Last updated on SEPTEMBER 16, 2016
Applies to:Oracle Database - Standard Edition - Version 22.214.171.124 to 126.96.36.199 [Release 11.2]
Information in this document applies to any platform.
The attempt to access a webservice from a 11g database might fail with "ORA-28860: Fatal SSL error" or "ORA-29259: end-of-input reached" when SSL v3.0 has been disabled by the webservice.
The tcpdump on the outgoing interface on the database server shows that the 11.2 client sends TLSv1 in the client hello but the packet header uses SSLv3 for compatibility and this is rejected by the target server which has SSLv3 disabled:
TLSv1 Record Layer: Handshake Protocol: Client Hello
Content Type: Handshake (22)
Version: SSL 3.0 (0x0300)==============================> SSL v3.0 protocol header
Handshake Protocol: Client Hello
Handshake Type: Client Hello (1)
Version: TLS 1.0 (0x0301)=============================> TLSv1 protocol client hello
There is no way to specify the protocol to be used in sqlnet.ora as the package UTL_HTTP is not using the database sqlnet.ora.
The remote web server has disabled ssl v3.0
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
Million Knowledge Articles and hundreds of Community platforms