Re: Oracle Wallet

You can always try creating a new wallet with -auto_login

But I have no experience with that error.

ons. 31. aug. 2022 kl. 20:29 skrev Scott Canaan <srcdco_at_rit.edu>:

> I created a new wallet in a new directory (under the umbrella wallets
> directory). Now when he tries to use it, he gets "ORA-29106: Cannot
> import PKCS #12 wallet". I’m thinking it’s because the wallet wasn’t
> created with auto_login. Can that be changed now?
>
>
>
> *Scott Canaan ‘88*
>
> *Sr Database Administrator *Information & Technology Services
> Finance & Administration
>
>
> *Rochester Institute of Technology *o: (585) 475-7886 | f: (585) 475-7520
>
> *srcdco_at_rit.edu <srcdco_at_rit.edu>* | c: (585) 339-8659
>
> *CONFIDENTIALITY NOTE*: The information transmitted, including
> attachments, is intended only for the person(s) or entity to which it is
> addressed and may contain confidential and/or privileged material. Any
> review, retransmission, dissemination or other use of, or taking of any
> action in reliance upon this information by persons or entities other than
> the intended recipient is prohibited. If you received this in error, please
> contact the sender and destroy any copies of this information.
>
>
>
> *From:* oracle-l-bounce_at_freelists.org <oracle-l-bounce_at_freelists.org> *On
> Behalf Of *Øyvind Isene
> *Sent:* Wednesday, August 31, 2022 5:48 AM
> *To:* gogala.mladen_at_gmail.com
> *Cc:* oracle-l <oracle-l_at_freelists.org>
> *Subject:* Re: Oracle Wallet
>
>
>
> Did you verify the certificate you are adding? If it is x509 you can
> display it with
>
>
>
> openssl x509 -in claws_pvt.pem -text -noout
>
>
>
> To show the content of the wallet
>
>
>
> orapki wallet display -wallet ebsadevl_wallet
>
>
>
> I always store ssl certificates in a wallet separate from db-wallet and
> tde-wallet, in the UTL_HTTP-package you can set the path to the wallet as a
> parameter. Also if you are using UTL_HTTP, only the root certificates
> should be necessary. When I run into problems with certification validation
> problems in PL/SQL I use the EXECUTE DBMS_SESSION.RESET_PACKAGE; after
> each change I do on the wallet. Sometimes it is easiest to just start over
> with an empty wallet (this is material for a blog post, I have seen some
> strange behaviour here). Either create a new one or delete the certs in it:
>
>
>
> orapki wallet remove -wallet . -trusted_cert_all
>
>
>
> I use this command to add certificates:
>
>
>
> orapki wallet add -wallet $PWD/ssl -trusted_cert -cert filename
>
>
>
>
>
>
>
> ons. 31. aug. 2022 kl. 00:43 skrev Mladen Gogala <gogala.mladen_at_gmail.com
> >:
>
> On 8/30/22 10:40, Scott Canaan wrote:
>
> We have an Oracle wallet that has 3 trusted entries. One of our users
> sent a .pem file and wants it added to the wallet. I’ve tried adding it
> and the command completes successfully, but nothing changes in the wallet.
> He says it can be done, but I can’t figure out how to do it.
>
>
>
> The command I used is:
>
>
>
> orapki wallet add -wallet ebsadevl_wallet/ -cert claws_pvt.pem
>
>
>
> oracle_at_ebsadevl1:EBSADEVL>orapki wallet add -wallet ebsadevl_wallet/
> -cert claws_pvt.pem
>
> Oracle PKI Tool Release 19.0.0.0.0 - Production
>
> Version 19.4.0.0.0
>
> Copyright (c) 2004, 2021, Oracle and/or its affiliates. All rights
> reserved.
>
>
>
> Enter wallet password:
>
> Operation is successfully completed.
>
>
>
> How do I add this cert to the wallet?
>
>
>
>
> *Scott Canaan ‘88 *
> *Sr Database Administrator *Information & Technology Services
> Finance & Administration
>
>
> *Rochester Institute of Technology *o: (585) 475-7886 | f: (585) 475-7520
>
> *srcdco_at_rit.edu <srcdco_at_rit.edu>* | c: (585) 339-8659
>
> *CONFIDENTIALITY NOTE*: The information transmitted, including
> attachments, is intended only for the person(s) or entity to which it is
> addressed and may contain confidential and/or privileged material. Any
> review, retransmission, dissemination or other use of, or taking of any
> action in reliance upon this information by persons or entities other than
> the intended recipient is prohibited. If you received this in error, please
> contact the sender and destroy any copies of this information.
>
>
>
> Hi Scott!
>
> As far as I remember, the command is:
>
> orapki wallet add -wallet wallet_location -trusted_cert -cert certificate_location
>
>
>
> I got this from a browser bookmark:
>
>
>
> https://docs.oracle.com/database/121/DBSEG/asoappf.htm#DBSEG610
>
>
>
> Are you testing TDE or TCPS listener?
>
> Regards
>
> --
>
> Mladen Gogala
>
> Database Consultant
>
> Tel: (347) 321-1217
>
> https://dbwhisperer.wordpress.com
>
>
>
>
> --
>
> Øyvind Isene
>
> +47 90864882
>

-- 
Øyvind Isene
+47 90864882

--
http://www.freelists.org/webpage/oracle-l