OID 12c/11g: DIP, EM, ODSM LDAPS / LDAP SSL Connections Fail Using JDK 1.8.0_201 / 1.7.0_211 or Higher. EM: Configuration settings are unavailable. DIP Log: Exception. ODSM: Server <HOSTNAME>:<SSL_PORT> has failed SSL verification (Doc ID 2511190.1)

Last updated on APRIL 01, 2024

Applies to:

Symptoms

LDAP / LDAP SSL previously working connections from Directory Integration Platform (DIP), Oracle Directory Services Manager (ODSM) and Enterprise Manager (EM) Fusion Middleware (FMW) Control to Oracle Internet Directory (OID) 12c or 11g fail after upgrading Java - 12c: JDK 1.8 Update 201 (JDK 1.8.0_201 / JDK 1.8u201) or higher, 11g: JDK 1.7 Update 211 (JDK 1.7.0_211 / JDK 1.7u211) or higher, e.g., as part of JAN2019 or higher CPU.

NOTE: Issue also will occur if using JDK 1.8.0_201 (12c) or JDK 1.7.0_211 (11g) or higher from the start of installation.

DIP Server startup in wls_ods1-diagnostic.log shows empty exception:

Command line ldap tools (ldapbind, ldapsearch, etc.) using the SSL port are not affected and continue to work fine.

Changes

Upgraded 1.8 JDK version to latest update 201 or higher (12c) / 1.7 JDK version to latest update 211 or higher (11g).

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.