Error Starting OHS With Newly Imported Encrypted Certificates In The Wallet "nzos handshake error, nzos_Handshake returned 28858" (Doc ID 2241832.1)

Last updated on MARCH 27, 2017

Applies to:

Oracle HTTP Server - Version 11.1.1.0.0 to 12.2.1.2.0 [Release Oracle11g to 12c]
Information in this document applies to any platform.

Symptoms

On : 11.1.2.2.0 version

Imported new encrypted certificates into the Wallet using Fusion Middleware Control

Now, the INSTANCE_HOME/bin/opmnctl startall is unable to start OHS.

The ORACLE_INSTANCE/diagnostics/logs/OHS/ohs1/ohs1.log shows the following errors:

 

STEPS
-----------------------
The issue can be reproduced at will with the following steps:

1) Oracle Forms and Reports 11.1.2.x
2) Received replacement Certificate for soon going to expire Certificate.
3) Removed old Certificates and Certificate requests.
4) Imported newly received encrypted Certificates into the Wallet through Fusion Middleware Control.
5) Stopped FMW using command "opmnctl stopall"
6) Copied Wallet "cwallet.sso" in the right location.
7) Starting FMW using command "opmnctl startall" fails to start OHS.

 

Changes

 This Certificate is in encrypted format.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms