How do I set up certificate revocation
I am using Oracle 19.11.0.0.0 on HP/UX Itanium 11.31. I have TLS connections set up with certificates and it works.
So far I did the following:
1) have available CRLs from the certificate authority.
2) I put the CRL files in a directory.
3) I used orapki to create a hash symbolic link to the CRL.
4) On the server sqlnet.ora I set SSL_CERT_REVOCATION = REQUIRED and set SSL_CERT_PATH= <the directory with the symbolic link hashes>
5) On the client I set SSL_CERT_REVOCATION = REQUIRED
6) Bounced the listener.
On the client workstation I invoke sqlplus /@<database> and it gives ORA-1017.
If I go on the server and set SSL_CERT_REVOCATION = NONE and bounce the listener, wait a couple of minutes and invoke sqlplus /@p2dds2.ingrfed.net it successfully establishes a TLS connection as before I tried to set up CRL.