If necessary, use the orapki utility to configure CRLs for system use as
2.
follows:
–
For CRLs stored on your local file system, see
Hash Value for Certificate Validation"
–
CRLs stored in the directory, see
Directory"
OID hostname or port number not set
Cause: Oracle Internet Directory (OID) connection information is not set. Note
that this is not a fatal error. The search continues with CRL DP.
Action: If you want to store the CRLs in Oracle Internet Directory, then use
Oracle Net Configuration Assistant to create and configure an ldap.ora file
for your Oracle home. See
page 12-7
Fetch CRL from CRL DP: No CRLs found
Cause: The CRL could not be fetched by using the CRL DP. This happens if the
certificate does not have a location specified in its CRL DP extension, or if the
URL specified in the CRL DP extension is incorrect.
Action: Manually download the CRL. Then depending on whether you want to
store it on your local file system or in Oracle Internet Directory, perform the
following steps:
If you want to store the CRL on your local file system:
Use Oracle Net Manager to specify the path to the CRL directory or file. See
1.
"Configuring Certificate Validation with Certificate Revocation Lists"
page 7-37
Use the orapki utility to configure the CRL for system use. See
2.
CRLs with a Hash Value for Certificate Validation"
If you want to store the CRL in Oracle Internet Directory:
Use Oracle Net Configuration Assistant to create and configure an
1.
ldap.ora file with directory connection information. See
ldap.ora file for your Oracle home:"
Use the orapki utility to upload the CRL to the directory. See
2.
CRLs to Oracle Internet Directory"
Certificate Validation with Certificate Revocation Lists
on page 7-42
"To create an ldap.ora file for your Oracle home:"
on page 7-42
Configuring Secure Sockets Layer Authentication 7-47
"Renaming CRLs with a
on page 7-41
"Uploading CRLs to Oracle Internet
on page 7-41
on page 12-7
on
on
"Renaming
"To create an
"Uploading
Need help?
Do you have a question about the Oracle Database B10772-01 and is the answer not in the manual?
Questions and answers