Cognos Analytics

 View Only

Use Oracle datasource using JDBC with SSL

  • 1.  Use Oracle datasource using JDBC with SSL

    Posted Mon March 24, 2025 12:07 PM
    Edited by Gerhard Lang Mon March 24, 2025 12:07 PM

    Hi,

    i'm trying to connect to our Oracle datasources using JDBC with SSL using an Oracle Wallet. 

    There seems to be no official documentation for this task, at least i'm not able to find it.

    The wallet consits of one private key an 4 trusted certs. 

    What i've tried so far:

    - Export the contents of the wallet to a new keystore (orapki wallet pkcs12_to_jks -wallet "<Wallet_Location>" -pwd <Wallet-PW> -jksKeyStoreLoc "C:\Temp\ewallet.jks" -jksKeyStorepwd <Keystore-PW>)
    - Export the key and certificates from the new keystore into the Cognos JRE keystore (..\ibm-jre\jre\lib\security\cacerts) using KeyEplorer
    - After rebooting the server i've errors in p2pd_messages.log: 
      - [24.03.25 11:34:38:324 MEZ] 00000097 com.ibm.ws.webcontainer.webapp                E SRVE0283E: Es wurde eine Ausnahme beim Initialisieren des Kontextes abgefangen: java.lang.NullPointerException
        at com.ibm.bi.platform.commons.crypto.internal.utils.CipherSuiteManager.getSupportedCipherSuites(CipherSuiteManager.java:1111
        ....
      - [24.03.25 11:34:55:990 MEZ] 0000004f com.ibm.ws.channel.ssl.internal.SSLHandshakeErrorTracker   E CWWKO0801E: Die SSL-Verbindung kann nicht über den Host <SERVER-IP> und den Port 53.651 auf dem fernen Client für den Host <SERVER-IP> und 4.301 auf dem lokalen Server initialisiert werden. Ausnahme: javax.net.ssl.SSLHandshakeException: Received fatal alert: certificate_unknown
        at com.ibm.jsse2.g.a(g.java:28)
        ...
    - Cognos not opening in browser -> http 502 error page

    The SSL connection to the content store is working fine (configured as described in the official documentation -> [ Link](https://www.ibm.com/docs/en/cognos-analytics/12.0.0?topic=communications-enabling-ssl-oracle-databases) ).

    Does anyone have an idea or tip how to solve this issue?

    KR, Gerhard



    ------------------------------
    Gerhard Lang
    ------------------------------