Adding Certificates And Certificate Requests To Oracle Wallets With Orapki - Oracle Database B10772-01 Administrator's Manual

Managing Oracle Wallets with orapki Utility
Adding Certificates and Certificate Requests to Oracle Wallets with orapki
To add a certificate request to an Oracle wallet:
orapki wallet add -wallet <wallet_location> -dn <user_dn> -keySize
<512|1024|2048>
This command adds a certificate request to a wallet for the user with the specified
distinguished name (user_dn). The request also specifies the requested certificate's
key size (512, 1024, or 2048 bits). To sign the request, export it with the export
option. See "Exporting Certificates and Certificate Requests from Oracle Wallets
with orapki" on page E-6
To add a trusted certificate to an Oracle wallet:
orapki wallet add -wallet <wallet_location> -trusted_cert -cert <certificate_
location>
This command adds a trusted certificate, at the specified location (-cert
<certificate_location>), to a wallet. You must add all trusted certificates in
the certificate chain of a user certificate before adding a user certificate, or the
command to add the user certificate will fail.
To add a root certificate to an Oracle wallet
orapki wallet add -wallet <wallet_location> -dn <certificate_dn> -keySize
<512|1024|2048> -self_signed -validity <number_of_days>
This command creates a new self-signed (root) certificate and adds it to the wallet.
The -validity parameter (mandatory) specifies the number of days, starting from
the current date, that this certificate will be valid. You can specify a key size for this
root certificate (-keySize) of 512, 1024, or 2048 bits.
To add a user certificate to an Oracle wallet:
orapki wallet add -wallet <wallet_location> -user_cert -cert <certificate_
location>
This command adds the user certificate at the location specified with the -cert
parameter to the Oracle wallet at the <wallet_location>. Before you add a user
certificate to a wallet, you must add all the trusted certificates that make up the
certificate chain. If all trusted certificates are not installed in the wallet before you
add the user certificate, then adding the user certificate will fail.
orapki Utility E-5