Last updated on AUGUST 25, 2017
Applies to:
Advanced Networking Option - Version 11.2.0.3 and laterInformation in this document applies to any platform.
Symptoms
When the user is connected to the HSM device via a oracle client which has created a SSL session to the database, if the smart card is removed and reinserted, subsequent HSM PKCS11 connection would lead to a client getting random errors like ORA-43017 or crashes.
In earlier versions 10g client and 11.1. client, the same scenario causes the client to crash. But in 11.2 client the error 43017 is produced and sqlplus has to be restarted.
If the smart card is left in place, the problem never arises.
Fatal NI connect error 43017, connecting to:
(DESCRIPTION=(ADDRESS=(COMMUNITY=TCP.WORLD)(PROTOCOL=TCPS)(HOST=myhostname)(PORT=49211))(CONNECT_DATA=(SID=APPDB)(SERVICE_NAME=APPDB_SSL)(SERVER=DEDICATED)(CID=(PROGRAM=C:\Programs\product\11.2.0\client_2\bin\sqlplus.exe)(HOST=myhostnamecli)(USER=t139963)))(SECURITY=(SSL_SERVER_CERT_DN=CN=APPDB,CN=OracleContext,OU=Service,OU=CA,O=UBS,C=CH)))
VERSION INFORMATION:
TNS for 32-bit Windows: Version 11.2.0.3.0 - Production
éx Time: 03-JUN-2012 21:26:34
Tracing to file: D:\DOCUME~1\t139963\LOCALS~1\Temp\sqlnet_4396.trc
Tns error struct:
ns main err code: 12560
TNS-12560: TNS: Fehler bei Protokolladapter
ns secondary err code: 0
nt main err code: 546
TNS-00546: Fehler bei Steuerelement
Oracle error 1: 43017
ORA-43017: pkcs11: Kein Zertifikat auf Smartcard/HSM gefunden
nt secondary err code: 0
nt OS err code: 0
Cause
Sign In with your My Oracle Support account |
|
Don't have a My Oracle Support account? Click to get started |
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms