HTTP Server does not Recognize CAC Smart Card Certificates (Doc ID 395214.1)

Last updated on JANUARY 20, 2017

Applies to:

Oracle HTTP Server - Version 10.1.2.0.2 and later
Information in this document applies to any platform.

Symptoms

Attempting to enable SSL to use Department of Defense CAC Smart Cards.

Server and root certificates have been loaded into wallet and personal certificates have been loaded in Internet Explorer.

When trying to access via SSL, prompt box is displayed to select digital certificates; however the box is empty even though certificates have been loaded in Internet Explorer.

The following error is displayed in ssl_engine_log:

SSL call to NZ function nzos_Handshake failed with error 28864




Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms