My Oracle Support Banner

JDBC With SSL Fails To Connect To Oracle Database With Unsupported Ciphersuite Error (Doc ID 2534327.1)

Last updated on SEPTEMBER 03, 2020

Applies to:

JDBC - Version 12.1.0.2.0 and later
Information in this document applies to any platform.

Symptoms

When using JDBC thin driver ojdbc8.jar with JDK 1.8 to connect with SSL (using wallet by orapki) to an Oracle  Database 12.1.0.2, the connection fails with the following error:

java.lang.IllegalArgumentException: Unsupported ciphersuite SSL_RSA_WITH_AES_128_CBC_SHA
at sun.security.ssl.CipherSuite.valueOf(CipherSuite.java:237)
at sun.security.ssl.CipherSuiteList.<init>(CipherSuiteList.java:82)
at sun.security.ssl.SSLEngineImpl.setEnabledCipherSuites(SSLEngineImpl.java:2038)
at oracle.net.nt.TcpsConfigure.configureCipherSuites(TcpsConfigure.java:339)


SQL*Plus with SSL works on the same client.

 

sqlnet.ora includes:

WALLET_LOCATION =
  (SOURCE =
  (METHOD = FILE)
  (METHOD_DATA =
  (DIRECTORY = <DIR>\client_wallets)
  )
  )

SQLNET.AUTHENTICATION_SERVICES = (TCPS,NTS)
SSL_CLIENT_AUTHENTICATION = TRUE
SSL_CIPHER_SUITES = (SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA)

------------------------------------------

Changes

 Use wallet by orapki,

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.