+1 401 783 6172 (International callers)
gary@skillbuilders.com
Request Info
Register Login

Login/Register to Access all of Skillbuilders' Content

Connect with:

Login with Facebook Login with Google Login with LinkedIn

Login with your site account

Connect with:

Login with Facebook Login with Google Login with LinkedIn


Lost your password?

Not a member yet? Register now

SkillBuildersSkillBuilders
  • Services
    • Oracle APEX Hosting on AWS
    • Oracle Database Admin/Remote DBA
    • Oracle APEX App Development
    • APEX Administration
  • Products
    • Oracle Database Manager (free)
    • Deprecated APEX Plugins
  • Training
    • Course Calendar
    • Oracle DBA
    • Oracle Developer
    • Oracle APEX
    • Web Development
    • Free Webinars
    • Mentoring
    • Free Oracle Database Tutorials
      • Free Oracle Database Administration Tutorials
      • Free Oracle Developer Tutorials
      • Free Oracle APEX Tutorials
      • Free Solaris 11, Oracle VM and ZFS Tutorials
      • Free Oracle Database Retired Tutorials
      • Free Groovy and Grails Tutorials
  • Blog
  • About
    • About Us
    • Our Team
    • Events
    • Case Studies
      • Oracle Database Administration
      • Oracle APEX Development
      • Oracle APEX Administration
      • Oracle and AWS Cloud
    • Client Testimonials
    • Contact
    • Services
      • Oracle APEX Hosting on AWS
      • Oracle Database Admin/Remote DBA
      • Oracle APEX App Development
      • APEX Administration
    • Products
      • Oracle Database Manager (free)
      • Deprecated APEX Plugins
    • Training
      • Course Calendar
      • Oracle DBA
      • Oracle Developer
      • Oracle APEX
      • Web Development
      • Free Webinars
      • Mentoring
      • Free Oracle Database Tutorials
        • Free Oracle Database Administration Tutorials
        • Free Oracle Developer Tutorials
        • Free Oracle APEX Tutorials
        • Free Solaris 11, Oracle VM and ZFS Tutorials
        • Free Oracle Database Retired Tutorials
        • Free Groovy and Grails Tutorials
    • Blog
    • About
      • About Us
      • Our Team
      • Events
      • Case Studies
        • Oracle Database Administration
        • Oracle APEX Development
        • Oracle APEX Administration
        • Oracle and AWS Cloud
      • Client Testimonials
      • Contact

    Blog

    • Home
    • Blog
    • 12.2 upgrade – it can break all your outgoing https calls

    12.2 upgrade – it can break all your outgoing https calls

    • Posted by John Watson
    • Categories Blog
    • Date January 23, 2018

    Do you know about multiple domain certificates? If not you may have to learn quickly, because Oracle has changed the way they are handled in release 12.2. This is going to break a lot of applications.

    A multiple domain certificate (aka “Unified Communications Certificate”, a UCC) is an SSL certificate that secures multiple domain and host names. There are a lot of them about. Even www.oracle.con is secured by one. In release 12.1 and earlier, there was no problem. You would download the website’s root certificate, load it into a wallet, and then you could use UTL_HTTP.REQUEST or UTL_SMTP.STARTTLS or APEX_WEB_SERVICE.MAKE_REQUEST to make the call. It would work if you were going to any of the domains that the certificate secures.

    Not in 12.2.

    Take this example, using eBay. In 12.1 I can do this,

    select utl_http.request(url=>'https://www.ebay.com',wallet_path=>'file:\tmp\wallet') from dual;
    

    or, because I’m based in England, this:

    select utl_http.request(url=>'https://www.ebay.co.uk',wallet_path=>'file:\tmp\wallet') from dual;
    

    but in 12.2, only www.ebay.com works. The UK name gives me this:

    orclx> select utl_http.request(url=>'https://www.ebay.co.uk',wallet_path=>'file:\tmp\wallet') from dual;
    select utl_http.request(url=>'https://www.ebay.co.uk',wallet_path=>'file:\tmp\wallet') from dual
           *
    ERROR at line 1:
    ORA-29273: HTTP request failed
    ORA-06512: at "SYS.UTL_HTTP", line 1501
    ORA-24263: Certificate of the remote server does not match the target address.
    ORA-06512: at "SYS.UTL_HTTP", line 380
    ORA-06512: at "SYS.UTL_HTTP", line 1441
    ORA-06512: at line 1

    There is a solution – specify a new parameter introduced in 12.2, like this:

    select utl_http.request(url=>'https://www.ebay.co.uk',wallet_path=>'file:\tmp\wallet',https_host=>'www.ebay.com') from dual;
    

    It is the same with APEX_WEB_SERVICE.MAKE_REQUEST, the latest release has a new parameter P_HTTPS_HOST.

    There are some MOS articles that help, such as Doc ID 2275666.1 and Doc ID 2339601.1.

    This may complicate your 12.2 upgrades. It is certainly complicating ours.

    —
    John Watson
    Oracle Certified Master DBA
    https://skillbuilders.com
    https://skillbuilders.com/oracle-dba-training/

    • Share:
    John Watson
    https://skillbuilders.com/our_team/john-watson/

    Previous post

    Upgrading to 12.2 ? Make sure you won't break JSON
    January 23, 2018

    Next post

    Privilege Analysis included in Oracle Database 19c Enterprise Edition
    27 August, 2019

    Copyright © Skillbuilders.com

    Interested in joining our team?

    View details
    Managed APEX Hosting on AWS

    Sorry. This form is no longer accepting new submissions.