Oracle HTTP Server Fails to Start due to Certificates Signed Using the MD5 Algorithm

If Oracle HTTP Server cannot start due to the server wallet containing a certificate signed with the Message Digest 5 (MD5) algorithm, you can replace the MD5 certificate with a Secure Hash Algorithm 2 (SHA-2) certificate.

Oracle HTTP Server fails to start if the Oracle HTTP Server wallet contains a certificate or certificate request that is signed with the Message Digest 5 (MD5) algorithm.

  • Solution: Replace the MD5 certificate with a Secure Hash Algorithm 2 (SHA-2) certificate.

  • Workaround: To enable MD5 supported certificate, set the ORACLE_SSL_ALLOW_MD5_CERT_SIGNATURES environment variable in the ohs.plugins.nodemanager.properties file to 1.

To set the environment variable in Oracle HTTP Server, see Environment Variable Configuration Properties.