Database

Get Involved. Join the Conversation.

Topic

    Arsalan Dilawar
    Fatal SSL Error when calling web service in oracle apex
    Topic posted June 24, 2019 by Arsalan DilawarGreen Ribbon: 100+ Points, tagged Apex, REST API 
    288 Views, 1 Comment
    Title:
    Fatal SSL Error when calling web service in oracle apex
    Summary:
    Fatal SSL Error when calling web service in oracle apex
    Content:

    I am trying to call a web service in my oracle apex cloud but I am getting HTTPS/SSL certificate error.

    Please guide me how i can fix this issue in oracle apex cloud

    CODE 

    select apex_web_service.make_rest_request(
        p_url         => 'https://earthquake.usgs.gov/earthquakes/feed/v1.0/summary/2.5_day.geojson', 
        p_http_method => 'GET' ) from dual;

    ERROR 

    ORA-29273: HTTP request failed ORA-06512: at "SYS.UTL_HTTP", line 1130 ORA-28860: Fatal SSL errorORA-29273: HTTP request failed ORA-06512: at "SYS.UTL_HTTP", line 1130 ORA-28860: Fatal SSL error

    Comment

     

    • Vladislav Uvarov

      The ORA-28860: Fatal SSL error usually indicates an SSL/TLS protocol error rather than an error with the trusted SSL certificate loaded in your Oracle Wallet. Using the free Qualys SSL Test tool, we can see that while this website (https://earthquake.usgs.gov) supports an older TLS 1.0 protocol that is available in all releases of the Oracle Database, it does require the client to support SNI (Server Name Indication) as well:

      This site works only in browsers with SNI support.

      If you are using an older Oracle Database release, the SNI extension for outbound SSL/TLS calls may not be supported. Specifically, there is no SNI support in 11.2 or 12.1 release. One-off patches may be available from My Oracle Support to add SNI support in 12.2 release. All database releases 18c and newer support SNI out of the box. For example, the recently announced APEX in Autonomous Transaction Processing (18c) is able to access this website just fine without any configuration by application developers.

      Hope this helps.