Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[database/free:latest] -e ENABLE_TCPS=true does not run configTcps.sh on initial container startup #2873

Open
jspraul opened this issue Sep 28, 2024 · 0 comments

Comments

@jspraul
Copy link

jspraul commented Sep 28, 2024

Per Configuring TCPS connections for Oracle Database:

With Self Signed Certificates

  • Use the -e ENABLE_TCPS=true option with the docker run command. A listener endpoint will be created at the container port 2484 for TCPS.

But it appears that runOracle.sh(.orig) follows the "database already exists" branch, so "Setup TCPS with the database" is never reached.

Example (some output truncated / whitespace removed)
2024-09-28 12:50:42:~$ docker run --rm --name oracle -h oracle -e ORACLE_PWD=test -e ENABLE_TCPS=true -p 1521:1521 -p 2484:2484 -d container-registry.oracle.com/database/free:latest
84e55900fa96e8bf0bd63d1802777103f34ff21a58cb93a16e0b7b70b83fd484
2024-09-28 12:50:54:~$ # wait 5 minutes
2024-09-28 12:55:00:~$ openssl s_client -connect 127.0.0.1:2484
CONNECTED(00000003)
40A73FD4327F0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:322:
---
no peer certificate available
[...]

2024-09-28 12:59:17:~$ docker exec oracle /opt/oracle/configTcps.sh
Creating Oracle Wallet for the database server side certificate...
[...]
Configuring Oracle Net service for TCPS...
[...]

2024-09-28 13:00:25:~$ openssl s_client -connect 127.0.0.1:2484
CONNECTED(00000003)
Can't use SSL_get_servername
depth=0 CN = localhost
verify error:num=18:self-signed certificate
verify return:1
depth=0 CN = localhost
verify return:1
---
Certificate chain
 0 s:CN = localhost
   i:CN = localhost
   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256
   v:NotBefore: Sep 28 17:00:18 2024 GMT; NotAfter: Sep 28 17:00:18 2025 GMT
---
Server certificate
-----BEGIN CERTIFICATE-----
[...]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant