Oracle dbconsole错误之ssl失效

Oracle在最近发布了一个通告。原文如下：

引用

In Enterprise Manager Database Control with Oracle Database 10.2.0.4 and 10.2.0.5, the root certificate used to secure communications via the Secure Socket Layer (SSL) protocol will expire on 31-Dec-2010 00:00:00. The certificate expiration will cause errors if you attempt to configure Database Control on or after 31-Dec-2010. Existing Database Control configurations are not affected by this issue.

If you plan to configure Database Control with either of these Oracle Database releases, Oracle strongly recommends that you apply Patch 8350262 to your Oracle Home installations before you configure Database Control. Configuration of Database Control is typically done when you create or upgrade Oracle Database, or if you run Enterprise Manager Configuration Assistant (EMCA) in standalone mode.

大致意思是用于em通信的ssl由于在2010-12-31日00:00之后失效，导致之后的em安装将会报如下错误：

引用

2011-01-09 09:36:56 Thread-51125136 ERROR pingManager: nmepm_pingReposURL: Cannot connect to https://myhost:1158/em/upload/: retStatus=-1
2011-01-09 09:36:56 Thread-51125136 ERROR ssl: Open wallet failed, ret = 28750
2011-01-09 09:36:56 Thread-51125136 ERROR ssl: nmehlenv_openWallet failed
2011-01-09 09:36:56 Thread-51125136 ERROR http: 15: Unable to initialize ssl connection with server, aborting connection attempt

针对此情况，Oracle专门发布了补丁8350262（附件中可下载）来解决这一问题。此bug在1222603.1有详细描述。Oracle这一做法也忒土了点，也就意味着以后升级到10204之后的版本，如果要使用em，补丁8350262成为了必打之补丁。今天早上在给客户安装em的时候就碰到了此问题，记录以备忘。
metalink文章：1217493.1，278100.1专门讲述了此问题。