My Oracle Support Banner

After COST Implementation PMON is unable to complete the TCPS/SSL Handshake with the Scan Listeners (Doc ID 1955008.1)

Last updated on JULY 16, 2018

Applies to:

Oracle Net Services - Version 10.2.0.5 to 11.2.0.4 [Release 10.2 to 11.2]
Advanced Networking Option - Version 10.2.0.5 to 11.2.0.4 [Release 10.2 to 11.2]
Information in this document applies to any platform.
This issue is specific to a RAC cluster where the COST implementation utilizing SSL/TCPS was implemented and the SSL handshake between PMON and SCAN listener fails. See Using Class of Secure Transport (COST) to Restrict Instance Registration in Oracle RAC

Symptoms

Following the implementation of COST for securing the listener, the services do NOT register with the SCAN listeners as expected.

Lsnrctl status or services output against SCAN listeners show 'the listener supports no services'

The following errors are being thrown repeatedly in the SCAN listener log files.  This is a result of a failed attempt by the instance to register using the TCPS protocol.

Changes

 The COST or secure listener implementation was completed in this environment.   All settings were checked and were correct according to the instructions found here:  See <Document: 1340831.1>    Using Class of Secure Transport (COST) to Restrict Instance Registration in Oracle RAC

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.