Oracle Wallet Manager - Oracle 10g/11g Data and Database Management Utilities - page 231

Option Meaning

-R rootPwd rootWrl DN keySize
expDate

Create the root Wallet

-e pwd wrl

Create an empty Wallet

-r pwd wrl DN keySize certReqLoc

Create a certificate request, add it to Wallet
and export it to certReqLoc

-c rootPwd rootWrl certReqLoc
certLoc

Create a certificate for a certificate request

-i pwd wrl certLoc NZDST_CERTIFICATE
| NZDST_CLEAR_PTP

Install a certificate | trusted point

-d pwd wrl DN

Delete a certificate with matching DN

-s pwd wrl

Store sso Wallet

-p pwd wrl

Dump the contents of Wallet

-q certLoc Dump the contents of the certificate

-Lg pwd wrl crlLoc nextUpdate Generate CRL

-La pwd wrl crlLoc certtoRevoke Revoke certificate

-Ld crlLoc

Display CRL

-Lv crlLoc cacert

Verify CRL signature

-Ls crlLoc cert

Check certificate revocation status

-Ll oidHostname oidPortNumber
cacert

Fetch CRL from LDAP directory

-Lc cert

Fetch CRL from CRLDP in cert

-Lb b64CrlLoc derCrlLoc

Convert CRL from B64 to DER format

-Pw pwd wrl pkcs11Lib
tokenPassphrase

Create an empty Wallet. Store PKCS11 info
in it

-Pq pwd wrl DN keysize certreqLoc

Create cert request. Generate key pair on
pkcs11 device

-Pl pwd wrl Test pkcs11 device login using Wallet

containing PKCS11 information

-Px pwd wrl pkcs11Lib
tokenPassphrase

Create a Wallet with pkcs11 info from a
software Wallet

Managing Wallets with orapki
A CLI-based tool, orapki , is used to manage Public Key Infrastructure components
such as Wallets and revocation lists. This tool eases the procedures related to PKI
management and maintenance by allowing the user to include it in batch scripts.