Managing Certificate Revocation Lists (CRLs) with orapki Utility
E-6 Oracle Database Advanced Security Administrator's Guide
Exporting Certificates and Certificate Requests from Oracle Wallets with orapki
To export a certificate from an Oracle wallet:
orapki wallet export -wallet <wallet_location> -dn <certificate_dn> -cert
<certificate_filename>
This command exports a certificate with the subject's distinguished name (-dn)
from a wallet to a file that is specified by -cert.
To export a certificate request from an Oracle wallet:
orapki wallet export -wallet <wallet_location> -dn <certificate_request_dn>
-request <certificate_request_filename>
This command exports a certificate request with the subject's distinguished name
(-dn) from a wallet to a file that is specified by -request.
Managing Certificate Revocation Lists (CRLs) with orapki Utility
CRLs must be managed with orapki. This utility creates a hashed value of the CRL
issuer's name to identify the CRLs location in your system. If you do not use
orapki, your Oracle server cannot locate CRLs to validate PKI digital certificates.
For detailed information about using orapki to manage CRLs refer to "Certificate
Revocation List Management" on page 7-40.
To Next Page
Loading...