Reason for writing this article
I had to spend a good amount of time to clear the issue "ORA-29024: Certificate validation failure" after configuring AWS SES SMTP in Oracle Apex. Thought of sharing the steps followed so that it may help someone trying to figure out the same problem.
Background
AWS SES is a cloud-based email sending service from Amazon. If you are on the AWS platform, then AWS SES may be a good choice for your Apex application.I found these two well-written blogs that explain the whole process of configuring SMTP in Oracle Apex.
Kudos to the authors.
I followed the instructions in their blog except for the process of downloading a root certificate for SES SMTP end-points.
Most of the article gives you an easy method to obtain the certificate by clicking on the padlock icon in the search bar and then saving the certificates from the browser itself. Unfortunately, the SES endpoints doesn't resolve and hence I couldn't download the same. Here are the steps to get the root certificate for the SES endpoint email-smtp.ap-south-1.amazonaws.com.
Solution
Run below command from a Linux instance
openssl s_client -connect email-smtp.ap-south-1.amazonaws.com:465 -servername email-smtp.ap-south-1.amazonaws.com
Copy the certificate and visit https://whatsmychaincert.com/
Paste the certificate in the text box under "Generate the correct chain".
Check "Include Root Certificate" and click on "Generate Chain"
The certificate will be auto-downloaded. You may import the same in Oracle Wallet.
You are good to send emails using AWS SES, provided you completed other setup described in the other two blogs.
Comments
Post a Comment