My Oracle Support Banner

TNSPING Fails with Segmentation Fault Over TCPS Using HSM Wallet (Doc ID 465490.1)

Last updated on NOVEMBER 25, 2019

Applies to:

Advanced Networking Option - Version 10.2.0.3 and later
Information in this document applies to any platform.

Symptoms

-- Problem Statement:
Server: Oracle10g R2 (10.2.0.3) w/ CPUOCT2007 applied on RedHat AS 4.0 2.6.9-22.ELsmp

Configured the PKCS11 Oracle Wallet with signed certificates for use with Hardware Security Modules (HSM) with Oracle Advanced Security.

Wallet status shows 'Ready'.

Configured sqlnet.ora and listener.ora for SSL connection. 

Now when testing the connection using TNSPING with the TCPS configured Net Service Name a 'Segmentation fault' occurs:

-----------------
[oracle@server1 admin]$ tnsping test10

TNS Ping Utility for Linux: Version 10.2.0.3.0 - Production on 26-OCT-2007 15:27:46

Copyright (c) 1997, 2006, Oracle. All rights reserved.

Used parameter files:

/u01/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora


Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCPS)(HOST = server1.us.oracle.com)(PORT = 1527))) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME =test10.us.oracle.com) (INSTANCE_NAME = test10)))
Segmentation fault

-----------------

However, if a self-signed certificate (w/o PKCS11 Wallet and HSM) is used for the Oracle Wallet, the TNSPING via TCPS works fine.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Cause
Solution
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.