Home > Oracle > [Error] mod_ossl: Failed to open the wallet [Hint: incorrect path, incorrect password, bad wallet, …]

[Error] mod_ossl: Failed to open the wallet [Hint: incorrect path, incorrect password, bad wallet, …]

PURPOSE:
1. Oracle HTTP Server (OHS) is configured for SSL.
2. When attempting to start OHS via “opmnctl” it fails with the following errors:

Error –> Process (index=1,uid=216625458,pid=7403) failed to start a managed process after the maximum retry limit
Log:
$ORACLE_HOME\opmn\logs\HTTP_Server~1

3. The following errors can be seen in the $ORACLE_HOME\Apache\Apache\error_log:

[error] mod_ossl: Init: SSL call to NZ function nzos_OpenWallet failed with error 28759 (Server host.domain:4443, wallet file:c:\WALLETS)
[error] mod_ossl: Failed to open the wallet [Hint: incorrect path, incorrect password, bad wallet, ...]

CAUSE:
1.”SSLWallet” is not pointing at the correct Wallet location.
2. Auto-Login is not checked in the Wallet.
3. The oracle user does not have the permission to access the wallet files (ewallet.p12 and cwallet.sso).
4. This issue may also occur if the user used to start OHS is not same as the user who installed Oracle Application Server in the first place. In this case, this user may not have not the proper permission to access the wallet files.

SOLUTION:
1. Open the $ORACLE_HOME\Apache\Apache\conf\ssl.conf. Check the SSLWallet directive points to the correct Wallet:

SSLWallet file:/<wallet_location>

2. As the oracle user, start Wallet Manager, and open the Wallet at the above location. Make sure “Auto-Login” is checked, and save.
3. Check the ownership and permissions on the wallet files (cwallet.sso and ewallet.p12) at the above location. Check that they are owned by the owner of the ORACLE_HOME\Apache\Apache\bin\httpd processes. If you don’t want to bother with ownership and permission give “Everyone” full permissions to those two files.
4. Start OHS and test you can now access via HTTPS.

Advertisements
  1. No comments yet.
  1. No trackbacks yet.

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

%d bloggers like this: