My Oracle Support Banner

OUD 11g - Cannot Change Replication Certificate, after Deleting the OUD instance that was using that Certificate and Rebuilding the Instance using the Same Original Keystore (Doc ID 2312448.1)

Last updated on APRIL 30, 2019

Applies to:

Oracle Unified Directory - Version 11.1.2.3.0 and later
Information in this document applies to any platform.

Symptoms

The following scenario is described:

Issue: OUD - Cannot change replication certificate

Trying to run the command to replace the self-signed certificate used for OUD replication.

An example of the command used, may be as follows:

dsreplication set-cert \
  --hostname host.domain.com \
  --port 4444 \
  --replCertNickName "name-oud_2048_ad_ssl" \
  --replKeyStoreType JKS \
  --replKeyStorePath /oracle/product/oud/oud_cert/keystore \
  --replKeyStorePasswordFile /oracle/product/oud/oud_cert/keystore.pin \
  --adminUID admin \
  --trustStorePath /oracle/product/oud/mw_home/oudinst_name/OUD/config/truststore

Notes

The JKS keystore file in the directory is valid. It's being used for HTTPS with ODSM.


Error Output Reported

When running the above command the following error may be displayed:


>>>> Specify Oracle Unified Directory LDAP connection parameters

Password for user 'admin':

Establishing connections and reading configuration ..................... Done.

The certificate of server hostname.domain.com:4444 cannot be updated
because some symmetric keys cannot be decoded. If you have updated the
certificates recently, you can wait for the registration data to synchronize
and try again later.
The following cipher symmetric keys cannot be decoded:
c17ee763-fc11-46df-b6a1-81985565725c


Attempted Resolution Notes

- Already tried to use the steps in Doc ID 2262484.1 but that did not resolve the issue.
- When trying to use the "Regenerate the Certificate Used for Replication" option, the same error is shown.

Changes

 Attempting to set a new OUD replication certificate.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.