TNSPING Fails with Segmentation Fault Over TCPS Using HSM Wallet
Last updated on NOVEMBER 04, 2015
Applies to:Advanced Networking Option - Version: 10.2.0.3
Information in this document applies to any platform.
-- Problem Statement:
Server: Oracle10g R2 (10.2.0.3) w/ CPUOCT2007 applied on RedHat AS 4.0 2.6.9-22.ELsmp
Configured the PKCS11 Oracle Wallet with signed certificates for use with Hardware Security Modules (HSM) with Oracle Advanced Security.
Wallet status shows 'Ready'.
Configured sqlnet.ora and listener.ora for SSL connection.
Now when testing the connection using TNSPING with the TCPS configured Net Service Name a 'Segmentation fault' occurs:
[oracle@server1 admin]$ tnsping test10
TNS Ping Utility for Linux: Version 10.2.0.3.0 - Production on 26-OCT-2007 15:27:46
Copyright (c) 1997, 2006, Oracle. All rights reserved.
Used parameter files:
Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCPS)(HOST = server1.us.oracle.com)(PORT = 1527))) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME =test10.us.oracle.com) (INSTANCE_NAME = test10)))
However, if a self-signed certificate (w/o PKCS11 Wallet and HSM) is used for the Oracle Wallet, the TNSPING via TCPS works fine.
Sign In with your My Oracle Support account
Don't have a My Oracle Support account? Click to get started
My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms