Re: Getting "ORA-29024: Certificate validation failure", when using UTL_HTTP to POST to Google Checkout URL

From: joel garry <joel-garry_at_home.com>
Date: Wed, 18 Feb 2009 10:54:35 -0800 (PST)
Message-ID: <729502a9-b5a0-4d88-9871-556c36cf3ff9_at_v5g2000prm.googlegroups.com>

On Feb 17, 2:07 pm, Jimbo1 <jamestheboar..._at_googlemail.com> wrote:
> Hello there,
>
> I'm running Oracle 10g Release2, XE Edition.
>
> I'm trying to use the UTL_HTTP Package to submit a POST request to the
> Google Checkout Test Server.
>
> Now, if I run my script to try to send a POST request tohttp://www.google.co.uk,
> it works, i.e.
>
> DECLARE
>    l_url VARCHAR2(200) := 'http://www.google.co.uk';
>    l_request      UTL_HTTP.REQ;
>    l_response     UTL_HTTP.RESP;
> BEGIN
>    l_request := UTL_HTTP.BEGIN_REQUEST( l_url , 'POST' );
>    UTL_HTTP.END_REQUEST( l_request ) ;
> END;
> /
>
> However, if I run it to post to the "https://"-prefixed address, the
> following script will get an ORA-29024 Exception, i.e.
>
> DECLARE
>    l_merchant_url VARCHAR2(200) := 'https://sandbox.google.com/
> checkout/api/checkout/v2/reports/Merchant/'||'&MERCHANT_ID';
>    l_request      UTL_HTTP.REQ;
>    l_response     UTL_HTTP.RESP;
> BEGIN
>    l_request := UTL_HTTP.BEGIN_REQUEST( l_merchant_url, 'POST' );
>    UTL_HTTP.END_REQUEST( l_request ) ;
> END;
> /
>
> The full exception string I'm getting is:
>
> ORA-29273: HTTP request failed
> ORA-06512: at "SYS.UTL_HTTP", line 1029
> ORA-29024: Certificate validation failure
> ORA-06512: at line 8
>
> I entered my sandbox MERCHANT_ID when prompted for the substitution
> variable above.
>
> Now, the questions I have are:
>
> 1. Do I need to obtain some kind of SSL Certificate from Google?
> 2. If the answer to the last question is "Yes", do I then need to
> register it in the database using Wallet Manager?
>
> Thanks in advance for any help or advice.
>
> James

I claim to know nothing about it, but see http://download.oracle.com/docs/cd/B19306_01/appdev.102/b14258/u_http.htm#i998681

or google set_wallet.

jg

--
_at_home.com is bogus.
http://www3.signonsandiego.com/stories/2009/feb/18/1b18stanford2200-sec-accuses-financier-massive-fra/?uniontrib

Received on Wed Feb 18 2009 - 12:54:35 CST