OraFAQ Forum: Security » Problem with Oracle Wallet functionality in a call HTTPS web serivces

Home » RDBMS Server » Security » Problem with Oracle Wallet functionality in a call HTTPS web serivces

Show: Today's Messages :: Polls :: Message Navigator
E-mail to friend

Problem with Oracle Wallet functionality in a call HTTPS web serivces [message #655326]

Sun, 28 August 2016 09:29

dancko
Messages: 108
Registered: June 2013
Location: italy

Senior Member

Hi to all,

Can any one help me in using/configure Oracle Wallet functionality in order to call a https web services from oracle utl_http package?

In practise I have created/developed a web services using tomcat and axis2 for testing scope and all works fine when I call it by plsql utl_http package over HTTP protocol.

My problem arise when I call a web services with utl_http package over HTTPS protocol.

In particular I have created a self signed certificate (using java keystore tool) and then configured tomcat to work over HTTPS protocol, modifying the server.xml file.
All works fine. When I insert the url in the browser, for example "https://my_webservices?wsdl", I get the correct response from server.

My problem is when I call a web services from utl_http package over HTTPS protocol.

I think that my problem is due to the configuration of Oracle Wallet.

More precisely, I have configured oracle wallet through the following (standard) steps:

1) I have created a wallet using orapki wallet command:

$ orapki wallet create -wallet /u01/app/oracle/admin -pwd mypass -auto_login

2) then, add certificate (created previously with java keystore tool) to wallet using orapki wallet command:

$ orapki wallet add -wallet /u01/app/oracle/admin -trusted_cert -cert "/home/mycertificate-keystore-tool" -pwd mypass

3) Finally, I have call a web services as following:

DECLARE
    l_http_request    UTL_HTTP.req;
    l_http_response   UTL_HTTP.resp;
    l_buffer_size     NUMBER(10) := 512;
    l_line_size       NUMBER(10) := 50;
    l_lines_count     NUMBER(10) := 20;
    l_string_request  VARCHAR2(512);
    l_line            VARCHAR2(128);
    l_substring_msg   VARCHAR2(512);
    l_raw_data        RAW(512);
    l_clob_response   CLOB;
    l_host_name      VARCHAR2(128) := '192.168.1.21';
    l_port           VARCHAR2(128) := '8443';
    l_resp_xml        XMLType;
    l_result_XML_node VARCHAR2(128);
    l_NAMESPACE_SOAP  VARCHAR2(128) := 'xmlns="http://www.w3.org/2003/05/soap-envelope"';
    l_response_city   VARCHAR2(128);
    l_response_date   VARCHAR2(128);
    l_response_temp   VARCHAR2(128);    
 
BEGIN
    l_string_request := '<?xml version="1.0" encoding="UTF-8"?>
                         <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/">
                         <soapenv:Header />
                            <soapenv:Body>
                               <ns1:Saluta xmlns:ns1="http://helloWorld">
                                  <ns1:args0>Pippo</ns1:args0>
                               </ns1:Saluta>
                            </soapenv:Body>
                         </soapenv:Envelope>';

    UTL_HTTP.set_transfer_timeout(60);

    utl_http.set_wallet('file:/u01/app/oracle/admin','mypass');

    l_http_request := UTL_HTTP.begin_request(url => 'https://' || l_host_name || ':' || l_port||'/axis2/services/HelloWorldServices', method => 'POST', http_version => 'HTTP/1.1');

    UTL_HTTP.set_header(l_http_request, 'User-Agent', 'Mozilla/4.0');
    UTL_HTTP.set_header(l_http_request, 'Host', l_host_name || ':' || l_port);
    UTL_HTTP.set_header(l_http_request, 'Connection', 'close');
    UTL_HTTP.set_header(l_http_request, 'Content-Type', 'text/xml;charset=UTF-8');
    UTL_HTTP.set_header(l_http_request, 'SOAPAction', '"Saluta"');
    UTL_HTTP.set_header(l_http_request, 'Content-Length', LENGTH(l_string_request));

     
    <<request_loop>>
    FOR i IN 0..CEIL(LENGTH(l_string_request) / l_buffer_size) - 1 LOOP
        l_substring_msg := SUBSTR(l_string_request, i * l_buffer_size + 1, l_buffer_size);
 
        BEGIN
            l_raw_data := utl_raw.cast_to_raw(l_substring_msg);
            UTL_HTTP.write_raw(r => l_http_request, data => l_raw_data);
            EXCEPTION
                WHEN NO_DATA_FOUND THEN
                    EXIT request_loop;
        END;
    END LOOP request_loop;
 
    l_http_response := UTL_HTTP.get_response(l_http_request);
    DBMS_OUTPUT.put_line('Response> status_code: "' || l_http_response.status_code || '"');
    DBMS_OUTPUT.put_line('Response> reason_phrase: "' ||l_http_response.reason_phrase || '"');
    DBMS_OUTPUT.put_line('Response> http_version: "' ||l_http_response.http_version || '"');
 
    BEGIN
 
        <<response_loop>>
        LOOP
            UTL_HTTP.read_raw(l_http_response, l_raw_data, l_buffer_size);
            l_clob_response := l_clob_response || UTL_RAW.cast_to_varchar2(l_raw_data);
        END LOOP response_loop;
 
        EXCEPTION
            WHEN UTL_HTTP.end_of_body THEN
                UTL_HTTP.end_response(l_http_response);
    END;
    DBMS_OUTPUT.put_line('Response> length: "' || LENGTH(l_clob_response) || '"');
    DBMS_OUTPUT.put_line(CHR(10) || '=== Print first ' || l_lines_count || ' lines of HTTP response... ===' || CHR(10) || CHR(10));
 
    <<print_response>>
    FOR i IN 0..CEIL(LENGTH(l_clob_response) / l_line_size) - 1 LOOP
        l_line := SUBSTR(l_clob_response, i * l_line_size + 1, l_line_size);
        DBMS_OUTPUT.put_line(l_line);
        EXIT WHEN i > l_lines_count - 1;
    END LOOP print_response;
 
    IF l_http_request.private_hndl IS NOT NULL THEN
        UTL_HTTP.end_request(l_http_request);
    END IF;
 
    IF l_http_response.private_hndl IS NOT NULL THEN
        UTL_HTTP.end_response(l_http_response);
    END IF;            
end;

4) I get this error:

Error at line 1
ORA-29273: http request failed
ORA-06512: a "SYS.UTL_HTTP", line 1130
ORA-28860: SSL fatal error
ORA-06512: a line 33

Is there something bad/wrong? If yes, Where? Please, can you help me to solve this problem?

thanks in advance!

[Updated on: Sun, 28 August 2016 09:32]