UTL_HTTP Fails To Access A Webservice From A 11g Database When The Target Host Has Disabled The SSL v3.0 Protocol
Last updated on FEBRUARY 17, 2018
Applies to:Oracle Database - Standard Edition - Version 126.96.36.199 to 188.8.131.52 [Release 11.2]
Information in this document applies to any platform.
The attempt to access a webservice from a 11g database might fail with "ORA-28860: Fatal SSL error" or "ORA-29259: end-of-input reached" when SSL v3.0 has been disabled by the webservice.
The tcpdump on the outgoing interface on the database server shows that the 11.2 client sends TLSv1 in the client hello but the packet header uses SSLv3 for compatibility and this is rejected by the target server which has SSLv3 disabled:
TLSv1 Record Layer: Handshake Protocol: Client Hello
Content Type: Handshake (22)
Version: SSL 3.0 (0x0300)==============================> SSL v3.0 protocol header
Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Version: TLS 1.0 (0x0301)=============================> TLSv1 protocol client hello
There is no way to specify the protocol to be used in sqlnet.ora as the package UTL_HTTP is not using the database sqlnet.ora.
The remote web server has disabled ssl v3.0
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms