TNSPING Fails with Segmentation Fault Over TCPS Using HSM Wallet (Doc ID 465490.1)

Last updated on NOVEMBER 04, 2015

Applies to:

Advanced Networking Option - Version: 10.2.0.3 and later   [Release: 10.2 and later ]
Information in this document applies to any platform.

Symptoms

-- Problem Statement:
Server: Oracle10g R2 (10.2.0.3) w/ CPUOCT2007 applied on RedHat AS 4.0 2.6.9-22.ELsmp

Configured the PKCS11 Oracle Wallet with signed certificates for use with Hardware Security Modules (HSM) with Oracle Advanced Security.

Wallet status shows 'Ready'.

Configured sqlnet.ora and listener.ora for SSL connection. 

Now when testing the connection using TNSPING with the TCPS configured Net Service Name a 'Segmentation fault' occurs:

-----------------
[oracle@server1 admin]$ tnsping test10

TNS Ping Utility for Linux: Version 10.2.0.3.0 - Production on 26-OCT-2007 15:27:46

Copyright (c) 1997, 2006, Oracle. All rights reserved.

Used parameter files:

/u01/app/oracle/product/10.2.0/db_1/network/admin/sqlnet.ora


Used TNSNAMES adapter to resolve the alias
Attempting to contact (DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCPS)(HOST = server1.us.oracle.com)(PORT = 1527))) (CONNECT_DATA = (SERVER = DEDICATED) (SERVICE_NAME =test10.us.oracle.com) (INSTANCE_NAME = test10)))
Segmentation fault

-----------------

However, if a self-signed certificate (w/o PKCS11 Wallet and HSM) is used for the Oracle Wallet, the TNSPING via TCPS works fine.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms