My Oracle Support Banner

ORA-28871: certificate chain is incomplete error code during utl_http requests (Doc ID 1273385.1)

Last updated on APRIL 03, 2021

Applies to:

Oracle Database - Enterprise Edition - Version 9.2.0.6 and later
Oracle Database Cloud Schema Service - Version N/A and later
Oracle Database Exadata Cloud Machine - Version N/A and later
Oracle Cloud Infrastructure - Database Service - Version N/A and later
Oracle Database Exadata Express Cloud Service - Version N/A and later
Information in this document applies to any platform.

Symptoms

The wallet contains the root and intermediate certificates present in the certificate of the target secure site.
The wallet does not contain the user certificate of the target secure site.
So although the certificate chain for the secure site is complete in the wallet, UTL_HTTP calls against the secure site fail with the belwo error stack:

ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1568
ORA-28871: certificate chain is incomplete
ORA-06512: at line 1
29273. 00000 - "HTTP request failed"
*Cause: The UTL_HTTP package failed to execute the HTTP request.
*Action: Use get_detailed_sqlerrm to check the detailed error message.
Fix the error and retry the HTTP request.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
Symptoms
Cause
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.