Oracle Database B10772-01 Administrator's Manual page 224

Oracle Wallet Manager Overview
Table 8–2 Oracle Wallet Manager Import of User Certificates to an Oracle Wallet
KeyUsage Value
2 alone, or 2 + any
combination excluding 5
5 alone, or any combination
including 5
Any settings not listed
previously
1
If the KeyUsage extension is critical, the certificate cannot be used for other purposes.
Table 8–3 Oracle Wallet Manager Import of Trusted Certificates to an Oracle Wallet
KeyUsage Value
none
Any combination
excluding 5
5 alone, or any
combination including 5
1
If the KeyUsage extension is critical, the certificate cannot be used for other purposes.
You should obtain certificates from the certificate authority with the correct
KeyUsage value for the required Oracle PKI certificate usage. A single wallet can
contain multiple
Oracle PKI certificate usages, as indicated by
applications use the first certificate containing the required PKI certificate usage.
For example: For SSL usage, the first certificate containing the SSL Oracle PKI
certificate usage is used.
If you do not have a certificate with SSL usage, then an ORA-28885 error (No
certificate with required key usage found) is returned.
8-6 Oracle Database Advanced Security Administrator's Guide
1
Critical?
na
na
Yes
No
1
Critical? Usage
na Importable.
Yes Not importable.
No Importable.
na Importable.
key pairs for the same usage. Each certificate can support multiple
Usage
Accept certificate for SSL or S/MIME encryption
use.
Accept certificate for CA certificate signing use.
Not importable.
Certificate is importable for SSL or S/MIME
encryption use.
Table 8–2 and Table 8–3. Oracle PKI