NJS-505: unable to initiate TLS connection.

[milank96]

1. What versions are you using?
   node-oracledb : 6.10.0

2. Describe the problem

I am facing an issue establishing a connection to the Oracle DB through node-oracledb, while the connection works successfully using tools like SQL Developer and JetBrains DataGrip with the same walletLocation.

[Nest] 36856  - 20/02/2026, 12:20:52 pm   ERROR [TypeOrmModule] Unable to connect to the database (oracleConnection). Retrying (1)...
Error: NJS-505: unable to initiate TLS connection. Please check if wallet credentials are valid
error:1C800064:Provider routines::bad decrypt
    at Object.throwErr (root\node_modules\oracledb\lib\errors.js:776:10)
    at NTTCP.connect (root\node_modules\oracledb\lib\thin\sqlnet\ntTcp.js:246:18)
    at async NetworkSession.transportConnect (root\node_modules\oracledb\lib\thin\sqlnet\networkSession.js:182:5)
    at async NetworkSession.connect2 (root\node_modules\oracledb\lib\thin\sqlnet\networkSession.js:222:7)
    at async NetworkSession.connect1 (root\node_modules\oracledb\lib\thin\sqlnet\networkSession.js:336:23)
    at async NetworkSession.connect (root\node_modules\oracledb\lib\thin\sqlnet\networkSession.js:623:5)
    at async ThinConnectionImpl.connect (root\node_modules\oracledb\lib\thin\connection.js:859:5)
    at async ThinPoolImpl.bgThreadFunc (root\node_modules\oracledb\lib\thin\pool.js:470:11)

3. Include a runnable Node.js script that shows the problem.

TypeOrmModule.forRootAsync({
            name: 'oracleConnection',
            imports: [ConfigModule],
            useFactory: (configService: ConfigService) => {
                const walletLocation = path.resolve(configService.getOrThrow<string>('ORACLE_WALLET_LOCATION'));
                return {
                    type: 'oracle',
                    username: configService.getOrThrow('ORACLE_DB_USERNAME'),
                    password: configService.getOrThrow('ORACLE_DB_PASSWORD'),
                    connectString: configService.getOrThrow('ORACLE_DB_TNS_ALIAS'),
                    extra: {
                        configDir: walletLocation,
                        walletLocation: walletLocation,
                        queueTimeout: 120000,
                    },
                    logging: true,
                } as OracleConnectionOptions;
            },
            inject: [ConfigService],
        })

[sharadraju]

Are you using TypeORM framework?

Are you connecting to an Oracle Database on-premises or on the cloud?

It seems that you are using wallet. You need to specify walletPassword as well in your connection configuration.
walletPassword: walletPassword

[milank96]

Yes, I am using the TypeORM framework.
We are connecting to an Oracle Database hosted in the cloud.

When using tools like SQL Developer and JetBrains DataGrip, we are not required to explicitly provide a walletPassword.

Is it possible to configure the same behavior when using node-oracledb, without specifying walletPassword in the connection configuration?

[sharadraju]

You can switch to node-oracledb's Thick mode if you want the wallet password to be read from the network configuration file. The default Thin mode requires the wallet password to be specified.
See https://node-oracledb.readthedocs.io/en/latest/user_guide/connection_handling.html#connecting-with-node-oracledb-thick-mode-using-mtls