Friday, April 5, 2019

Converting 3rd Party pkcs12 or .pfx Wallets for use with Oracle 12c


Oracle 12.1.0.x
Convert the wallet to Oracle 12 format with orapki by converting to a jks wallet and then to a pkcs12 wallet.
Steps:
1) First convert the 3rd party wallet to jks using orapki.
mseibt@tls]$ orapki wallet pkcs12_to_jks -wallet /tmp/wallet.pfx -jksKeyStoreLoc /tmp/wallet.jks -jksKeyStorepwd welcome1
Oracle PKI Tool : Version 12.1.0.2
Enter wallet password: (this is the pfx or 3rd party wallet password)
We now have a wallet.jks file at the location specified by -jksKeyStoreLoc :
oracle@tls]$ ls
wallet.pfx wallet.jks
2) Create a 12.1 ewallet.p12 which will become the new (and converted) pkcs12 wallet.
oracle@celdbvbx005]$ orapki wallet create -wallet . -pwd welcome1
oracle@celdbvbx005]$ ls
ewallet.p12 wallet.pfx wallet.jks
3) Lastly, move the jks wallet contents into the new ewallet.p12 that will be compatible with 12.1.
oracle@celdbvbx005]$ orapki wallet jks_to_pkcs12 -wallet /tmp -pwd welcome1 -keystore /tmp/wallet.jks -jkspwd welcome1

--(Doc ID 2147608.1)

Oracle 12.1.3.x
The orapki utility in 12.1.3.x installation has an "import_pkcs12" option which directly converts 3rd party pkcs12 wallets to a 12 compatible wallet.
Steps:
1) Create a new Oracle 12 wallet with orapki.
-bash-4.1$ orapki wallet create -wallet /tmp -pwd welcome1
Oracle PKI Tool : Version 12.1.0.1
Copyright (c) 2004, 2012, Oracle and/or its affiliates. All rights reserved.
2) Move the 3rd party wallet contents into the new 12 compatible wallet.
-bash-4.1$ orapki wallet import_pkcs12 -wallet /tmp -pkcs12file /tmp/wallet.pfx -pkcs12pwd welcome1
Oracle PKI Tool : Version 12.1.3.0.0
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.
Enter wallet password:
orapki command import_pkcs12 executed successfully.

No comments:

Post a Comment

Delete Row Button to all records of Interactive Report in Oracle Apex

 1. add 'Delete' Del column to Report Query 2. Set the Following Properties for the DEL Column Type: Link Heading: Delete Targ...