convert Auto-Login (cwallet.sso) Wallet into a PKCS12 compliant Wallet

一步不行吗 ？  

 AUTO_LOGIN ,AUTO_LOGIN local ,AUTO_LOGIN only 不同用法

+ If you are already using AUTO_LOGIN wallet on the source database, you will already have ewallet.p12 and cwallet.sso files on the source. If the source AUTO_LOGIN wallet was NOT created with LOCAL option, you can copy the autologin wallet file i.e. cwallet.sso to auxiliary along with  ewallet.p12 file and no need to create the autologin wallet on auxiliary. However,  if the source AUTO_LOGIN wallet was created with LOCAL option, do not copy cwallet.sso file to auxiliary server. Copy only the ewallet.p12 file to auxiliary and run Step 3 above to create cwallet.sso file explicitly for the auxiliary server.

+ In above orapki command, ensure that you correctly specify the wallet password otherwise you may get a misleading error message that the wallet file could not be found.

1. If $JAVA_HOME is not set: a)For FMW 11g components associated with a WebLogic Domain or a FMW 12c Collocated OHS install run: $MIDDLEWARE_HOME/user_projects/domains/<domain>/bin/setDomainEnv.sh    b) For FMW 11g Standalone Webtier with no Weblogic domain, or a FMW 12c Standalone Domain run:    export JAVA_HOME=$MIDDLEWARE_HOME/jdk/bin    2. Convert the Wallet you want to export to a Java Keystore: $MIDDLEWARE_HOME/oracle_common/bin/orapki wallet pkcs12_to_jks -wallet <path>/cwallet.sso -jksKeyStoreLoc <path>/ewallet.jks -jksKeyStorepwd <jkspassword> For example: MW_HOME/oracle_common/bin/orapki wallet pkcs12_to_jks -wallet INSTANCE_HOME/config/OHS/ohs1/keystores/default/cwallet.sso -jksKeyStoreLoc INSTANCE_HOME/config/OHS/ohs1/keystores/default/ewallet.jks -jksKeyStorepwd password 3. Create a Password Protected Wallet (e.g ewallet.p12) in a new location: $MIDDLEWARE_HOME/oracle_common/bin/orapki wallet create -wallet <path> -auto_login For example: MW_HOME/oracle_common/bin/orapki wallet create -wallet INSTANCE_HOME/config/OHS/ohs1/keystores/default/newwallet -auto_login Please enter a password for this Wallet: password Please confirm the password: password 4. Convert the Keystore created in Step 2. to the wallet created in Step 3: $MIDDLEWARE_HOME/oracle_common/bin/orapki wallet jks_to_pkcs12 -wallet <wallet_location_from_Step3> -pwd <Step3_pwd> -keystore <keystore_location_from_Step2>/ewallet.jks -jkspwd <Step2_pwd> For example: MW_HOME/oracle_common/bin/orapki wallet jks_to_pkcs12 -wallet INSTANCE_HOME/config/OHS/ohs1/keystores/default/newwallet -pwd password -keystore MW_HOME/oracle/common/bin/ewallet.jks -jkspwd password 5. At this point you now have converted your original Auto-Login (cwallet.sso) Wallet into a PKCS12 compliant Wallet (ewallet.p12 ) which can be used in any 3rd party PKCS12 aware application.