Remove certificates with identical dn from oracle wallet

Issue
There is oracle wallet which is used in OHS with certificates that contain identical dn.It is not possible to remove certificate specifying this dn.


Solution
Use orapki with -complete switch to get detailed list of certificates with Serial Numbers.

"
./orapki wallet display -wallet /oracle/ssl/keystore/SSL -complete
"

Then remove the certificate from the wallet specifying -dn and -serial_num.Please note that -serial_num must be converted from "1E:D7:9A:89:A1:8D:58:9B:47:79:6D:05:A8:93:F8:7B" to "0x1ED79A89A18D589B47796D05A893F87B".

"
./orapki wallet remove -wallet /u01/oracle/ssl/keystore/SSL -trusted_cert -dn 'CN=AAA' -serial_num '0x1ED79A89A18D589B47796D05A893F87B' -auto_login_only
"


Komentāri

Populāras ziņas