F Managing Public Key Infrastructure (PKI) Elements

You can use the orapki command line utility and sqlnet.ora parameters to manage public key infrastructure (PKI) elements.

• Uses of the orapki Utility
  The orapki utility manages public key infrastructure (PKI) elements, such as wallets and certificate revocation lists, from the command line.

• orapki Utility Syntax
  The orapki utility syntax specifies an Oracle wallet, a certificate revocation list, or a PKI digital certificate.

• Creating Signed Certificates for Testing Purposes
  The orapki utility provides a convenient, lightweight way to create signed certificates for testing purposes.

• Viewing a Certificate
  After you create a certificate, you can use the orapki utility to view it.

• Importing a User-Supplied or Trusted Certificate into an Oracle Wallet
  You can add a user-supplied or trusted certificate to an Oracle wallet.

• Controlling MD5 and SHA-1 Certificate Use
  You can use the sqlnet.ora file to control whether MD5 and SHA-1 signed certificates are accepted.

• Managing Oracle Wallets with orapki Utility
  The orapki utility can create, view, modify wallets; it can add and export certificates and certificate requests.

• Management of Certificate Revocation Lists (CRLs) with orapki Utility
  You must manage certificate revocation lists (CRLs) with the orapki utility.

• orapki Usage
  Examples of orapki commands include creating wallets, user certificates, and wallets with self-signed certificates, and exporting certificates.

• orapki Utility Commands Summary
  The orapki commands perform a variety of wallet, certificate revocation lists (CRL), and certificate management tasks.