MES Bundle patch - 11.2.0.4 Connections Fail With ORA-12560 When Using TLS 1.1 or 1.2 (By Setting SSL_VERSION In Sqlnet.ora) (Doc ID 2026419.1)

Last updated on AUGUST 07, 2017

Applies to:

Advanced Networking Option - Version 11.2.0.4 to 11.2.0.4 [Release 11.2]
Oracle Database - Enterprise Edition - Version 11.2.0.4 to 11.2.0.4 [Release 11.2]
Information in this document applies to any platform.

Symptoms

In the 11.2 Net Services Reference documentation, it states that the valid values for SSL_VERSION in sqlnet.ora include 1.1 and 1.2

When SSL_VERSION is set to either of these values in an 11.2.0.4 environment, connections fail with the following error:

% sqlplus system/******@ORCL

SQL*Plus: Release 11.2.0.4.0 Production on Tue Jun 23 17:38:12 2015

Copyright (c) 1982, 2013, Oracle. All rights reserved.

ERROR:
ORA-12560: TNS:protocol adapter error

 

 

When attempting to use package UTL_HTTP in SSL mode with a Web Server using TLS 1.1 or 1.2 the following error occurs.

ERROR
-----------------------
ORA-28860: Fatal SSL error

For example you will observe something like this:

 

SELECT utl_http.request(url => 'https://example.com',
wallet_path => 'file:/home/oracle/TESTCASE/SR_TLS_12_11GR24',
wallet_password => 'Secret01') FROM DUAL
*
ERROR at line 1:
ORA-29273: HTTP request failed
ORA-06512: at "SYS.UTL_HTTP", line 1720
ORA-28860: Fatal SSL error
ORA-06512: at line 1

 

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms