I discovered an Oracle Cloud Database Backup failing with:
Starting backup at 2018/09/08 20:00:04 current log archived RMAN-00571: =========================================================== RMAN-00569: =============== ERROR MESSAGE STACK FOLLOWS =============== RMAN-00571: =========================================================== RMAN-03002: failure of backup plus archivelog command at 09/08/2018 20:00:07 ORA-19554: error allocating device, device type: SBT_TAPE, device name: ORA-27023: skgfqsbi: media manager protocol error ORA-19511: non RMAN, but media manager or vendor specific failure, error text: KBHS-00715: HTTP error occurred 'oracle-error' KBHS-00712: ORA-29024 received from local HTTP service Recovery Manager complete.
Upon investigation I found the following metalink note:
RMAN Backup to Oracle Database Backup Cloud Service fails with KBHS-00715 ORA-29024 (Doc ID 2360941.1)
The “ORA-29024” is raised due to incorrect certificate chain. This issue was investigated in Bug 27402663, however no fix is needed. The later library versions will by default include the trusted certificate workaround for the issue.
So the solution is to re-install the cloud backup module with the “-trustedCerts” option:
[oracle@V1LOEM ~]$ cd /u01/oracle_stage/cloud/ [oracle@V1LOEM cloud]$ . oraenv ORACLE_SID = [oracle] ? EMREPOS The Oracle base for ORACLE_HOME=/u01/app/oracle/product/12.1.0/dbhome_1 is /u01/app/oracle [oracle@V1LOEM cloud]$ java -jar opc_install.jar -host https://em2.storage.oraclecloud.com/v1/Storage-aXXX -opcId 'oraclecloudbackup@version1.com' -opcPass 'xxx' -walletDir '/u01/oracle/opc_wallet' -libDir $ORACLE_HOME/lib -debug -trustedCerts Oracle Database Cloud Backup Module Install Tool, build 2017-05-04 Debug: os.name = Linux Debug: os.arch = amd64 Debug: os.version = 3.8.13-98.1.2.el6uek.x86_64 Debug: file.separator = / Debug: Platform = PLATFORM_LINUX64 Debug: OPC Account Verification: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><account name="Storage-aXXX"><container><name>oracle-data-storagea-1</name><count>944</count><bytes>52740693928</bytes><accountId><id>XXX</id></accountId><deleteTimestamp>0.0</deleteTimestamp><containerId><id>XXX</id></containerId></container></account> Oracle Database Cloud Backup Module credentials are valid. Debug: Certificate Success: Subject : CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US Validity : Fri Nov 10 00:00:00 GMT 2006 - Mon Nov 10 00:00:00 GMT 2031 Issuer : CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US Oracle Database Cloud Backup Module wallet created in directory /u01/oracle/opc_wallet. Oracle Database Cloud Backup Module initialization file /u01/app/oracle/product/12.1.0/dbhome_1/dbs/opcEMREPOS.ora created. Downloading Oracle Database Cloud Backup Module Software Library from file opc_linux64.zip. Debug: Temp zip file = /tmp/opc_linux648852138548086808899.zip Debug: Downloaded 27342262 bytes in 13 seconds. Debug: Transfer rate was 2103250 bytes/second. Download complete. Debug: Delete RC = true
Now test the latest Cloud Backup Module:
[oracle@V1LOEM cloud]$ rman target / Recovery Manager: Release 12.1.0.2.0 - Production on Mon Sep 10 13:10:17 2018 Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved. connected to target database: EMREPOS (DBID=XXX) RMAN> delete obsolete recovery window of 8 days device type sbt; using target database control file instead of recovery catalog allocated channel: ORA_SBT_TAPE_1 channel ORA_SBT_TAPE_1: SID=794 device type=SBT_TAPE channel ORA_SBT_TAPE_1: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_2 channel ORA_SBT_TAPE_2: SID=785 device type=SBT_TAPE channel ORA_SBT_TAPE_2: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_3 channel ORA_SBT_TAPE_3: SID=407 device type=SBT_TAPE channel ORA_SBT_TAPE_3: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_4 channel ORA_SBT_TAPE_4: SID=1169 device type=SBT_TAPE channel ORA_SBT_TAPE_4: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_5 channel ORA_SBT_TAPE_5: SID=416 device type=SBT_TAPE channel ORA_SBT_TAPE_5: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_6 channel ORA_SBT_TAPE_6: SID=1167 device type=SBT_TAPE channel ORA_SBT_TAPE_6: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_7 channel ORA_SBT_TAPE_7: SID=782 device type=SBT_TAPE channel ORA_SBT_TAPE_7: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_8 channel ORA_SBT_TAPE_8: SID=1164 device type=SBT_TAPE channel ORA_SBT_TAPE_8: Oracle Database Backup Service Library VER=12.2.0.2 Deleting the following obsolete backups and copies: Type Key Completion Time Filename/Handle -------------------- ------ ------------------ -------------------- Backup Set 18192 30-AUG-18 Backup Piece 18192 30-AUG-18 pptbsjl2_1_1 ... Backup Piece 18213 01-SEP-18 qutc1sae_1_1 Do you really want to delete the above objects (enter YES or NO)? no RMAN> exit Recovery Manager complete. [oracle@V1LOEM cloud]$
Everything working again 🙂
Now you have the latest library version, by default you have the workaround and can now omit the -trustedCerts option:
[oracle@V1LOEM cloud]$ java -jar opc_install.jar -host https://em2.storage.oraclecloud.com/v1/Storage-aXXX -opcId 'oraclecloudbackup@version1.com' -opcPass 'xxx' -walletDir '/u01/oracle/opc_wallet' -libDir $ORACLE_HOME/lib -debug Oracle Database Cloud Backup Module Install Tool, build 2017-05-04 Debug: os.name = Linux Debug: os.arch = amd64 Debug: os.version = 3.8.13-98.1.2.el6uek.x86_64 Debug: file.separator = / Debug: Platform = PLATFORM_LINUX64 Debug: OPC Account Verification: <?xml version="1.0" encoding="UTF-8" standalone="yes"?><account name="Storage-aXXX"><container><name>oracle-data-storagea-1</name><count>944</count><bytes>52740693928</bytes><accountId><id>XXX</id></accountId><deleteTimestamp>0.0</deleteTimestamp><containerId><id>XXX</id></containerId></container></account> Oracle Database Cloud Backup Module credentials are valid. Debug: Certificate Success: Subject : CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US Validity : Fri Nov 10 00:00:00 GMT 2006 - Mon Nov 10 00:00:00 GMT 2031 Issuer : CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US Oracle Database Cloud Backup Module wallet created in directory /u01/oracle/opc_wallet. Oracle Database Cloud Backup Module initialization file /u01/app/oracle/product/12.1.0/dbhome_1/dbs/opcEMREPOS.ora created. Downloading Oracle Database Cloud Backup Module Software Library from file opc_linux64.zip. Debug: Temp zip file = /tmp/opc_linux647954567264150845107.zip Debug: Downloaded 27342262 bytes in 15 seconds. Debug: Transfer rate was 1822817 bytes/second. Download complete. Debug: Delete RC = true [oracle@V1LOEM cloud]$
Now test again, to ensure still working:
[oracle@V1LOEM cloud]$ rman target / Recovery Manager: Release 12.1.0.2.0 - Production on Mon Sep 10 13:12:45 2018 Copyright (c) 1982, 2014, Oracle and/or its affiliates. All rights reserved. connected to target database: EMREPOS (DBID=XXX) RMAN> delete obsolete recovery window of 8 days device type sbt; using target database control file instead of recovery catalog allocated channel: ORA_SBT_TAPE_1 channel ORA_SBT_TAPE_1: SID=794 device type=SBT_TAPE channel ORA_SBT_TAPE_1: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_2 channel ORA_SBT_TAPE_2: SID=785 device type=SBT_TAPE channel ORA_SBT_TAPE_2: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_3 channel ORA_SBT_TAPE_3: SID=407 device type=SBT_TAPE channel ORA_SBT_TAPE_3: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_4 channel ORA_SBT_TAPE_4: SID=1169 device type=SBT_TAPE channel ORA_SBT_TAPE_4: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_5 channel ORA_SBT_TAPE_5: SID=416 device type=SBT_TAPE channel ORA_SBT_TAPE_5: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_6 channel ORA_SBT_TAPE_6: SID=1167 device type=SBT_TAPE channel ORA_SBT_TAPE_6: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_7 channel ORA_SBT_TAPE_7: SID=782 device type=SBT_TAPE channel ORA_SBT_TAPE_7: Oracle Database Backup Service Library VER=12.2.0.2 allocated channel: ORA_SBT_TAPE_8 channel ORA_SBT_TAPE_8: SID=1164 device type=SBT_TAPE channel ORA_SBT_TAPE_8: Oracle Database Backup Service Library VER=12.2.0.2 Deleting the following obsolete backups and copies: Type Key Completion Time Filename/Handle -------------------- ------ ------------------ -------------------- Backup Set 18192 30-AUG-18 Backup Piece 18192 30-AUG-18 pptbsjl2_1_1 ... Backup Piece 18213 01-SEP-18 qutc1sae_1_1 Do you really want to delete the above objects (enter YES or NO)? no RMAN> exit Recovery Manager complete. [oracle@V1LOEM cloud]$
Related Posts
If you found this blog post useful, please like as well as follow me through my various Social Media avenues available on the sidebar and/or subscribe to this oracle blog via WordPress/e-mail.
Thanks
Zed DBA (Zahid Anwar)
Zed DBA's Oracle Blog 
Pingback: Oracle Database Backup Service Fails with: ORA-19511: – KBHS-00715: HTTP error occurred ‘oracle-error’ – ORA-28750 | Zed DBA's Oracle Blog