Re: Is there a way to extract the primary key from Oracle wallet?
From: Charles <superaladn_at_gmail.com>
Date: Thu, 15 Jan 2009 06:19:27 -0800 (PST)
Message-ID: <85bdabef-d721-4038-b52d-ea3b417a7878_at_t39g2000prh.googlegroups.com>
On Dec 11 2008, 7:07 pm, "Vladimir M. Zakharychev" <vladimir.zakharyc..._at_gmail.com> wrote:
> On Dec 10, 8:50 am, Charles <superal..._at_gmail.com> wrote:
>
> > the password is of the wallet.
>
> > When I use 'Oracle wallet manager' and input password, I only can see
> > the wallet tree and some trusted certificates.
> > this tool also provide the way to "convert your Oracle Wallet to store
> > private keys on a smart card rather than on disk"
>
> > But what should I do if I want to get the private keys directly? the
> > wallet file "ewallet.p12" is binary file. there are no available info
> > about the private keys.
>
> > Is there someone hack this? please share with me. thanks. :)
>
> You should also see your own certificate in the tree. If you have one,
> you can use Operations -> Export Wallet... command in the menu to
> export your wallet, including private key. However, OWM does not allow
> exporting wallets with no certificates (this includes wallets with
> certificate requests only.)
>
> Not all is lost in this case though: Oracle wallets are standard
> PKCS#12 containers, which are universally supported. Try opening
> your .P12 file with OpenSSL like this:
>
> openssl pkcs12 -in ewallet.p12 >wallet.pem
>
> This should import the wallet and dump its contents in PEM format
> (OpenSSL will ask you to set new private key password when it will
> come to exporting it, you may want to add -nodes argument so that
> OpenSSL does not encrypt the exported PK.)
>
> Hth,
> Vladimir M. Zakharychev
> N-Networks, makers of Dynamic PSP(tm)
> http://www.dynamicpsp.com
Date: Thu, 15 Jan 2009 06:19:27 -0800 (PST)
Message-ID: <85bdabef-d721-4038-b52d-ea3b417a7878_at_t39g2000prh.googlegroups.com>
On Dec 11 2008, 7:07 pm, "Vladimir M. Zakharychev" <vladimir.zakharyc..._at_gmail.com> wrote:
> On Dec 10, 8:50 am, Charles <superal..._at_gmail.com> wrote:
>
> > the password is of the wallet.
>
> > When I use 'Oracle wallet manager' and input password, I only can see
> > the wallet tree and some trusted certificates.
> > this tool also provide the way to "convert your Oracle Wallet to store
> > private keys on a smart card rather than on disk"
>
> > But what should I do if I want to get the private keys directly? the
> > wallet file "ewallet.p12" is binary file. there are no available info
> > about the private keys.
>
> > Is there someone hack this? please share with me. thanks. :)
>
> You should also see your own certificate in the tree. If you have one,
> you can use Operations -> Export Wallet... command in the menu to
> export your wallet, including private key. However, OWM does not allow
> exporting wallets with no certificates (this includes wallets with
> certificate requests only.)
>
> Not all is lost in this case though: Oracle wallets are standard
> PKCS#12 containers, which are universally supported. Try opening
> your .P12 file with OpenSSL like this:
>
> openssl pkcs12 -in ewallet.p12 >wallet.pem
>
> This should import the wallet and dump its contents in PEM format
> (OpenSSL will ask you to set new private key password when it will
> come to exporting it, you may want to add -nodes argument so that
> OpenSSL does not encrypt the exported PK.)
>
> Hth,
> Vladimir M. Zakharychev
> N-Networks, makers of Dynamic PSP(tm)
> http://www.dynamicpsp.com
Thanks! Received on Thu Jan 15 2009 - 08:19:27 CST