Oracle Database B10772-01 Administrator's Manual page 205

For performance reasons, only user certificates are checked
Note:
for revocation.
(Optional) If CRLs are stored on your local file system, then set one or both of
3.
the following fields that specify where they are stored. These fields are available
only when Revocation Check is set to REQUIRED or REQUESTED.
Certificate Revocation Lists Path:
Enter the path to the directory where CRLs are stored, or click Browse to
find it by searching the file system. Specifying this path sets the SSL_CRL_
PATH parameter in the sqlnet.ora file. If a path is not specified for this
parameter, then the default is the wallet directory. Both DER-encoded
(binary format) and PEM-encoded (BASE64) CRLs are supported.
Certificate Revocation Lists File:
Enter the path to a comprehensive CRL file (where PEM-encoded (BASE64)
CRLs are concatenated in order of preference in one file), or click Browse to
find it by searching the file system. Specifying this file sets the SSL_CRL_
FILE parameter in the sqlnet.ora file. If this parameter is set, then the
file must be present in the specified location, or else the application will
error out during startup.
If you want to store CRLs in a local file system directory by
Note:
setting the Certificate Revocation Lists Path, then you must use the
orapki utility to rename them so the system can locate them. See
"Renaming CRLs with a Hash Value for Certificate Validation"
page 7-41
(Optional) If CRLs are fetched from Oracle Internet Directory, then directory
4.
server and port information must be specified in an ldap.ora file. See
create an ldap.ora file for your Oracle home:"
Certificate Validation with Certificate Revocation Lists
on page 12-7
Configuring Secure Sockets Layer Authentication 7-39
on
"To