Skip to content

Commit d409d3d

Browse files
Clare Zheng (Shanghai Wicresoft Co Ltd)Clare Zheng (Shanghai Wicresoft Co Ltd)
authored andcommitted
Update method content and add TSGs
1 parent 16afd1f commit d409d3d

File tree

2 files changed

+22
-1
lines changed

2 files changed

+22
-1
lines changed

articles/data-factory/connector-oracle.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -119,7 +119,7 @@ To enable encryption on Oracle connection, you have two options:
119119

120120
- **Method 2**:
121121

122-
1. Get the TLS/SSL certificate information. Get the Distinguished Encoding Rules (DER)-encoded or Privacy Enhanced Mail (PEM)-encoded certificate information of your TLS/SSL cert, and save the output (----- Begin Certificate … End Certificate -----) as a text file.
122+
1. Get the TLS/SSL certificate information. Get the Distinguished Encoding Rules (DER)-encoded or Privacy Enhanced Mail (PEM)-encoded certificate information of your TLS/SSL cert.
123123

124124
```
125125
openssl x509 -inform (DER|PEM) -in [Full Path to the DER/PEM Certificate including the name of the DER/PEM Certificate] -text

articles/data-factory/connector-troubleshoot-oracle.md

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,12 +53,33 @@ This article provides suggestions to troubleshoot common problems with the Oracl
5353

5454
## Error code: UserErrorFailedToConnectOdbcSource
5555

56+
There are three error messages associated with this error code. Please check the cause and recommendation for each error message correspondingly.
57+
5658
- **Message**: `"Cannot load trust store", or "SSL Handshake Failure reason [error:OA000086:SSL routines::certificate verify failed]"`
5759

5860
- **Cause**: The `truststore` is not appropriate for OpenSSL 3.0, as the `truststore` file is generated using weak ciphers like RC4, MD5 and SHA1.
5961

6062
- **Recommendation**: You need to re-create the `truststore` using the strong ciphers like AES256. Refer to this [section](connector-oracle.md#linked-service-properties) for details about setting up the TLS connection using `truststore`.
6163

64+
<br>
65+
66+
- **Message**: <br>
67+
`SSL Handshake Failure reason[Unknown SSL Error]`
68+
`SSL Handshake Failure reason [error:OA000410:SSL routines::sslv3 alert handshake failure]`
69+
70+
- **Cause**: The server is not configured with strong ciphers for SSL communication. OpenSSL 3.0 should use either TLS 1.0 and higher as it deprecated SSL protocol versions. For example, the server might be accepting connections with TLS protocol versions until TLS1.0.
71+
72+
- **Recommendation**: Revise the server configuration to use stronger TLS versions.
73+
74+
<br>
75+
76+
- **Message**: `SSL Handshake Failure reason [error:0A00014D:SSL routines::legacy sigalg disallowed or unsupported].`
77+
78+
- **Cause**: CryptoProtocolVersion is set to use deprecated TLS protocol versions with OpenSSL 3.0.
79+
80+
- **Recommendation**: Specify the connection string property CryptoProtocolVersion=TLSv1.2.
81+
82+
6283
## Related content
6384

6485
For more troubleshooting help, try these resources:

0 commit comments

Comments
 (0)