Thursday 15 May 2014

CSR generating process


Generate a Certificate Signing Request (CSR) -
Oracle Wallet Manager
Before all go to Oracle_WT1/bin
Export PATH=$PATH:$ORACLE_HOME(WThome)/bin
Run with command $owm
And create wallet and give location
Step 1: Create a new wallet for Oracle wallet manager

Note: The recommended key bit size is 2048-bit. All certificates that will expire after December 31, 2013 must have a 2048 bit key size
  1. From the menu bar, select Wallet > New
  2. Enter the password twice > click OK
    Note: The password must contain eight alphanumeric characters and special characters.
  3. 3. Select Add a certificate request. If not, select Cancel > select Wallet > Save in the system default to save the new wallet
Step 2: Create a certificate signing request (CSR) for Oracle wallet manager
  1. Select Operations > Add Certificate Request
  2. A dialog box will appear to enter your certificate information.
    For explanation of required CSR fields, refer to SO7289
  3. Select OK
Step 3: Export a certificate signing request (CSR) as a file
  1. In the left panel, select the certificate signing request you want to export
  2. From the menu bar, select Operations > Export Certificate Request
  3. Enter a file name and directory you want to save your file to > select OK
Overview of the Oracle wallet manager
Oracle Wallets are password-protected containers that are used to store SSL-related:
  • Authentication and signing credentials
  • Private keys
  • Certificates
  • Trusted certificates
The Oracle Wallet Manager is an application that wallet owners use to maintain the security credentials in their Oracle wallets. You use the Oracle Wallet Manager to perform tasks such as:
  • Creating wallets
  • Generating certificate requests
  • Opening wallets to access PKI-based services
  • Save credentials to cryptographic hardware devices, such as smart cards
  • Upload wallets to and download them from an LDAP directory
  • Import third-party PKCS #12-format wallets, and export Oracle wallets to a third-party environment
The Oracle Wallet manager can save credentials to smart cards by using APIs which comply to the Public-Key Cryptography Standards #11 (PKCS #11) specification.
Create the Wallet with the Oracle wallet manager
Navigate to $INST_TOP/certs/Apache directory to create the new wallet.

[applmgr@ebs appl]$ cd $INST_TOP/certs/Apache
[applmgr@ebs Apache]$ pwd
/d01/app/oracle/inst/apps/PROD_ebs/certs/Apache
[applmgr@ebs Apache]$ ls
cwallet.sso ewallet.p12

No comments:

Post a Comment