Exporting Certificates And Certificate Requests From Oracle Wallets With Orapki; Managing Certificate Revocation Lists (Crls) With Orapki Utility - Oracle Database B10772-01 Administrator's Manual

Managing Certificate Revocation Lists (CRLs) with orapki Utility
Exporting Certificates and Certificate Requests from Oracle Wallets with orapki
To export a certificate from an Oracle wallet:
orapki wallet export -wallet <wallet_location> -dn <certificate_dn> -cert
<certificate_filename>
This command exports a certificate with the subject's distinguished name (-dn)
from a wallet to a file that is specified by -cert.
To export a certificate request from an Oracle wallet:
orapki wallet export -wallet <wallet_location> -dn <certificate_request_dn>
-request <certificate_request_filename>
This command exports a certificate request with the subject's distinguished name
(-dn) from a wallet to a file that is specified by -request.
Managing Certificate Revocation Lists (CRLs) with orapki Utility
CRLs must be managed with orapki. This utility creates a hashed value of the CRL
issuer's name to identify the CRLs location in your system. If you do not use
orapki, your Oracle server cannot locate CRLs to validate PKI digital certificates.
For detailed information about using orapki to manage CRLs refer to
Revocation List Management"
E-6 Oracle Database Advanced Security Administrator's Guide
on page 7-40.
"Certificate