Managing the Certificate Life Cycle Accessing the Certificate Management Page for Wallets in Fusion Middleware Control

Managing Keystores, Wallets, and Certificates 8-31 3. A dialog box appears with the certificate, CR, or trusted certificate in the text box. You can either: ■ Copy and paste the Base64-encoded certificate to a file. ■ Export it directly to a file with the Export Certificate or Export Trusted Certificate button.

8.4.7.4 Exporting a Certificate, Certificate Request, or a Trusted Certificate Using WLST

Assuming the instance name is inst1, use this command to export a certificate request: exportWalletObjectinst1, oid1, oid, selfsigned, password, CertificateRequest, tmp, subject_dn where password is the password for this wallet, tmp is the path under which the certificate request is exported in BASE64 format in the file base64.txt, and subject_dn is the distinguished name of the certificate request that is exported. To export a certificate or trusted certificate, replace CertificateRequest in the above command with Certificate or TrustedCertificate.

8.4.7.5 Importing a Certificate or a Trusted Certificate Using Fusion Middleware Control

Take these steps to import a certificate or a trusted certificate: 1. Navigate to the Certificate Management page. See Section 8.4.6, Accessing the Certificate Management Page for Wallets in Fusion Middleware Control. 2. Click Import. 3. In the Import Certificate dialog, you can select either a certificate or a trusted certificate. 4. There are two ways to do the import: ■ Paste the Base64-encoded certificate or trusted certificate in the text box. ■ Use the file selector to browse your file system to locate a file containing the Base64-encoded certificate or trusted certificate. Note: You cannot use Fusion Middleware Control to import DER-encoded certificates or trusted certificates into an Oracle wallet. Use one of these tools instead: ■ Oracle Wallet Manager or ■ orapki command-line tool 8-32 Oracle Fusion Middleware Administrators Guide 5. Click OK.

8.4.7.6 Importing a Certificate or a Trusted Certificate Using WLST

Assuming the instance name is inst1, use this command to import a certificate into a wallet: importWalletObjectinst1, oid1, oid, selfsigned, password, Certificate, tmpcert.txt where password is the password for this wallet and tmpcert.txt is the file that contains BASE64 encoded certificate. To import a trusted certificate, replace Certificate in the above command with TrustedCertificate. 8.4.7.7 Deleting a Certificate Request, a Certificate, or a Trusted Certificate Using Fusion Middleware Control Take these steps to delete a CR, a certificate, or a trusted certificate: 1. Navigate to the Certificate Management page. See Section 8.4.6, Accessing the Certificate Management Page for Wallets in Fusion Middleware Control. 2. Select the row containing the certificate request, certificate or trusted certificate. 3. Click Delete. 4. A dialog box appears, requesting confirmation. 5. Click Yes. 6. The object no longer appears in the Manage Certificates list.

8.4.7.8 Deleting a Certificate Request, a Certificate, or a Trusted Certificate Using WLST

Assuming the instance name is inst1, use this command to delete a certificate: removeWalletObjectinst1, oid1, oid, selfsigned, password, Certificate, subject_dn Note: You cannot use the WLST command-line tool to import DER-encoded certificates or trusted certificates into an Oracle wallet. Use one of these tools instead: ■ Oracle Wallet Manager or ■ orapki command-line tool