My Oracle Support Banner

ORA-12650: No Common Encryption Or Data Integrity Algorithm When Using SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER=sha256 (Doc ID 2396891.1)

Last updated on JULY 23, 2018

Applies to:

JDBC - Version 11.2.0.1.0 to 11.2.0.4.0 [Release 11.2]
Information in this document applies to any platform.

Symptoms

Encryption and data integrity are required at the network level for security. The chosen standard for the Oracle 12.2 Checksum Level rollout is SHA256 or higher.

For this, the following ASO properties are configured in the database sqlnet.ora file:

#require encryption
SQLNET.ENCRYPTION_SERVER = REQUIRED

SQLNET.ENCRYPTION_TYPES_SERVER=(aes128, aes192, aes256) 

#require checksum 
SQLNET.CRYPTO_CHECKSUM_SERVER=required 
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER=(sha256) 

When trying to connect from a JDBC thin 11g program to this database, the connection fails with:

 

java.sql.SQLException: Oracle Error ORA-12650
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:800)
  at oracle.jdbc.driver.PhysicalConnection.connect(PhysicalConnection.java:793)
  at oracle.jdbc.driver.T4CDriverExtension.getConnection(T4CDriverExtension.java:33)
  at oracle.jdbc.driver.OracleDriver.connect(OracleDriver.java:614)
...
Caused by: oracle.net.ns.NetException: Oracle Error ORA-12650
  at oracle.net.ano.Ano.negotiation(Unknown Source)
  at oracle.net.ns.NSProtocol.connect(NSProtocol.java:308)
  at oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1606)
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:539)
  ... 27 more

Changes

 

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.