3 Replies Latest reply on Dec 18, 2018 1:39 PM by thatJeffSmith-Oracle

    ORDS install error:Error loading the user provided certificate, Access Denied

    W.Lionel

      I am trying to install ORDS 3.0.7.253.09.40 and the installation aborts with the following errors:

       

      2018-12-14 15:39:50.568:INFO::main: Logging initialized @461841ms

      Dec 14, 2018 3:39:50 PM

      INFO: Provided certificate. Removing old the keystore files

      Dec 14, 2018 3:39:50 PM

      INFO: Deleted ords keystore false

      Dec 14, 2018 3:39:50 PM

      INFO: Deleted priv key false

      Dec 14, 2018 3:39:50 PM

      INFO: Deleted passfile false

      Dec 14, 2018 3:39:50 PM

      INFO: User provided certificate.

      Dec 14, 2018 3:39:50 PM

      SEVERE: Error loading the user provided certificate at C:\OpenSSL-Win64\bin

      Dec 14, 2018 3:39:50 PM

      SEVERE: C:\OpenSSL-Win64\bin (Access is denied)

      java.io.FileNotFoundException: C:\OpenSSL-Win64\bin (Access is denied)

              at java.io.FileInputStream.open0(Native Method)

              at java.io.FileInputStream.open(FileInputStream.java:195)

              at java.io.FileInputStream.<init>(FileInputStream.java:138)

              at java.io.FileInputStream.<init>(FileInputStream.java:93)

              at oracle.dbtools.standalone.StandaloneJetty.readCertificate(StandaloneJetty.java:296)

              at oracle.dbtools.standalone.StandaloneJetty.setupSSL(StandaloneJetty.java:511)

              at oracle.dbtools.standalone.StandaloneJetty.start(StandaloneJetty.java:216)

              at oracle.dbtools.standalone.Standalone.execute(Standalone.java:449)

              at oracle.dbtools.cmdline.DefaultCommand.execute(DefaultCommand.java:134)

              at oracle.dbtools.cmdline.Commands.execute(Commands.java:195)

              at oracle.dbtools.cmdline.Commands.main(Commands.java:155)

              at oracle.dbtools.cmdline.Commands.main(Commands.java:348)

              at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

              at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

              at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

              at java.lang.reflect.Method.invoke(Method.java:498)

              at oracle.dbtools.jarcl.Entrypoint.main(Entrypoint.java:58)

       

      I don't know what to do to resolve the errors. Can someone help?

        • 1. Re: ORDS install error:Error loading the user provided certificate, Access Denied
          thatJeffSmith-Oracle

          3.0.7 is old...very old

           

          The error indicates the file isn't there or the privs required to access the file are missing

          • 2. Re: ORDS install error:Error loading the user provided certificate, Access Denied
            W.Lionel

            Hello Jeff:

             

            I am trying to install ORDS version 18.3.0.257.1456 but the installation aborts with the following error:

             

            SEVERE: The provided key is not RSA or PKCS8 encoded

            oracle.dbtools.standalone.StandaloneException: The provided key is not RSA or PKCS8 encoded

                    at oracle.dbtools.standalone.PEMCertificate$Builder.privateKey(PEMCertificate.java:478)

                    at oracle.dbtools.standalone.PEMCertificate.read(PEMCertificate.java:272)

                    at oracle.dbtools.standalone.StandaloneConfiguration.certificate(StandaloneConfiguration.java:369)

                    at oracle.dbtools.standalone.StandaloneConfiguration.start(StandaloneConfiguration.java:210)

                    at oracle.dbtools.standalone.Standalone.execute(Standalone.java:507)

                    at oracle.dbtools.cmdline.Commands.execute(Commands.java:197)

                    at oracle.dbtools.cmdline.Commands.main(Commands.java:181)

                    at oracle.dbtools.cmdline.Commands.main(Commands.java:359)

                    at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)

                    at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)

                    at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)

                    at java.lang.reflect.Method.invoke(Method.java:498)

                    at oracle.dbtools.jarcl.Entrypoint.invoke(Entrypoint.java:66)

                    at oracle.dbtools.jarcl.Entrypoint.main(Entrypoint.java:89)

            Caused by: java.security.spec.InvalidKeySpecException: java.security.InvalidKeyException: invalid key format

                    at sun.security.rsa.RSAKeyFactory.engineGeneratePrivate(RSAKeyFactory.java:217)

                    at java.security.KeyFactory.generatePrivate(KeyFactory.java:372)

                    at oracle.dbtools.standalone.PEMCertificate$Builder.privateKey(PEMCertificate.java:476)

                    ... 13 more

            Caused by: java.security.InvalidKeyException: invalid key format

                    at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:330)

                    at sun.security.pkcs.PKCS8Key.decode(PKCS8Key.java:356)

                    at sun.security.rsa.RSAPrivateCrtKeyImpl.<init>(RSAPrivateCrtKeyImpl.java:91)

                    at sun.security.rsa.RSAPrivateCrtKeyImpl.newKey(RSAPrivateCrtKeyImpl.java:75)

                    at sun.security.rsa.RSAKeyFactory.generatePrivate(RSAKeyFactory.java:316)

                    at sun.security.rsa.RSAKeyFactory.engineGeneratePrivate(RSAKeyFactory.java:213)

                    ... 15 more

             

            My SSL certificate was imported using IIS 8.0 and once imported it said "the certificate has a private key". I indicated the location on the file system (Windows server 2012R) but the error persists.

            Windows instructions does not enable the choice to extract the private key separately.

            • 3. Re: ORDS install error:Error loading the user provided certificate, Access Denied
              thatJeffSmith-Oracle

              The error message is pretty clear, it's expecting your key to be in RSA or PKCS8 encoding, and it's not.

               

              So use something like this to make it so

              https://www.mkssoftware.com/docs/man1/openssl_pkcs8.1.asp