SSL - Convert pfx to oracle ewallet

Step 1 to Step 6 are specific to the client & NOT GENERIC.

 Step 1: Change PFX TO JKS Format

 

keytool -v -importkeystore -srckeystore myapp.com.pfx -srcstoretype PKCS12 -destkeystore myapp.jks -deststoretype JKS

 output:

[applmgr@host1 Certs]$ keytool -v -importkeystore -srckeystore myapp.com.pfx -srcstoretype PKCS12 -destkeystore myapp.jks -deststoretype JKS

Enter destination keystore password: changeit

Re-enter new password: changeit

Enter source keystore password: Welcome!23456

Entry for alias myapp.com successfully imported.

Import command completed:  1 entries successfully imported, 0 entries failed or cancelled

 

Step 2: find the alias name from the jks file

keytool -list -v -keystore myapp.jks

 

Step3: Password of JKS and key file should be same .so set the password as “changeit”

keytool -keypasswd  -alias myapp.com -keystore myapp.jks -storepass changeit

Output:

[applmgr@host1 Certs]$  keytool -keypasswd  -alias myapp.com -keystore myapp.jks -storepass changeit

Enter key password for <myapp.com>  Welcome!23456
New key password for < myapp.com>: changeit
Re-enter new key password for < myapp.com>: changeit
 

Step 4: Create a wallet using orapki command.Please make sure you are using wallet from FMW_HOME.

$FMW_HOME/oracle_common/bin/orapki wallet create -wallet . -auto_login

 Step 5:Convert JKS to wallet by using below command.

$FMW_HOME/oracle_common/bin/orapki wallet jks_to_pkcs12 -wallet ./ -pwd UYDK4TRQ -keystore ./myapp.jks -jkspwd changeit

 Step 6 - Verify the imported certificate

 $FMW_HOME/oracle_common/bin/orapki wallet display -wallet ./