OraclePKI
at sun.security.jca.GetInstance.getService(GetInstance.java:66)
at sun.security.jca.GetInstance.getInstance(GetInstance.java:190)
at java.security.Security.getImpl(Security.java:661)
at java.security.KeyStore.getInstance(KeyStore.java:603)
at oracle.oc4j.security.OC4JSSLSocketFactory.getStore(OC4JSSLSocketFactory.java:230)
at oracle.oc4j.security.OC4JSSLSocketFactory.getKeyStore(OC4JSSLSocketFactory.java:182)
at oracle.oc4j.security.OC4JSSLSocketFactory.getKeyManager(OC4JSSLSocketFactory.java:269)
at oracle.oc4j.security.OC4JSSLSocketFactory.getSSLContext(OC4JSSLSocketFactory.java:394)
at oracle.oc4j.security.OC4JSSLSocketFactory.getSocketFactory(OC4JSSLSocketFactory.java:161)
at oracle.oc4j.security.OC4JSSLSocketFactory.createSSLSocketFactory(OC4JSSLSocketFactory.java:171)
at com.evermind.server.http.HttpConnectionListener.initHandlers(HttpConnectionListener.java:214)
at com.evermind.server.http.HttpConnectionListener.<init>(HttpConnectionListener.java:177)
at com.evermind.server.http.HttpServer.getListener(HttpServer.java:496)
at com.evermind.server.http.HttpServer.setSites(HttpServer.java:274)
at com.evermind.server.http.HttpServer.setConfig(HttpServer.java:180)
at com.evermind.server.ApplicationServer.initializeHttp(ApplicationServer.java:2541)
at com.evermind.server.ApplicationServer.setConfig(ApplicationServer.java:1058)
at com.evermind.server.ApplicationServerLauncher.run(ApplicationServerLauncher.java:131)
at java.lang.Thread.run(Thread.java:595)
]]>
</SUPPL_DETAIL>
</PAYLOAD>
</MESSAGE>
<MESSAGE>
<HEADER>
<TSTZ_ORIGINATING>2011-01-14T10:51:33.085+01:00</TSTZ_ORIGINATING>
<COMPONENT_ID>j2ee</COMPONENT_ID>
<MSG_ID>J2EE OJR-00010</MSG_ID>
<MSG_TYPE TYPE="ERROR"></MSG_TYPE>
<MSG_LEVEL>1</MSG_LEVEL>
<HOST_ID>pist.uni-mb.si</HOST_ID>
<HOST_NWADDR>127.0.0.1</HOST_NWADDR>
<MODULE_ID>runtime</MODULE_ID>
<THREAD_ID>10</THREAD_ID>
<USER_ID>oracle</USER_ID>
</HEADER>
<CORRELATION_DATA>
<EXEC_CONTEXT_ID><UNIQUE_ID>1109352225:22790:1294998693080:0</UNIQUE_ID><SEQ>0</SEQ></EXEC_CONTEXT_ID>
</CORRELATION_DATA>
<PAYLOAD>
<MSG_TEXT>Exception starting HTTP server: SSL setup failure: no such provider: OraclePKI</MSG_TEXT>
</PAYLOAD>
</MESSAGE>

Changes

The problem occurs right after a new application deployment 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms