After COST Implementation PMON is unable to complete the TCPS/SSL Handshake with the Scan Listeners
Last updated on APRIL 10, 2018
Applies to:
Oracle Net Services - Version 10.2.0.5 to 12.1.0.2 [Release 10.2 to 12.1]Information in this document applies to any platform.
This issue is specific to a RAC cluster where the COST implementation utilizing SSL/TCPS was implemented and the SSL handshake between PMON and SCAN listener fails. See
Symptoms
Following the implementation of COST for securing the listener, the services do NOT register with the SCAN listeners as expected.
Lsnrctl status or services output against SCAN listeners show 'the listener supports no services'
The following errors are being thrown repeatedly in the SCAN listener log files. This is a result of a failed attempt by the instance to register using the TCPS protocol.
Changes
The COST or secure listener implementation was completed in this environment. All settings were checked and were correct according to the instructions found here: See <Document: 1340831.1> Using Class of Secure Transport (COST) to Restrict Instance Registration in Oracle RAC
Cause
Sign In with your My Oracle Support account |
|
Don't have a My Oracle Support account? Click to get started |
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms