Two Way SSL Failed with "Unparseable CRLDistributionPoints extension due to java.io.IOException"

(Doc ID 1635164.1)

Last updated on NOVEMBER 05, 2016

Applies to:

Oracle WebLogic Server - Version 10.3 and later
Information in this document applies to any platform.

Symptoms

When attempting to making a remote web service call using 2-way SSL, the following error occurs.

[ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)', Exception while waiting for close javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure
[ACTIVE] ExecuteThread: '5' for queue: 'weblogic.kernel.Default (self-tuning)', handling exception: javax.net.ssl.SSLHandshakeException: Received fatal alert: handshake_failure

When using keytool to list client certificate it shows: 

#6: ObjectId: 2.5.29.31 Criticality=false
Unparseable CRLDistributionPoints extension due to
java.io.IOException: invalid URI name:ldap://10.1.1.11:389/cn=Test CA,c=US,ou=Test,o=Test?certificateList

0000: 30 81 D0 30 81 A5 A0 81 A2 A0 81 9F 86 81 9C 6C 0..0...........l
0010: 64 61 70 3A 2F 2F 31 30 2E 32 30 33 2E 31 30 35 dap://10.203.105
0020: 2E 31 31 3A 33 38 39 2F 63 6E 3D 56 69 73 61 20 .11:389/cn=Visa
0030: 49 6E 66 6F 72 6D 61 74 69 6F 6E 20 44 65 6C 69 Information Deli
0040: 76 65 72 79 20 51 41 20 49 6E 74 65 72 6E 61 6C very QA Internal
0050: 20 49 73 73 75 69 6E 67 20 43 41 2C 63 3D 55 53 Issuing CA,c=US
0060: 2C 6F 75 3D 56 69 73 61 20 49 6E 74 65 72 6E 61 ,ou=Visa Interna
0070: 74 69 6F 6E 61 6C 20 53 65 72 76 69 63 65 20 41 tional Service A
0080: 73 73 6F 63 69 61 74 6F 69 6E 2C 6F 3D 56 49 53 ssociatoin,o=VIS
0090: 41 3F 63 65 72 74 69 66 69 63 61 74 65 52 65 76 A?certificateRev
00A0: 6F 63 61 74 69 6F 6E 4C 69 73 74 30 26 A0 24 A0 ocationList0&.$.
00B0: 22 86 20 68 74 74 70 3A 2F 2F 31 30 2E 32 30 33 ". http://10.203
00C0: 2E 31 30 35 2E 31 31 2F 56 49 43 41 34 51 41 2E .105.11/VICA4QA.
00D0: 63 72 6C crl

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms