Database Networking (MOSC)

MOSC Banner

How to support 2 algorithms in one wallet - SHA256withECDSA & SHA256withRSA

I am running Oracle 19c rdbms (19.18) on AIX (7.2) using a wallet for TCPS connections.

I use self-signed certificates to maintain tcps/ssl connections within the network.

I am curious how others handle replacing certificates in their oracle wallets when having to move from one algorithm to another (weak to strong).

Currently I have a wallet set up with the old algorithm (rsa) ... I have to replace the certificate using a newer algorithm (ec). I would like to not have an outage while the certificates are swapped everywhere.

I have successfully shown I can use either algorithm independently, but cannot get the wallet to behave (if it is supposed to) when both certificates are in the wallet.

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center