IBM Support

Known Issue: Connection errors occur when using the JKS keystore option for SSL-enabled Oracle object stores

How To


Summary

In Content Platform Engine 5.5.7 a new feature was introduced to allow the use of SSL-enabled Oracle databases. When defining a data source for the SSL-enabled Oracle object store or global configuration database (GCD), four options are provided for storing the keys. One of the options, using a jks keystore that is not created as part of an Oracle wallet does not function correctly.

Objective

Create data sources for object stores and the global configuration database (GCD) that use SSL-enabled Oracle databases.

Environment

WebSphere Application Server
Content Platform Engine 5.5.7
SSL-enabled Oracle database

Additional Information

A new feature is introduced in Content Platform Engine 5.5.7 to allow the use of SSL-enabled Oracle databases. When defining a data source for the SSL-enabled Oracle object store or global configuration database (GCD), four options are provided for storing the keys:

  • Oracle wallet (type is pkcs12) created using the command: orapki wallet create
  • Keystore created as type jks,but then converted to an Oracle wallet (type pkcs12) using the command: orapki wallet jks_to_pkcs12
  • Keystore that is not an Oracle wallet, created as type pkcs12 using a tool like <JAVA_HOME>/bin/keytool
  • Keystore that is not an Oracle wallet, created as type jks using a tool like <JAVA_HOME>/bin/keytool

The fourth option--keystore that is not an Oracle wallet, created as type jks using a tool like <JAVA_HOME>/bin/keytool--does not work because the following information must be provided to establish the connection and the Configuration Manager (CMUI and the command line) does not support adding these values.

  • Location (path to the keystore *.jks file)
  • Type (jks)
  • Password

If you want to use an SSL-enabled Oracle database, use one of the other listed options.

Document Location

Worldwide

[{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSNVNV","label":"FileNet Content Manager"},"ARM Category":[{"code":"a8m0z0000001hGAAAY","label":"Content Engine->Configuration Manager"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5.7"},{"Type":"MASTER","Line of Business":{"code":"LOB45","label":"Automation"},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSGLW6","label":"IBM Content Foundation"},"ARM Category":[{"code":"a8m0z0000001hGAAAY","label":"Content Engine->Configuration Manager"}],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"5.5.7"}]

Document Information

Modified date:
31 August 2021

UID

ibm16479643

Page Feedback