Connect Reset By Peer When SQLNET.CRYPTO_CHECKSUM_SERVER=REQUIRED (Doc ID 2805335.1)

Last updated on JANUARY 04, 2023

Applies to:

Symptoms

Exception java.io.IOException: An existing connection was forcibly closed by the remote host is received when using TCPS connection from an application using JDBC 21.1 and SQLNET.CRYPTO_CHECKSUM_SERVER=REQUIRED in the database sqlnet.ora file.

ERROR
-----------------------
java.io.IOException: An existing connection was forcibly closed by the remote host, Authentication lapse 0 ms.
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:870)
  ... 7 more
Caused by: java.io.IOException: An existing connection was forcibly closed by the remote host
  at sun.nio.ch.SocketDispatcher.read0(Native Method)
  at sun.nio.ch.SocketDispatcher.read(SocketDispatcher.java:43)
  at sun.nio.ch.IOUtil.readIntoNativeBuffer(IOUtil.java:223)
  at sun.nio.ch.IOUtil.read(IOUtil.java:197)
  at sun.nio.ch.SocketChannelImpl.read(SocketChannelImpl.java:380)
  at oracle.net.nt.TimeoutSocketChannel.read(TimeoutSocketChannel.java:174)
  at oracle.net.nt.SSLSocketChannel.readFromSocket(SSLSocketChannel.java:560)
  at oracle.net.nt.SSLSocketChannel.fillReadBuffer(SSLSocketChannel.java:328)
  at oracle.net.nt.SSLSocketChannel.fillAndUnwrap(SSLSocketChannel.java:258)
  at oracle.net.nt.SSLSocketChannel.read(SSLSocketChannel.java:109)
  at oracle.net.ns.NSProtocolNIO.doSocketRead(NSProtocolNIO.java:555)
  at oracle.net.ns.NIOPacket.readHeader(NIOPacket.java:258)
  at oracle.net.ns.NIOPacket.readPacketFromSocketChannel(NIOPacket.java:190)
  at oracle.net.ns.NIOPacket.readFromSocketChannel(NIOPacket.java:132)
  at oracle.net.ns.NIOPacket.readFromSocketChannel(NIOPacket.java:105)
  at oracle.net.ns.NIONSDataChannel.readDataFromSocketChannel(NIONSDataChannel.java:91)
  at oracle.net.ano.AnoCommNIO.p(Unknown Source)
  at oracle.net.ano.AnoCommNIO.e(Unknown Source)
  at oracle.net.ano.AnoComm.readUB4(Unknown Source)
  at oracle.net.ano.Ano.c(Unknown Source)
  at oracle.net.ano.AuthenticationService.a(Unknown Source)
  at oracle.net.ano.Ano.negotiation(Unknown Source)
  at oracle.net.ns.NSProtocol.connect(NSProtocol.java:368)
  at oracle.jdbc.driver.T4CConnection.connect(T4CConnection.java:1596)
  at oracle.jdbc.driver.T4CConnection.logon(T4CConnection.java:588)



STEPS
-----------------------
The issue can be reproduced at will with the following steps:
1. Configure TCPS connection with externally authenticated users as described in <Document:1190873.1> How To Setup The Database And The Client To Have SSL Mutual Authentication With An Oracle Jdbc Thin Client And The Database?
2. Set SQLNET.CRYPTO_CHECKSUM_SERVER=REQUIRED in the database sqlnet.ora.
3. Attempt to establish the TCSP connection from JDBC.

Changes

Cause

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.