orapki Utility Commands Summary

The orapki commands perform a variety of wallet, certificate revocation lists (CRL), and certificate management tasks.

• orapki cert create
  The orapki cert create command creates a signed certificate for testing purposes.

• orapki cert display
  The orapki cert display command displays details of a specified certificate.

• orapki crl delete
  The orapki crl delete command deletes a certificate revocation list (CRL) that is stored in Oracle Internet Directory.

• orapki crl display
  The orapki crl display command displays a specified certificate revocation list (CRL) that is stored in Oracle Internet Directory.

• orapki crl hash
  The orapki crl hash command generates a hash value of the certificate revocation list (CRL) issuer to identify the CRL file system location for certificate validation.

• orapki crl list
  The orapki crl list command displays a list of certificate revocation lists (CRLs) that are stored in Oracle Internet Directory.

• orapki crl upload
  The orapki crl upload command uploads a certificate revocation list (CRL) to the CRL subtree in Oracle Internet Directory.

• orapki secretstore create_credential
  The orapki secretstore create_credential command creates database connection credentials in the wallet.

• orapki secretstore create_entry
  The orapki secretstore create_entry command stores a secret entries against an alias in a wallet.

• orapki secretstore create_user_credential
  The orapki secretstore create_user_credential command creates a credential object that is referenced by an alias that is constituted from a map and key name.

• orapki secretstore delete_credential
  The orapki secretstore delete_credential command deletes database connection credentials from a wallet.

• orapki secretstore delete_entry
  The orapki secretstore delete_entry command deletes the secret entries for an alias from a wallet.

• orapki secretstore delete_user_credential
  The orapki secretstore delete_user_credential command deletes the credential object that is referenced by the alias that was constituted from the map and key name.

• orapki secretstore list_credentials
  The orapki secretstore list_credentials command lists the contents of the external password store.

• orapki secretstore list_entries
  The orapki secretstore list_entries command lists the identifiers in a wallet.

• orapki secretstore list_entries_unsorted
  The orapki secretstore list_entries_unsorted command lists the identifiers in a wallet in unsorted order.

• orapki secretstore modify_credential
  The orapki secretstore modify_credential command modifies database connection credentials in the wallet.

• orapki secretstore modify_entry
  The orapki secretstore modify_entry command modifies the secret entry for an alias in a wallet.

• orapki secretstore modify_user_credential
  The orapki secretstore modify_user_credential command modifies a credential object that is referenced by an alias that was constituted from a map and key name.

• orapki secretstore view_entry
  The orapki secretstore view_entry command lists the secret entries for an alias in a wallet.

• orapki wallet add
  The orapki wallet add command adds certificate requests and certificates to an Oracle wallet.

• orapki wallet change_pwd
  The orapki wallet change_pwd command changes the password for a wallet.

• orapki wallet convert
  The orapki wallet convert command converts the 3DES algorithm in an Oracle wallet to use the AES256 algorithm.

• orapki wallet create
  The orapki wallet create command creates an Oracle wallet or enables auto-login for an Oracle wallet.

• orapki wallet delete
  The orapki wallet delete command deletes an Oracle wallet.

• orapki wallet display
  The orapki wallet display command displays the certificate requests, user certificates, and trusted certificates in an Oracle wallet.

• orapki wallet export
  The orapki wallet export command exports certificate requests and certificates from an Oracle wallet.

• orapki wallet export_private_key
  The orapki wallet export_private_key command exports a private key from a wallet.

• orapki wallet import_pkcs12
  The orapki wallet import_pkcs12 command imports a PKCS #12 file into the wallet. Only the latest valid certificate for each unique private key in a PKCS#12 file will be imported into an Oracle wallet. If a private key already exists in the wallet, its associated certificate chain will be skipped.

• orapki wallet import_private_key
  The orapki wallet import_private_key command imports a private key into a wallet.

• orapki wallet jks_to_pkcs12
  The orapki wallet jks_to_pkcs12 command converts a Java keystore to PKCS #12 format for the storage of certificate information.

• orapki wallet pkcs12_to_jks
  The orapki wallet pkcs12_to_jks command converts a PKCS #12 keystore to a Java keystore for the storage of certificate information.

• orapki wallet remove
  The orapki wallet remove command removes certificates and certificate requests from the wallet.

orapki cert create

The orapki cert create command creates a signed certificate for testing purposes.

Syntax

orapki cert create [-wallet wallet_file_directory] -request certificate_request_location -cert certificate_file_directory -validity number_of_days [-cert_validation_mode strict|non-strict]

• wallet specifies the location of the wallet that contains the user certificate and private key that will be used to sign the certificate request.

• request specifies the location of the certificate request for the certificate you are creating.

• cert specifies the directory location where the tool places the new signed certificate.

• validity specifies the number of days, starting from the current date, that this certificate will be valid.

• cert_validation_mode specifies if strict certificate validation, conforming to the RFC#5280 standard is (strict) or is not (non-strict) being used.

Example

orapki cert create -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-request $ORACLE_HOME/admin/db_unique_name/wallet/cert_reqs
-cert $ORACLE_HOME/admin/db_unique_name/wallet/certs
-validity 365 -summary
-cert_validation_mode strict

orapki cert display

The orapki cert display command displays details of a specified certificate.

Syntax

orapki cert display -cert certificate_file_directory [-complete]

• cert specifies the location of the certificate you want to display.

• summary|complete display the following information:

  • summary displays the certificate and its expiration date.

  • complete displays additional certificate information, including the serial number and public key.

Example

orapki cert display -wallet $ORACLE_HOME/admin/db_unique_name/wallet/certs

orapki crl delete

The orapki crl delete command deletes a certificate revocation list (CRL) that is stored in Oracle Internet Directory.

The user who deletes the CRLs from the directory by using orapki must be a member of the CRLAdmins (cn=CRLAdmins,cn=groups,%s_OracleContextDN%) directory group.

Syntax

orapki crl delete -issuer issuer_name -ldap hostname:ssl_port -user user_name [-wallet wallet_file_directory] [-summary]

• issuer specifies the name of the certificate authority (CA) who issued the CRL.

• ldap specifies the host name and SSL port for the directory where the CRLs are to be deleted. Note that this must be a directory SSL port (uploaded to Oracle Internet Directory) with no authentication.

• user specifies the user name of the directory user who has permission to delete CRLs from the CRL subtree in the directory.

• wallet specifies the location of the wallet that contains the certificate of the certificate authority (CA) who issued the CRL. Using it causes the tool to verify the validity of the CRL against the CA’s certificate prior to deleting it from the directory.

• summary displays the CRL LDAP entry that was deleted.

Example

orapki crl delete -issuer psmith
-ldap hr_db:4415
-user psmith
-wallet $ORACLE_HOME/admin/db_unique_name/wallet
-summary

Related Topics

• Uploading CRLs to Oracle Internet Directory

orapki crl display

The orapki crl display command displays a specified certificate revocation list (CRL) that is stored in Oracle Internet Directory.

Syntax

orapki crl display -crl crl_location [-wallet wallet_file_directory] [-summary|-complete]

• crl parameter specifies the location of the CRL in the directory. It is convenient to paste the CRL location from the list that displays when you use the orapki crl list command.

• wallet (optional) specifies the location of the wallet that contains the certificate of the certificate authority (CA) who issued the CRL. Using it causes the tool to verify the validity of the CRL against the CA’s certificate prior to displaying it.

• summary and complete display the following information:

  • summary provides a listing that contains the CRL issuer’s name and the validity period of the CRL.

  • complete provides a list of all revoked certificates that the CRL contains. The output for this option may take a long time to display, depending on the size of the CRL.

Example

orapki  crl display -crl $ORACLE_HOME/admin/db_unique_name/wallet/crls
-wallet $ORACLE_HOME/admin/db_unique_name/wallet
-summary

Related Topics

• orapki crl list

orapki crl hash

The orapki crl hash command generates a hash value of the certificate revocation list (CRL) issuer to identify the CRL file system location for certificate validation.

Syntax

orapki crl hash -crl crl_filename\|URL [-wallet wallet_file_directory] [-symlink|-copy] crl_directory [-summary]

• crl specifies the file name that contains the CRL or the URL where it can be found.

• wallet (optional) specifies the location of the wallet that contains the certificate of the certificate authority (CA) who issued the CRL. Using it causes the tool to verify the validity of the CRL against the CA’s certificate prior to uploading it to the directory.

• Depending on the operating system, use either the -symlink or the -copy parameter:

  • (UNIX) symlink creates a symbolic link to the CRL at the crl_directory location

  • (Windows) copy creates a copy of the CRL at the crl_directory location

• summary displays the CRL issuer’s name.

Example

orapki crl hash -crl db_cert_rev
-wallet $ORACLE_HOME/admin/db_unique_name/wallet
-copy
-$ORACLE_HOME/admin/db_unique_name/wallet/crls
-summary

orapki crl list

The orapki crl list command displays a list of certificate revocation lists (CRLs) that are stored in Oracle Internet Directory.

Syntax

This command is useful for browsing to locate a particular CRL to view or download to your local file system.

orapki crl list -ldap hostname:ssl_port

ldap specifies the host name and SSL port for the directory server from where you want to list CRLs. Note that this must be a directory SSL port with no authentication.

Example

orapki crl list -ldap hr_db:4415

Related Topics

• Uploading CRLs to Oracle Internet Directory

orapki crl upload

The orapki crl upload command uploads a certificate revocation list (CRL) to the CRL subtree in Oracle Internet Directory.

Note that you must be a member of the directory administrative group CRLAdmins (cn=CRLAdmins,cn=groups,%s_OracleContextDN%) to upload CRLs to the directory.

Syntax

orapki crl upload -crl crl_location -ldap hostname:ssl_port -user username [-wallet wallet_file_directory] [-summary]

• crl specifies the directory location or the URL where the CRL is located that you are uploading to the directory.

• ldap specifies the host name and SSL port for the directory where you are uploading the CRLs. Note that this must be a directory SSL port with no authentication.

• user specifies the user name of the directory user who has permission to add CRLs to the CRL subtree in the directory.

• wallet specifies the location of the wallet that contains the certificate of the certificate authority (CA) who issued the CRL. This is an optional parameter. Using it causes the tool to verify the validity of the CRL against the CA’s certificate prior to uploading it to the directory.

• summary displays the CRL issuer’s name and the LDAP entry where the CRL is stored in the directory.

Example

orapki  crl upload -crl $ORACLE_HOME/admin/db_unique_name/wallet/crls
-ldap hr_db:4415
-user psmith
-wallet $ORACLE_HOME/admin/db_unique_name/wallet

Related Topics

• Uploading CRLs to Oracle Internet Directory

orapki secretstore create_credential

The orapki secretstore create_credential command creates database connection credentials in the wallet.

Syntax

orapki secretstore create_credential [-wallet wallet_file_directory] [-pwd wallet_password]
[-default | -connect_string db_connect_string]
[-username user_name] [-password user_password]

• wallet specifies the path to the wallet directory where you want to store the credential. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• connect_string can be the TNS alias that you use to specify the database in the tnsnames.ora file or any service name you use to identify the database on an Oracle Database network.

• default can be used instead of connect_string to add default credentials if the connect_string is neither available nor required. It is used to more conveniently set the default username and password.

• username and password are the database login credentials. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

The following example shows how to create credentials with a connect string.

orapki secretstore create_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-connect_string sales.us.example.com -username pfitch
Enter wallet password: wallet_password
Enter user password: user_password

The following example shows how to create default credentials.

orapki secretstore create_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-default -username pfitch -password sample_pass1

orapki secretstore create_entry

The orapki secretstore create_entry command stores a secret entries against an alias in a wallet.

Syntax

orapki secretstore create_entry [-wallet wallet_file_directory] [-pwd wallet_password]
[-alias alias] [-secret secret]

• wallet specifies the location of the wallet that will contain the secret entries for the specified alias. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• alias specifies the name of the alias in which you want to store the secret entries.

• secret specifies the secret text that you want to store.

Example

orapki secretstore create_entry -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-alias db_alias -secret Time2Laugh@
Enter wallet password: wallet_password

orapki secretstore create_user_credential

The orapki secretstore create_user_credential command creates a credential object that is referenced by an alias that is constituted from a map and key name.

Syntax

orapki secretstore create_user_credential [-wallet wallet_file_directory] [-pwd wallet_password]
[-map map] [-key key] [-username user_name] [-password user_password]

• wallet specifies the path to the directory where you created the wallet that will contain the user credentials. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• map specifies the map that is used to reference a credential in the Oracle Platform Security Services (OPSS) credential store framework (CSF). This is combined with the key to construct the alias for the credential.

• key specifies the map that is used to reference a credential in the OPSS CSF.This is combined with the map to construct the alias for the credential.

• username and password are the credentials of the user name to be stored in the secret store. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

orapki secretstore create_user_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-map ofss.map -key cwalletkey -username pfitch
Enter wallet password: wallet_password
Enter user password: user_password

orapki secretstore delete_credential

The orapki secretstore delete_credential command deletes database connection credentials from a wallet.

Syntax

orapki secretstore delete_credential [-wallet wallet_file_directory][-pwd wallet_password]
[-connect_string db_connect_string]

• wallet specifies the path to the wallet directory where the credential is stored. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• connect_string can be the TNS alias that you use to specify the database in the tnsnames.ora file or any service name you use to identify the database on an Oracle Database network.

Example

orapki secretstore delete_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-connect_string sales.us.example.com
Enter wallet password: wallet_password

orapki secretstore delete_entry

The orapki secretstore delete_entry command deletes the secret entries for an alias from a wallet.

Syntax

orapki secretstore delete_entry  [-wallet wallet_file_directory] [-pwd wallet_password]
[-alias alias]

• wallet specifies the location of the wallet that contains the secret entries to be deleted for the specified alias. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• alias specifies the name of the alias from which you want to delete the secret entries.

Example

orapki secretstore delete_entry -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-alias db_alias

orapki secretstore delete_user_credential

The orapki secretstore delete_user_credential command deletes the credential object that is referenced by the alias that was constituted from the map and key name.

Syntax

orapki secretstore delete_user_credential [-wallet wallet_file_directory] -pwd wallet_password]
[-map map] [-key key]

• wallet specifies the path to the directory where you created the wallet that contains the user credentials.

• map specifies the map that is used to reference a credential in the Oracle Platform Security Services (OPSS) credential store framework (CSF). This is combined with the key to construct the alias for the credential.

• key specifies the map that is used to reference a credential in the OPSS CSF. This is combined with the key to construct the alias for the credential.

Example

orapki secretstore delete_user_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-map ofss.map -key cwalletkey
Enter wallet password: wallet_password

orapki secretstore list_credentials

The orapki secretstore list_credentials command lists the contents of the external password store.

Syntax

orapki secretstore list_credentials [-wallet wallet_file_directory] [-pwd wallet_password]

• wallet specifies the location of the wallet whose external password store credentials you want to view. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

Example

orapki secretstore list_credentials -wallet $ORACLE_HOME/admin/db_unique_name/wallet
Enter wallet password: wallet_password

orapki secretstore list_entries

The orapki secretstore list_entries command lists the identifiers in a wallet.

The orapki wallet display command is a superset of the information that is shown in the orapki secretstore list_entries command.

Syntax

orapki secretstore list_entries [-wallet wallet_file_directory] [-pwd wallet_password]

• wallet specifies the location of the wallet whose identifiers you want to list. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

Example

orapki secretstore list_entries -wallet $ORACLE_HOME/admin/db_unique_name/wallet
 Enter wallet password: wallet_password

Related Topics

• orapki wallet display

orapki secretstore list_entries_unsorted

The orapki secretstore list_entries_unsorted command lists the identifiers in a wallet in unsorted order.

Syntax

orapki secretstore list_entries_unsorted [-wallet wallet_file_directory] [-pwd wallet_password]

• wallet specifies the location of the wallet whose identifiers you want to list. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

Example

orapki secretstore list_entries_unsorted -wallet $ORACLE_HOME/admin/db_unique_name/wallet
Enter wallet password: wallet_password

orapki secretstore modify_credential

The orapki secretstore modify_credential command modifies database connection credentials in the wallet.

Syntax

orapki secretstore modify_credential [-wallet wallet_file_directory]  [-pwd [wallet_password]]
[-connect_string db_connect_string]
[-username user_name] [-password user_password]

• wallet specifies the path to the wallet directory that stores the credential. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• connect_string is the TNS alias that you use to specify the database in the tnsnames.ora file or any service name you use to identify the database on an Oracle Database network.

• username and password are the database login credentials. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

orapki secretstore modify_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-connect_string sales.us.example.com -username pfitch
Enter wallet password: wallet_password
Enter user password: user_password

orapki secretstore modify_entry

The orapki secretstore modify_entry command modifies the secret entry for an alias in a wallet.

Syntax

orapki secretstore modify_entry [-wallet wallet_file_directory] [-pwd wallet_password]
[-alias alias] [-secret secret]

• wallet specifies the location of the wallet that contains the secret entriy to be modified for the specified alias. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• alias specifies the name of the alias where the secret entries are stored.

• secret specifies the secret text that you store.

Example

orapki secretstore modify_entry -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-alias db_alias -secret Time2Cry@
Enter wallet password: wallet_password

orapki secretstore modify_user_credential

The orapki secretstore modify_user_credential command modifies a credential object that is referenced by an alias that was constituted from a map and key name.

Syntax

orapki secretstore modify_user_credential [-wallet wallet_file_directory] [-pwd wallet_password]
[-map map] [-key key] [-username user_name] [-password user_password]

• wallet specifies the path to the directory where you created the wallet that contains the user credentials. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• map specifies the map that is used to reference a credential in the Oracle Platform Security Services (OPSS) credential store framework (CSF). This is combined with the key to construct the alias for the credential.

• key specifies the map that is used to reference a credential in the OPSS CSF. This is combined with the key to construct the alias for the credential.

• username and password are the credentials of the user name to be stored in the secret store. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

orapki secretstore modify_user_credential -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-map ofss.map -key cwalletkeyhr -username psmith
Enter wallet password: wallet_password
Enter user password: user_password

orapki secretstore view_entry

The orapki secretstore view_entry command lists the secret entries for an alias in a wallet.

Syntax

orapki secretstore view_entry [-wallet <wallet_file_directory>] [-pwd <wallet_password>][-alias <alias>]

• wallet specifies the location of the wallet that will contain the secret entries for the specified alias. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• alias specifies the name of the alias for which the secrety entries will be displayed

Example

orapki secretstore view_entry -wallet $ORACLE_HOME/admin/<db_unique_name>/wallet -alias <db_alias>
 Enter wallet password: wallet_password

Related Topics

• orapki wallet display

orapki wallet add

The orapki wallet add command adds certificate requests and certificates to an Oracle wallet.

Syntax

orapki wallet add [-wallet [wallet_file_directory]] [-dn [user_dn]] [-alias [alias]] -asym_alg [RSA|ECC|ML-DSA-44|ML-DSA-65|ML-DSA-87]
[-keysize [512|1024|2048|4096|8192|16384]] | [-eccurve [p192|p224|p256|p384|p521|k163|k233|k283|k409|k571|b163|b233|b283|b409|b571]]
-self_signed [-validity [number_of_days]] | [-valid_from [mm/dd/yyyy] -valid_until [mm/dd/yyyy]]
[-serial_file file_path] | [-serial_num serial_num] -addext_ski
-addext_ku digitalSignature,nonRepudiation,keyEncipherment,dataEncipherment,keyAgreement,keyCertSign,cRLSign,encipherOnly,decipherOnly
-addext_basic_cons [CA] | [-pathLen [pathlen]]]  -addext_san [DNS:value] [-cert [file_name]]
[-trusted_cert|-user_cert] [-pwd password] | [-auto_login_only]
[-sign_alg md5|sha1|sha256|sha384|sha512|ecdsasha1|ecdsasha256|ecdsasha384|ecdsasha512|mldsa44|mldsa65|mldsa87] [-cert_validation_mode strict|non-strict]

The following syntax shows how to add a certificate request for each supported key algorithm:

RSA:

orapki wallet add -wallet wallet_location -dn user_dn -asym_alg RSA -keySize {512|1024|2048|4096|8192|16384}

ECC:

orapki wallet add -wallet wallet_location -dn user_dn -asym_alg ECC -eccurve {p192|p224|p256|p384|p521|k163|k233|k283|k409|k571|b163|b233|b283|b409|b571}

ML-DSA:

orapki wallet add -wallet wallet_location -dn user_dn -asym_alg {ML-DSA-44|ML-DSA-65|ML-DSA-87}

The -keySize option is not applicable to ML-DSA. To specify the certificate signature algorithm for an ML-DSA operation, use mldsa44, mldsa65, or mldsa87, as appropriate for the selected ML-DSA variant.

To create a self-signed certificate instead of a certificate request, add the -self_signed option and specify either -validity number_of_days or both -valid_from date and -valid_until date. The -asym_alg option specifies the public-key algorithm used to generate the certificate. For ML-DSA certificates, specify ML-DSA-44, ML-DSA-65, or ML-DSA-87; do not specify -keySize.

Parameter	Description
wallet	Specifies the location of the wallet to which you want to add a certificate request.
alias	Specifies a unique certificate or certificate request. For example, it can be used to add and later export a certificate request:orapki wallet create -wallet sample_wallet orapki wallet add -wallet sample_wallet -dn CN=ROOT -keysize 2048 -validity 365 -self_signed -alias sample_alias orapki wallet export -wallet sample_wallet -alias sample_alias -request cert_request.csr
dn	Specifies the distinguished name of the certificate to add.
keySize	This parameter applies only when asym_alg is set to RSA. Do not specify keySize for ML-DSA.Specifies the key size in bits for the certificate. The size that you enter indicates the strength of security for the certificate. Values are as follows: 512: Included for backward compatibility and is supported in non-FIPS mode 1024: Current default for non-FIPS certificate keys and is supported in non-FIPS mode 2048: Current default for FIPS certificate keys 4096: As needed per your site’s requirements 8192: As needed per your site’s requirements 16384: As needed per your site’s requirements
asym_alg	Specifies the public-key algorithm to use for creating a certificate request or self-signed certificate. Possible values are RSA, ECC, ML-DSA-44, ML-DSA-65, and ML-DSA-87. Note: orapki must be run with JDK 24 or later to use the ML-DSA algorithms.
eccurve	Applies only when asym_alg is set to ECC. Specifies the curve values to be used. Available values are p192, p224, p256, p384, p521, k163, k233, k283, k409, k571, b163, b233, b283, b409, and b571.
self-signed	Creates and adds a root certificate. This option provides either the validity option or the valid_from and valit_until options (mandatory).
serial_file	Specifies the file location of the serial file for the certificate.
serial_num	Specifies the serial number of the certificate.
addtext_ski	Adds the Subject Key Identifier extension and identifies the public key certified by the certificate.
addtext_ku <list of key usage separated by spaces>	Adds the Key Usage extension to the certificate.
addtext_basic_cons [CA] [-pathLen <pathlen>]	Adds the Basic Constraint extension. The optional [CA] and [-pathLen] fields signify whether the given certificate is a certificate authority or not.
addtext_san	Is an extension to X509 certificates used to add subject alternative names, which is used in addition to identify the subject. This option only allows you to add domain names separated by comma. For example: addext_san DNS:*value_1*,DNS:*value_2*,DNS:*value_3* -addext_san DNS:ns1.example.com,DNS:ns2.example.com
addtext_xyz	Specifies different constraints.
cert	Specifies the location of certificate to add.
trusted_cert | user_cert	Specify the type of certificate to add, either trusted or user.
sign_alg	Specifies the signing algorithm to use for signing certificates. This setting applies to self-signed certificates only. For an ML-DSA operation, use mldsa44, mldsa65, or mldsa87, as appropriate for the selected ML-DSA variant.
cert_validation_mode	Specifies if strict certificate validation, conforming to the RFC#5280 standard is (strict) or is not (non-strict) being used.

To sign the request, export it with the export option.

To add trusted certificates:

orapki wallet add -wallet wallet_file_directory -trusted_cert -cert certificate_file_directory

• trusted_cert adds the trusted certificate, at the location specified with -cert, to the wallet.

To add root certificates:

orapki wallet add -wallet wallet_file_directory -dn certificate_dn -keySize 512\|1024\|2048 -self_signed -validity number_of_days

• self_signed creates a root certificate.

• validity is mandatory. Use it to specify the number of days, starting from the current date, that this root certificate will be valid.

To add user certificates:

orapki wallet add -wallet wallet_file_directory -user_cert -cert certificate_file_directory

• user_cert adds the user certificate at the location specified with the -cert parameter to the wallet. Before you add a user certificate to a wallet, you must add all the trusted certificates that make up the certificate chain. If all trusted certificates are not installed in the wallet before you add the user certificate, then adding the user certificate will fail.

Example

orapki  wallet add -wallet $ORACLE_HOME/admin/db_unique_name/wallet -dn "cn=mavis green, o=example, c=us" -keySize 2048

Related Topics

• orapki wallet export

orapki wallet change_pwd

The orapki wallet change_pwd command changes the password for a wallet.

Syntax

orapki wallet change_pwd [-wallet wallet_file_directory] [-oldpwd old_wallet_password] [-newpwd new_wallet_password]

• wallet specifies the location of the wallet whose password you want to change.

• oldpwd specifies the current password to change.

• newpwd specifies the new password. Follow these requirements:

  • Use no fewer than 8 characters. The maximum length is unlimited.

  • Use mixed alphanumeric characters.

Example

orapki wallet change_pwd -wallet wallet_file_directory -oldpwd old_wallet_password -newpwd new_wallet_password
Enter password: wallet_password

orapki wallet convert

The orapki wallet convert command converts the 3DES algorithm in an Oracle wallet to use the AES256 algorithm.

Be aware that though the AES256 algorithm is stronger than 3DES, there will be degradation in orapki operations if you use AES256.

Syntax

orapki wallet convert -wallet wallet_file_directory [-pwd wallet_password] -compat_v12

• wallet specifies the wallet location for which you want to turn on auto-login.

• pwd is the wallet password. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

• compat_v12 performs the conversion from 3DES to AES256.

Example

orapki  wallet convert -wallet $ORACLE_HOME/admin/db_unique_name/wallet compat_v12
Enter wallet password: password

orapki wallet create

The orapki wallet create command creates an Oracle wallet or enables auto-login for an Oracle wallet.

Syntax

orapki wallet create [-wallet wallet_file_directory] [-pwd wallet_password] [-auto_login|-auto_login_local]] | [-auto_login_only]

• wallet specifies a location for the new wallet or the location of the wallet for which you want to turn on auto-login.

• pwd is a new password to be assigned to the wallet. If you create an auto-login wallet later on, then it will require this password. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted. When you create the password, follow these requirements:

  • Use no fewer than 8 characters. The maximum length is unlimited.

  • Use mixed alphanumeric characters.

• auto_login creates an auto-login wallet, or it turns on automatic login for the wallet specified with the -wallet option.

• auto_login_only is a type of auto-login wallet that does not require a password.

• auto_login_local creates a local auto-login wallet, or it turns on local automatic login for the wallet specified with the -wallet option.

Example

orapki wallet create -wallet $ORACLE_HOME/admin/db_unique_name/wallet
Enter password: wallet_password
Enter password again: password

orapki wallet delete

The orapki wallet delete command deletes an Oracle wallet.

Syntax

orapki wallet delete [-wallet wallet_file_directory] [-pwd wallet_password] [-sso]

• wallet specifies the location of the wallet that you want to delete. If you omit the pwd argument for the password, then you will be prompted for the password. For better security, enter the password when prompted.

• sso enables you to delete an auto-login wallet.

Example

orapki wallet delete -wallet $ORACLE_HOME/admin/db_unique_name/wallet -sso
Enter password: wallet_password

orapki wallet display

The orapki wallet display command displays the certificate requests, user certificates, and trusted certificates in an Oracle wallet.

The orapki wallet display command is a superset of the information that is shown in the orapki secretstore list_entries command. orapki wallet display shows everything, including the secret store entries’ thumbprint. It inlcudes both the SHA-1 and SHA-256 thumbprint information for a private key. These thumbprints select a particular certificate from the wallet and are displayed when you run the orapki wallet display command. You can specify an alias when you store a private key. The alias and thumbprint enable you to specify the exact private key to use with the connect string.

Syntax

orapki wallet display [-wallet [wallet_file_directory]] [-summary | [-complete | -complete -details]]
[-pwd wallet_password]

• wallet specifies a location for the wallet you want to open if it is not located in the current working directory.

• summary displays a summary of the wallet information; complete displays more details.

• details displays additional attributes such as version, signature algorithm, subject public key information, and extensions, as follows:

  • summary is the subject name.

  • complete contains Alias, Subject, Issuer, Not Before, Not After, Serial Number, Key Length, MD5 digest, SHA-256 digest, SHA-1 digest, Thumbprint

  • details contains Alias, Subject, Version, Subject, Issuer, Serial Number, Not Before, Not After, Fingerprint, Signature Algorithm, MD5 digest, SHA-256 digest (thumbprint), SHA-1 digest (thumbprint), Subject Public Key Information (which includes Key Algorithm, Key Length, and Key Data), and, if any, Certificate Extensions.

Example

orapki  wallet display -wallet $ORACLE_HOME/admin/db_unique_name/wallet

Related Topics

• orapki secretstore list_entries

orapki wallet export

The orapki wallet export command exports certificate requests and certificates from an Oracle wallet.

Syntax

orapki wallet export -wallet wallet_file_directory -dn certificate_dn -cert certificate_filename

• wallet specifies the location of the wallet from which you want to export the certificate.

• dn specifies the distinguished name of the certificate. In the case of a multi-valued DN, the order in which the individual DN values are stored in the wallet is uncertain. To find the correct DN that you want, run orapki wallet display.

• cert specifies the name of the file that contains the exported certificate.

To export a certificate request from an Oracle wallet:

orapki wallet export -wallet ./rsa_server_host_name -dn "O=Example, C=US" -request ./rsa_server_hostname/csr2.pem
Enter wallet password: password

• request specifies the name of the file that contains the exported certificate request.

Example

orapki  wallet export -wallet $ORACLE_HOME/admin/db_unique_name/wallet
-dn db_cert
-request db_req

Related Topics

• orapki wallet display

orapki wallet export_private_key

The orapki wallet export_private_key command exports a private key from a wallet.

Syntax

orapki wallet export_private_key [-wallet wallet_file_directory] [-pwd wallet_password] [-alias pvtkey_alias]
[-pvtkeyfile filename] [-pvtkeypwd private_key_password] [-salt salt]
[-cert certificate_filename] [-cacert ca_certificate_filename]

• wallet specifies the location of the wallet from which you want to export the private key.

• pvtkeyfile specifies the name of the private key file

• pvtkeypwd specifies password for the private key file. If omitted, a password prompt appears.

• salt specifies the salt to use.

• cert specifies certificate file name.

• cacert specifies the CA file name .

Example

orapki wallet export_private_key -wallet wallet_file_directory -alias pvtkey_alias
-pvtkeyfile pvt_key_filename -pvtkeypwd pvt_key_password -cert cert_file -cacert cacert_file
Enter password: wallet_password

orapki wallet import_pkcs12

The orapki wallet import_pkcs12 command imports a PKCS #12 file into the wallet. Only the latest valid certificate for each unique private key in a PKCS#12 file will be imported into an Oracle wallet. If a private key already exists in the wallet, its associated certificate chain will be skipped.

Syntax

orapki wallet import_pkcs12 -wallet wallet_location [-pwd wallet_password]
[-auto_login_only]] -pkcs12file pkcs12_file_location [-pkcs12pwd pkcs12_file_password]

• wallet specifies the location into which PKCS#12 file is to be imported..

• pkcs12file specifies the location of the PKCS#12 file to be imported into the wallet.

• pkcs12pwd specifies the password of PKCS#12 file that is to be imported into the wallet. If omitted, a password prompt appears.

Example

orapki wallet import_pkcs12 -wallet wallet_location -pkcs12file pkcs12_file_location -pkcs12pwd pkcs12_file_password
Enter password: wallet_password

orapki wallet import_private_key

The orapki wallet import_private_key command imports a private key into a wallet.

Syntax

orapki wallet import_private_key [-wallet wallet_file_directory] [-pwd wallet_password] [-alias pvtkey_alias]
[-pvtkeyfile filename] [-pvtkeypwd private_key_password] [-salt salt]
[-cert certificate_filename] [-cacert ca_certificate_filename] [-cert_validation_mode strict|non-strict]

• wallet specifies the location of the wallet into which you want to import the private key.

• pvtkeyfile specifies the name of the private key file

• pvtkeypwd specifies password for the private key file. If omitted, a password prompt appears.

• salt specifies the type of salt to use.

• cert specifies certificate file name.

• cacert specifies the CA file name.

• cert_validation_mode specifies if strict certificate validation, conforming to the RFC#5280 standard is (strict) or is not (non-strict) being used.

Example

orapki wallet import_private_key -wallet wallet_file_directory -alias pvtkey_alias
-pvtkeyfile pvt_key_filename -pvtkeypwd pvt_key_password -cert cert_file -cacert cacert_file
Enter password: wallet_password

orapki wallet jks_to_pkcs12

The orapki wallet jks_to_pkcs12 command converts a Java keystore to PKCS #12 format for the storage of certificate information.

To convert a wallet that uses PKCS #12 format to a Java keystore, you can use orapki wallet pkcs12_to_jks command.

Syntax

orapki wallet jks_to_pkcs12 [-wallet wallet_file_directory] [-pwd wallet_password]
[-keystore keystore] [-jkspwd jks_password]

• wallet specifies the location of the wallet that you want to convert to use PKCS #12 format.

• keystore specifies the name of the Java keystore to convert.

• jkspwd specifies the password of the Java keystore. If omited, a password prompt appears.

Example

orapki wallet jks_to_pkcs12 -wallet wallet_file_directory -keystore keystore_name -jkspwd keystore_password
Enter password: wallet_password

orapki wallet pkcs12_to_jks

The orapki wallet pkcs12_to_jks command converts a PKCS #12 keystore to a Java keystore for the storage of certificate information.

To convert a Java keystore wallet to PKCS #12 format to a Java keystore, you can use orapki wallet jks_to_pkcs12 command.

Syntax

orapki wallet pkcs12_to_jks [-wallet wallet_file_directory] [-pwd wallet_password]
[-jksKeyStoreLoc Java_keystore_location -jksKeyStorepwd Java_keystore_password]
[-jksTrustStoreLoc jks_trust_store_location -jksTrustStorepwd jks_trust_store_password]

• wallet specifies the location of the wallet that you want to convert to use Java keystore format.

• jksKeyStoreLoc specifies the location for the Java keystore that will be created.

• jksTrustStorepwd specifies the password of the JKS trust store. If omitted, a password prompt appears.

Example

orapki wallet pkcs12_to_jks -wallet wallet_file_directory -jksKeyStoreLoc Java_keystore_location -jkspwd Java_keystore_password
Enter password: wallet_password

orapki wallet remove

The orapki wallet remove command removes certificates and certificate requests from the wallet.

Syntax

orapki wallet remove [-wallet wallet_file_directory] [-dn subject_dn] | -alias alias]
[-issuer_dn issuer_dn] [-serial_file file_path] | [-serial_num serial_num]
[-trusted_cert_all|-trusted_cert|-user_cert|-cert_req] [-pwd wallet_password | [-auto_login_only]

• wallet specifies the location of the file where a certificate or certificate request will be removed.

• dn specifies distinguished name of the wallet.

• alias specifies the alias for this wallet.

• issuer_dn specifies the issuer of the DN.

• trusted_cert_all|-trusted_cert|-user_cert|-cert_req specifies the type of certificate to remove from the wallet.

• serial_file specifies the file location of the serial file for the certificate.

• serial_num specifies the serial number of the certificate.

Example

orapki wallet remove -wallet wallet_file_directory -dn certificate_dn
Enter password: wallet_password

mkstore Utility Commands Summary

The mkstore command line utility, available as part other Oracle Database client and server installations, enables you to create wallets and add credential secrets such as user names and passwords.

The mkstore wallet management command line tool is deprecated with Oracle AI Database 26ai, and can be removed in a future release. Use orapki instead.

• mkstore create
  The mkstore create command creates a wallet (cwallet.sso and ewallet.p12) at the command line.

• mkstore createALO
  The mkstore createALO command creates an auto-login-only wallet (cwallet.sso).

• mkstore createCredential
  The mkstore createCredential command creates database connection credentials in the wallet.

• mkstore createEntry
  The mkstore createEntry command stores a secret text against an alias.

• mkstore createUserCredential
  The mkstore createUserCredential command creates a credential object that is referenced by an alias that is constituted from a map and key name.

• mkstore delete
  The mkstore delete command deletes a wallet.

• mkstore deleteCredential
  The mkstore deleteCredential command deletes database login credentials from a wallet.

• mkstore deleteEntry
  The mkstore deleteEntry command deletes the secret entries for an alias in a wallet.

• mkstore deleteSSO
  The mkstore deleteSSO command deletes an auto-login wallet.

• mkstore deleteUserCredential
  The mkstore deleteUserCredential command deletes the credential object that is referenced by the alias that was constituted from the map and key name.

• mkstore list
  The mkstore list command lists the identifiers in a wallet.

• mkstore listCredential
  The mkstore listCredential command lists the contents of the external password store.

• mkstore modifyCredential
  The mkstore modifyCredential command modifies the database login credentials that are in a wallet.

• mkstore modifyEntry
  The mkstore modifyEntry command modifies the secret entries for an alias in a wallet.

• mkstore modifyUserCredential
  The mkstore modifyUserCredential command modifies a credential object that is referenced by an alias constituted from a map and key name.

• mkstore viewEntry
  The mkstore viewEntry command lists the secret entries for an alias in a wallet.

mkstore create

The mkstore create command creates a wallet (cwallet.sso and ewallet.p12) at the command line.

Syntax

mkstore -wrl wallet_file_directory -create

• wrl specifies the path to the directory where you want to create and store the wallet.

• This command prompts you to enter and reenter a new password. When you create the password, follow these requirements:

  • Use no fewer than 8 characters. The maximum length is unlimited.

  • Use mixed alphanumeric characters.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -create
Enter password: password
Enter password again: password

Related Topics

• orapki wallet create

mkstore createALO

The mkstore createALO command creates an auto-login-only wallet (cwallet.sso).

Syntax

mkstore -wrl wallet_file_directory -createALO

• wrl specifies the path to the directory where you want to create and store the auto-login-only wallet.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -createALO

Related Topics

• orapki wallet create

mkstore createCredential

The mkstore createCredential command creates database connection credentials in the wallet.

Syntax

mkstore -wrl wallet_file_directory -createCredential db_connect_string username password

• wrl specifies the path to the directory where you created the wallet.

• db_connect_string can be the TNS alias that you use to specify the database in the tnsnames.ora file or any service name you use to identify the database on an Oracle Database network.

• username and password are the database login credentials. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -createCredential DBFS dbfs_admin
Enter password: password

Related Topics

• orapki secretstore create_credential

mkstore createEntry

The mkstore createEntry command stores a secret text against an alias.

Syntax

mkstore -wrl wallet_file_directory -createEntry alias secret

• wrl specifies the path to the directory wallet for which you want to create the entry.

• alias is the name of the alias for which you want to store the secret text.

• secret specifies the secret text that you want to store.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -createEntry oracle.security.client.default_username SCOTT

Related Topics

• orapki secretstore create_entry

mkstore createUserCredential

The mkstore createUserCredential command creates a credential object that is referenced by an alias that is constituted from a map and key name.

Syntax

mkstore -wrl wallet_file_directory  -createUserCredential map key username password

• wrl specifies the path to the directory where you created the wallet.

• map is the map that is used to reference a credential in the Oracle Platform Security Services (OPSS) credential store framework (CSF). This is combined with the key to construct the alias for the credential.

• key is the key used to reference a credential in the OPSS CSF. This is combined with the map to construct the alias for the credential.

• username is the user name to be stored in the secret store. If a user name is not specified, then mkstore sets it as NO_USER in the credential.

• password is the password to be stored in the secret store. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -createUserCredential ofss.map cwalletkey ofss
Enter your secret/Password: password
Re-enter your secret/Password: password

Related Topics

• orapki secretstore create_user_credential

mkstore delete

The mkstore delete command deletes a wallet.

Syntax

mkstore -wrl wallet_file_directory -delete

• wallet specifies the location of the wallet to be deleted.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -delete
Enter wallet password: password

Related Topics

• orapki wallet delete

mkstore deleteCredential

The mkstore deleteCredential command deletes database login credentials from a wallet.

Syntax

mkstore -wrl wallet_file_directory -deleteCredential connect_string

• wrl specifies the location of the wallet that contains the credentials to be deleted.

• connect_string can be the TNS alias you use to specify the database in the tnsnames.ora file, or any service name that you use to identify the database on an Oracle Database network.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -deleteCredential DBFS dbfs_admin
Enter wallet password: password

Related Topics

• orapki secretstore delete_credential

mkstore deleteEntry

The mkstore deleteEntry command deletes the secret entries for an alias in a wallet.

Syntax

mkstore -wrl wallet_file_directory -deleteEntry alias

• wrl specifies the location of the wallet that contains the secret entries to be deleted for the specified alias.

• alias specifies the name of alias for which you want to delete the secret entries.

• This command prompts you to enter and reenter a new password. When you create the password, follow these requirements:

  • Use no fewer than 8 characters. The maximum length is unlimited.

  • Use mixed alphanumeric characters.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -deleteEntry db_alias
Enter wallet password: password

Related Topics

• orapki secretstore delete_entry

mkstore deleteSSO

The mkstore deleteSSO command deletes an auto-login wallet.

Syntax

mkstore -wrl wallet_file_directory -deleteSSO

• wrl specifies the location of the SSO wallet to delete.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -deleteSSO
Enter wallet password: password

Related Topics

• orapki wallet delete

mkstore deleteUserCredential

The mkstore deleteUserCredential command deletes the credential object that is referenced by the alias that was constituted from the map and key name.

Syntax

mkstore -wrl wallet_file_directory -deleteUserCredential map key

• wrl specifies the location of the wallet that contains the credential object to delete.

• map specifies the map that used to reference a credential in the Oracle Platform Security Services (OPSS) credential store framework (CSF). This is combined with the key to construct the alias for the credential.

• key specifies the key that used to reference a credential in the OPSS CSF. This is combined with the map to construct the alias for the credential.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -deleteUserCredential ofss.map cwalletkey
Enter wallet password: password

Related Topics

• orapki secretstore delete_user_credential

mkstore list

The mkstore list command lists the identifiers in a wallet.

Syntax

mkstore -wrl wallet_file_directory -list

• wrl specifies the location of the wallet whose identifiers you want to list.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -list
Enter wallet password: password

Related Topics

• orapki secretstore list_entries

mkstore listCredential

The mkstore listCredential command lists the contents of the external password store.

Syntax

mkstore -wrl wallet_file_directory -listCredential

• wrl specifies the location of the wallet whose external password store credentials you want to view.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -listCredential
Enter wallet password: password

Related Topics

• orapki secretstore list_credentials

mkstore modifyCredential

The mkstore modifyCredential command modifies the database login credentials that are in a wallet.

Syntax

mkstore -wrl wallet_file_directory] -modifyCredential connect_string username password

• wrl specifies the location of the wallet.

• db_connect_string can be the TNS alias that you used to specify the database in the tnsnames.ora file or the service name you used to identify the database on an Oracle Database network.

• username and password are the database login credentials. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -modifyCredential DBFS sec_admin
Enter your secret/Password: password
Re-enter your secret/Password: password

Related Topics

• orapki secretstore modify_credential

mkstore modifyEntry

The mkstore modifyEntry command modifies the secret entries for an alias in a wallet.

Syntax

mkstore -wrl wallet_file_directory -modifyEntry alias secret

• wrl specifies the location of the wallet that contains the secret entries to modify.

• alias is the name of the alias for the secret text.

• secret specifies the secret text.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -modifyEntry oracle.security.client.default_username PSMITH
Enter wallet password: password

Related Topics

• orapki secretstore modify_entry

mkstore modifyUserCredential

The mkstore modifyUserCredential command modifies a credential object that is referenced by an alias constituted from a map and key name.

Syntax

mkstore -wrl wallet_file_directory -modifyUserCredential map key username password

• wallet specifies the location of the wallet whose user credentials need to be modified.

• map is an attribute that is used to reference a credential. This is combined with the key to construct the alias for the credential.

• key is the key used to reference a credential. This is combined with the map to construct the alias for the credential.

• username is the user name to be stored in the secret store. If a user name is not specified, then mkstore sets it as NO_USER in the credential.

• password is the password to be stored in the secret store. If no password is provided, then a password prompt appears. For better security, enter the password at the prompt instead of entering it at the command line.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -modifyUserCredential connect_string.map cwalletkey sample_user
Enter your secret/Password: password
Re-enter your secret/Password: password
Enter wallet password: password

Related Topics

• orapki secretstore modify_user_credential

mkstore viewEntry

The mkstore viewEntry command lists the secret entries for an alias in a wallet.

Syntax

mkstore -wrl wallet_file_directory -viewEntry alias

• wrl specifies the location of the wallet that contains the secret entries to view.

• alias specifies the name of alias.

• This command prompts you to enter the wallet password.

Example

mkstore -wrl $ORACLE_HOME/admin/db_unique_name/wallet -viewEntry db_alias
Enter wallet password: password

Related Topics

• orapki secretstore view_entry