Sitemap

Amicuk Programming Answers

IE unable to connect to Oracle HTTP Server v10.1.2 with SSL

2015-12-10   Views:362

Advertisement

Hi, I configured OHS with SSL to run APEX applications. This configuration can be run from Mozilla browsers and Opera, but not from Internet Explorer. I suspect that IE doesn't support 256-bit encryption, as both browser above support it. So I set se

Hi,
I configured OHS with SSL to run APEX applications.
This configuration can be run from Mozilla browsers and Opera, but not from Internet Explorer.
I suspect that IE doesn't support 256-bit encryption, as both browser above support it. So I set several combination of SSL Cipher Suite in ssl.conf. I also set IE to use TLS v1, SSLv2, and SSLv3. But this doesn't show any results. I also found that several sites which has 256 bit encryption (read the information from Mozilla and Opera browser) can also be opened by IE (read as 128 bit encryption). So I guess the encryption is not the problem, and I move on to the Apache error_log files.
What I found from Apache's error_log.xxxx is
[error] mod_ossl: SSL call to NZ function nzos_Handshake failed with error 29014 (server ---.---.com:4443, client --.--.--.--)
[error] mod_ossl: Unknown error
[error] mod_ossl: SSL call to NZ function nzos_Handshake failed with error 28864 (server ---.---.com:4443, client --.--.--.--)
[error] mod_ossl: SSL IO error [Hint: the client stop the connection unexpectedly]
So I looked in the Metalink and found Note:312041.1 and applied patch 4960210 and restart the server. But now it wouldn't start at all, despite that all configuration files were not changed.
Any help would be greatly appreciated.
Regards,
Aulia Bismar

The replay answer
Advertisement
You can use any PKCS#12 file with OHS if it includes the complete private key and certificate chain. With Oracle Wallet Manager (owm) you could also create a private key, import it, import the CA certificate as trusted certificate, create a certificate request for the private key, get the certificate response from the CA and import this.
If you use an unsual CA, ie cacert.org, you must import the CA root certificate as a trusted server certificate for IE.
--olaf                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           

Go to See the other 9 answers

Hot
Scanned a doc to PDF now need to convert it into a word document I can edit. Please help! Awsum87If it is a 64-bit system, your install process is to upgrade to AA XI. If it is a 32-bit system, then you should be able to install it. However, you will [More]
Was asked to become a part of online program to improve your setups - printer stuff.  Well Let me tell you.  My printers, - both of them were working just fine until I said yes - I finally got this printer working but my Photo Printer is STILL off li [More]
Hi. I installe oracle 9i and managed to setup a development and OEMREP databases and successfully logged into the Enterprise Manager Console. But after a few days, out of the blue, I can't login anymore. I'm getting the following error msg: "The exce [More]
I had a problem, My Application is on JFrame, and on that i had two JInternalFrames. I want when i want the cursor state from Normal to Wait state then I should be able to do it Through setting setCursor() on JFrame then it should reflect this change [More]
Hi, can anyone please point me to a document which explains the hardware requirements to load and run PI 7 on.  Thanks a lotHi, Check this disscussion on Xi Installation XI installation Regards SeshagiriRead other 3 answers [More]
How can I tell if someone hacked my iPhoneWhat makes you think you've been hacked?  What problems are you experiencing?Read other 2 answers [More]
Does anyone have any idea why my iPhone 5 (iOS 6.1.3) has suddenly decided to stop sending iMessages? When I try and send an iMessage I keep getting a pop up box telling me that I need to have iMessage activated, yet when I go into Settings/Messages [More]
I want to maintain quantity related scales in contract and scheduling agreement . is this possible ? how ? i know info record allows scales ? is there any place where can maintain scale related conditions in purchase order ?In Contract and Scheling a [More]
iphone liquid damagedUnfortunately, liquid damage is not covered by warranty. You can get a replacement iPhone 4S from Apple for $199.Read other 2 answers [More]
Hi, Is it possible to create one infocube object via rfc call? If yes, could you pls give me an example how to do it? Many thanks. regards, HaiHi Julian, I couldn't work out how to do this either, so I did it using the oracle.express.spl.SPLExecutor [More]