My Oracle Support Banner

Error Starting OHS with Newly Imported Encrypted Certificates in the Wallet "nzos handshake error, nzos_Handshake returned 28858" (Doc ID 2241832.1)

Last updated on APRIL 28, 2023

Applies to:

Oracle HTTP Server - Version 11.1.1.0.0 to 12.2.1.2.0 [Release Oracle11g to 12c]
Information in this document applies to any platform.

Symptoms

Imported new encrypted certificates into the Wallet using Fusion Middleware Control

Now, the INSTANCE_HOME/bin/opmnctl startall is unable to start OHS.

The ORACLE_INSTANCE/diagnostics/logs/OHS/ohs1/ohs1.log shows the following errors:

 

The issue can be reproduced at will with the following steps:

1. Oracle Forms and Reports 11.1.2.x
2. Received replacement Certificate for soon going to expire Certificate.
3. Removed old Certificates and Certificate requests.
4. Imported newly received encrypted Certificates into the Wallet through Fusion Middleware Control.
5. Stopped FMW using command "opmnctl stopall"
6. Copied Wallet "cwallet.sso" in the right location.
7. Starting FMW using command "opmnctl startall" fails to start OHS.

Changes

 This Certificate is in encrypted format.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.