четверг, 15 марта 2018 г.

Import existing SSL certificate and private key into Oracle Waller with orapki and openssl tools


If you already have ready SSL certificate (and a private key)
then you need to follow these steps to convert existing files
into Oracle Wallet format.

Important: your server private key *must* be encrypted. You exported
pkcs12 file must have the *same* password. 
USE ONE PASSWORD HERE!!! AND USE 8 CHARS MIN.

# Pack the *encrypted* private key, the certificate and certificate chain
# Use "openssl rsa -in xxx.key -out xxx-enc.rsa -des" to encrypt the private key

$ cd directory_with_server_key_and_certs/
# export all files (key, certificate, certificates chain) into one .p12 file
$ openssl pkcs12 -export -in mysite.corp.com.crt -inkey mysite_2018.rsa -certfile CombinedChainCA.pem -out ewallet.p12

# copy ready PKCS12 file to empty directory
$ cp ewallet.p12 ../mysite_test/

# display certificate bag using password
$ orapki wallet display -wallet mysite_test -pwd "password1"

# remove password
$ orapki wallet create -wallet mysite_test -auto_login

# check paswordless access
$ orapki wallet display -wallet mysite_test 

Done.                    

Import existing SSL certificate and private key into Oracle Waller with orapki and openssl tools

If you already have ready SSL certificate (and a private key) then you need to follow these steps to convert existing files into Oracle Wa...