Home » RDBMS Server » Security » Commonly used root certificates
Commonly used root certificates [message #662613] Mon, 08 May 2017 02:25
John Watson
Messages: 8644
Registered: January 2010
Location: Global Village
Senior Member
Browsers come with pre-configured set of trusted certificates. Oracle databases don't. So when a developer tries to issue an https URL to some website, it fails with a certificate error until I add the site's root certificate to a wallet. This is a real pain, for the developers as well as for me. Does anyone have (or know of) a wallet that has all the commonly used certificates installed?

So far I've accumulated these, but I'm sure there are many more that will be needed:
$ orapki wallet display  -wallet $WALLET -pwd $PWD
Oracle PKI Tool : Version
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.

Requested Certificates:
User Certificates:
Trusted Certificates:
Subject:        CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=(c) 2006 VeriSign\, Inc. - For authorized use only,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US
Subject:        CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US
Subject:        CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Subject:        OU=Class 2 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject:        CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject:        OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject:        CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE
Subject:        OU=Class 1 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject:        CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US
Subject:        CN=GTE CyberTrust Global Root,OU=GTE CyberTrust Solutions\, Inc.,O=GTE Corporation,C=US
Next Topic: Audit specific statment on specific table by specific user
Goto Forum:

Current Time: Tue Dec 07 22:26:14 CST 2021