Oracle在最近发布了一个通告。原文如下：

引用

In Enterprise Manager Database Control with Oracle Database 10.2.0.4 and 10.2.0.5, the root certificate used to secure communications via the Secure Socket Layer (SSL) protocol will expire on 31-Dec-2010 00:00:00. The certificate expiration will cause errors if you attempt to configure Database Control on or after 31-Dec-2010. Existing Database Control configurations are not affected by this issue.

If you plan to configure Database Control with either of these Oracle Database releases, Oracle strongly recommends that you apply Patch 8350262 to your Oracle Home installations before you configure Database Control. Configuration of Database Control is typically done when you create or upgrade Oracle Database, or if you run Enterprise Manager Configuration Assistant (EMCA) in standalone mode.

大致意思是用于em通信的ssl由于在2010-12-31日00:00之后失效，导致之后的em安装将会报如下错误：

引用

2011-01-09 09:36:56 Thread-51125136 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://myhost:1158/em/upload/: retStatus=-1
2011-01-09 09:36:56 Thread-51125136 ERROR ssl: Open wallet failed, ret = 28750
2011-01-09 09:36:56 Thread-51125136 ERROR ssl: nmehlenv_openWallet failed
2011-01-09 09:36:56 Thread-51125136 ERROR http: 15: Unable to initialize ssl connection with server, aborting connection attempt

针对此情况，Oracle专门发布了补丁8350262（附件中可下载）来解决这一问题。此bug在1222603.1有详细描述。Oracle这一做法也忒土了点，也就意味着以后升级到10204之后的版本，如果要使用em，补丁8350262成为了必打之补丁。

p8350262_10204_Generic.zip http://dl.iteye.com/topics/download/cad88a9d-bb88-3b9b-8acd-daa3c5054f2e

p8350262_10205_Generic.zip http://dl.iteye.com/topics/download/c9e40628-cd05-33ef-b1df-ad5420a6d9f4

安装补丁：

[oracle@linux OPatch]$ cd 8350262/
[oracle@linux 8350262]$ pwd
/u01/app/oracle/product/10.2.0/db_1/OPatch/8350262
[oracle@linux 8350262]$ /u01/app/oracle/product/10.2.0/db_1/OPatch/opatch apply
Invoking OPatch 10.2.0.4.2

Oracle 主目录       : /u01/app/oracle/product/10.2.0/db_1
主产品清单: /u01/app/oracle/oraInventory
   从           : /etc/oraInst.loc
OPatch 版本    : 10.2.0.4.2
OUI 版本       : 10.2.0.4.0
OUI 位置      : /u01/app/oracle/product/10.2.0/db_1/oui
日志文件位置 : /u01/app/oracle/product/10.2.0/db_1/cfgtoollogs/opatch/opatch2011-09-15_20-25-33下午.log

ApplySession 将中间补丁程序 '8350262' 应用到 OH '/u01/app/oracle/product/10.2.0/db_1'

Running prerequisite checks...

OPatch 从产品清单中检测到非集群 Oracle 主目录, 将仅对本地系统打补丁。

为 Oracle 主目录备份文件和产品清单 (不是用于自动回退)
正在备份受补丁程序 '8350262' 影响的文件以用于恢复。此操作将需要一些时间...
正在备份受补丁程序 '8350262' 影响的文件以用于回退。此操作将需要一些时间...

正在为组件 oracle.sysman.agent.core, 10.2.0.4.0a 打补丁...
用 "/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/fsc/FSWalletUtil.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emCORE.jar"
用 "/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/rep/RepWalletUtil.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emCORE.jar"
用 "/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/util/RootCert.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emCORE.jar"
用 "/sysman/jlib/emCORE.jar/oracle/sysman/eml/sec/util/SecConstants.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emCORE.jar"
用 "/sysman/jlib/emd_java.jar/oracle/sysman/eml/sec/fsc/FSWalletUtil.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emd_java.jar"
用 "/sysman/jlib/emd_java.jar/oracle/sysman/eml/sec/rep/RepWalletUtil.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emd_java.jar"
用 "/sysman/jlib/emd_java.jar/oracle/sysman/eml/sec/util/RootCert.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emd_java.jar"
用 "/sysman/jlib/emd_java.jar/oracle/sysman/eml/sec/util/SecConstants.class" 更新 jar 文件 "/u01/app/oracle/product/10.2.0/db_1/sysman/jlib/emd_java.jar"
ApplySession 将中间补丁程序 '8350262' 添加到产品清单

Verifying the update...
Inventory check OK: Patch ID 8350262 is registered in Oracle Home inventory with proper meta-data.
Files check OK: Files from Patch ID 8350262 are present in Oracle Home.

OPatch succeeded.

ITPub博客

Oracle 10.2.0.4(5)EM不能启动的解决方案(Patch 8350262)

最新文章