How can we use two user certificates at a time?

Hi,
I want to use two different user certificates for two different trading partners. Can we keep two private keys in single wallet and use those simultaneously? In our case our two trading partners are using different CA's certificate and we are forced to use two private keys.
Please tell me that is there any way by which I can manage two private keys at a time in single wallet?
Please help.
Thanks & Regards,
Anuj Dwivedi

a. How To Extract A Private Key and Certificate From A Wallet
Oracle does not provide any functionality within Wallet Manager, or otherwise, to do this. However this can be achieved using OpenSSL.
- If a Linux server is available, OpenSSL is usually installed by default (/usr/bin/openssl). If not you can download it from www.openssl.org
- To extract the key and certificate from the Wallet run:
openssl pkcs12 -in ewallet.p12 -passin pass:<wallet_password> -out ewallet.txt -nodes
- The resulting ewallet.txt is a file that contains the unencrypted private key, the certificate and all the root CA's in the wallet. Then the relevant information for the key, and certificate(s) can be copied to separate files to create the individual key and certificate(s)
b. How to Convert a Certificate and Private Key to an Oracle Wallet
SSL2OSSL (UNIX) and OSSLCONVERT (Windows) are tools that allow you to convert Private Keys and Certificates to an Oracle Wallet format. This format is required for Oracle Application Server. $ORACLE_HOME/Apache/Apache/bin/ssl2ossl
Points to Note:
* Even though capath, cafile, and chain are optional, at least one must be specified.
* All the certificates that are being converted must be in base64 format.
* If you are converting a self signed certificate, running ssl2ossl/osslconvert does not import the certificate as a Trusted Certificate. Therefore it is necessary to import the certificate as a Trusted Certificate in Wallet Manager after its converted, otherwise the Wallet will not work with Application Server.
usage:
$ ssl2ossl -cert /<path>/server.crt -key /<path>/private.key -cafile /<path>/rootca.crt -wallet /ssl/wallet -ssowallet yes
Enter wallet password:
Verifying password - Enter wallet password:
SUCCESS
This will create a ewallet.p12 file in /ssl/wallet

Similar Messages

  • How can I use two ports in the same time?

    My application need one pc use two ports the same time.But when I open one port and my systerm is running the other port can't be opened.
    I use the frame API in VC++6.0.
    My OS is win2000 server;
    The functions I used are ncOpenObject();

    Hi DickW
    Thank you for your help!
    I have tried the example.But the example shows how to connect one CAN network with two ports.
    I want each port connect to the net can both read and write;
    I want to apply the function like this:
    1.config the port1 and port2
    2,open port1 and port2
    But after I open port1 or port2 the other port can't be opened;
    After I open the second port it always returns negative.
    In the codes I use CAN0 and CAN1 as the CAN objects.
    Attachments:
    twoport.zip ‏1184 KB

  • How Can i Use two Different Public IP Addresses no my DMZ with ASA Firewall.

    How To Using Two Different Public IP Address on My DMZ with ASA 5520
    Postado por jorge decimo decimo em 28/Jan/2013 5:51:28
    Hi everyone out there.
    can any one please help me regarding this situation that im looking for a solution
    My old range of public ip address are finished, i mean (the 41.x.x.0 range)
    So now i still need to have in my DMZ another two servers that will bring some new services.
    Remember that those two server, will need to be accessable both from inside and from outside users (Internet users) as well.
    So as i said, my old range of public ip address is finished and we asked the ISP to gives some additional public
    ip address to address the need of the two new servers on DMZ. and the ISP gave us the range of 197.216.1.24/29
    So my quation is, on reall time world (on the equipment) how can i Use two different public ip address on the same DMZ
    on Cisco ASA 5520 v8??
    How my configuration should look like?
    I was told about implementing static nat with Sub Interfaces on both Router and ASA interface
    Can someone please do give me a help with a practical config sample please. i can as well be reached at [email protected]
    attached is my network diagram for a better understanding
    I thank every body in advance
    Jorge

    Hi,
    So looking at your picture you have the original public IP address range configured on the OUTSIDE and its used for NAT for different servers behind the ASA firewall.
    Now you have gotten a new public IP address range from the ISP and want to get it into use.
    How do you want to use this IP address range? You want to configure the public IP addresses directly on the servers or NAT them at the ASA and have private IP addresses on the actual servers (like it seems to be for the current server)?
    To get the routing working naturally the only thing needed between your Router and Firewall would be to have a static route for the new public network range pointing towards your ASA OUTSIDE IP address. The routing between your Router and the ISP core could either be handled with Static Routing or Dynamic Routing.
    So you dont really need to change the interface configuration between the Router and ASA at all. You just need a Static route pointing the new public IP address towards the ASA outside IP address.
    Now when the routing is handled between the ISP - ISP/Your Router - Your Firewall, you can then consider how to use those IP addresses.
    Do you want to use the public IP addresses DIRECTLY on the HOSTS behind the firewall?This would require you to either configure a new physical interface with the new public IP address range OR create a new subinterface with the new public IP addresses range AND then configure the LAN devices correspondingly to the chosen method on the firewall
    Do you want to use the public IP addresses DIRECLTY on the ASA OUTSIDE as NAT IP addresses?This would require for you to only start configuring Static NAT for the new servers between the inside/dmz and outside interface of the ASA. The format would be no different from the previous NAT configuration other than for the different IP addresses ofcourse
    Of the above ways
    The first way is good because the actual hosts will have the public IP addresses. Therefore you wont run into problems with DNS when the LAN users are trying to access the server.
    The second way is the one requiring the least amount of configurations/changes on the ASA. In this case though you might run into problem with DNS (to which I refer above) as the server actually has a private IP address but the public DNS might reply to the LAN hosts with a public IP address and therefore connections from LAN could fail. This is because LAN users cant connect to the servers OUTSIDE NAT IP address (unless you NAT the server to public IP address towards LAN also)
    Hopefully the above was helpfull. Naturally ask more specific questions and I'll answer them. Hopefully I didnt miss something. But please ask more
    I'm currently at Cisco Live! 2013 London so in the "worst case" I might be able to answer on the weekend at earliest.
    - Jouni

  • How can I transfer two user names from an iMac to a new macbook?

    How can I transfer two user names from an iMac to a new macbook?
    got a new laptop and need to transfer two usernames to it, complete with all documents help?

    Assuming you haven't already set up a user, the easiest way is to use the Setup Assistant during first boot of the new Mac, with the two Macs connected by firewire.
    You'll be prompted to migrate from a choice of sources - choose "from another Mac", select the catagories of data you want to transfer and follow the instructions.
    More info here, in Pondini's FAQ; http://pondini.org/OSX/SetupAsst.html

  • How can I use two accounts ?

    How can I use two accounts (mine and my wife's) to PhotoStream to my mac? I have to turn off photo stream for one or the other...can't I just leave two accounts logged on so that the photos from my iphone and hers both go to my mac?

    Photostreaming across machines requires to use the same Apple-ID on all of these machines or devices. Share all of iclouds account stuff or nothing at all . No way around as icloud is designed that way. Photostream is not designed as a sort of gallery to share with outsiders. It is for your personal entertainment .

  • How can I use two monitors to increase workspace?

    how can I use two monitors to increase workspace?

    Drag the tabs of any After Effects windows you want to the second monitor.

  • How can we use two BOM

    Dear all,
    my scenario is in this way way-
    how can we use two BOM for same material.first BOM for inhouse production. Second one for Subcontracting.(means i have to create Purchase order for partial qty.

    Dear
    1.Goto MM02-MRP4 view -Maintain two Production Version based on two BOM ( Alternative1 with Routing will be PV1 will be used for production in house  where as Alt2 with routing having PP03 as control key for external operation -PV2 )
    2.Assign the relavant production Version-PV2 in Subcontracting Info Record in ME11
    Now, based on the production version assigned in Info Record system suggests the BOM while BOM explosion in Subcon Purchase Order
    REFER : Subcontracting & BOM  alternative
    Hope this will solve your issue
    Regards
    JH
    Edited by: Jiaul Haque on Sep 29, 2010 1:27 PM

  • How can I use two different Yahoo mail accounts ion Firefox?

    I have two Yahoo mail IDs. How can I use them both simultaneously on Firefox? Right now I am running Firefox and Internet Explorer so I can have the two accounts open at the same time. I would prefer to have both accounts running on Firefox, but I can't figure out how to do it.

    Multifox is an extension that allows Firefox to connect to websites using different user names. Simultaneously! <br />
    http://br.mozdev.org/multifox/

  • How can i use exisitng user data(Id, password) for user mapping

    Hi All,
    For User mapping , we can import user mapping data for many users from user administration. and for each user
    we can maintain mapping data in the standard format.
    eg:
    [User]
    uid=user2
    $usermapping$:BCE:user=ext_user2
    $usermapping$:BCE:mappedpassword=password
    i am clear till this point.
    this all works if we know the userid and passowrd on the system 'BCE'.the passwords on the system 'BCE', are encrypted . so there is no chance for me to know the passwords.
    so how can i use the existed userid/passowrd on the system 'BCE' for the mapped user and mapped password on the portal while doing usermapping.
    Thanks in Advance,
    Lakshmi

    Hi,
    I think this should work.
    1. Setup SSO with SAP logon tickets first. How to do this is described many places, e.g. http://help.sap.com/saphelp_nw04/helpdata/en/d3/41c8ecb31d11d5993800508b6b8b11/content.htm
    This SSO will not work at first, because the username is different in the back-end system. So what you need to do is to get the back-end username into the ticket (don't need a password because that is done by the SAP logon ticket)
    2. Create a portal component which uses the usermanagement API to create a usermapping which only consists of the username and a blank password. You can do this manually I think if you have no reference system defined.
    IUserMappingService umap =(IUserMappingService)PortalRuntime.getRuntimeResources().getService(IUserMappingService.KEY);
    //this is the currently logged in user. You might another user
    IUserContext user = request.getUser();
    //Get the existing data (think it can be null)
    IUserMappingData userMapping=umap.getMappingData(systemAlias, user);
    HashMap map = new HashMap();
                             map.put(IUserMappingService.UMAP_KEY_USER, backEndUserName);
    //add blank password               map.put(IUserMappingService.UMAP_KEY_PASSWORD, "");
    //store the values                    userMapping.storeLogonData(map);
    Voila, this should allow you to do SSO using SAP logon tickets, but with another name that you use against the portal. I am uncertain if this will work if you have multiple usermappings in the sap logon ticket
    PS since the sap logon ticket is issued at logon time, you need to relogon to get the changes done by the code
    Regards
    Dagfinn

  • How can I use two displays with my Mac Mini?

    How can I connect two displays to my Mac Mini (newest generation with one thunderbold and one hdmi)?

    Have you tried connecting one to the HDMI output, and another to the Thunderbolt port (with the appropriate Mini DisplayPort-to-other connection adapter as needed)?

  • How can I use two database in Dataset in SSRS?

    Hi,
    I am using one query to generate my SSRS report. In that query I am using subquery. Now I am pulling data from multiple tales.
    DB used in sub query is different than the rest of the tables DB.(So total I am using 2 DB(Database))
    So I see that in SSRS, I can connect query(In DataSet Properties) to one DATA_SOURCE only, how can I use other database which is I used in sub-query?
    I have to move this SSRS into PROD and I can't hard code that sub-query's DB name in my query.
    Please give me suggestion. Thanks!!
    Vicky

    In SSRS 2008 R2 you can use the Lookup function (http://technet.microsoft.com/en-us/library/ee210531.aspx ) and LookupSet function (http://technet.microsoft.com/en-us/library/ee240819.aspx
    Depending on your security set up, you can reference a table in a second database on the same server using a three part name:  database.schema.table.  This is more likely to work for you if you wrap your SQL command in a stored procedure.
    Russel Loski, MCT, MCSE Data Platform/Business Intelligence. Twitter: @sqlmovers; blog: www.sqlmovers.com

  • How can I use two differant iphones on one itunes

    I can i use two differant iphones on one itunes, and keep the content seperate?

    You can sync as many iphones/ipod/ipads as you like to one computer.
    Each is different and is recognized as such

  • How can I use two Airport Express N's together

    I have just purchased the new airport express n and I have the one that I am currently using which is also an n.
    How can I use both at the same time as part of the same network?

    If your goal is to extend the wireless range of one AirPort with another, check out this Apple Support article.

  • Can't use two inputs at the same time (Mac)

    How can I add two different inputs in the same multitrack session (Mac)? Right now I'm only being able to use the default input. When I'm on Audio Hardware and click 'Settings' (to add another input) nothing happens. I used to do this without a problem on Windows.
    I need this to record a podcast with multiple hosts. I need to record what's being heard in the speakers in one input (the voices of the other two hosts) and my voice in the second input (I record it with the default microphone on my Macbook Pro).
    Thanks.

    If you mean 2 windows like on a windows PC, no you can't.

  • How can I use the free space of my Time Capsule as wireless HD ?

    Hi,
    Just set up a 2T Time Capsule and use it as Time Machine for my IMac and my MacBook.
    How can I use the 1 Tb free space to ave data available from all my devices ?
    Tks

    thierry118 wrote:
    Just set up a 2T Time Capsule and use it as Time Machine for my IMac and my MacBook.
    How can I use the 1 Tb free space to ave data available from all my devices ?
    Although it seems like you have a lot of extra space, Time Machine keeps versions, and if you want to take full advantage of the version history you should not worry about "extra space" because it will get used to provide safer coverage for the two Macs. If you had a Time Machine disk that fit your two Macs' hard drives perfectly, you would have no room for the version history, only room for the one most recent copy of each file. This can be a problem if you discover corruption that happened a while ago and cannot go back far enough in time to find an uncorrupted file.
    Therefore it's better to not try and use up the "extra space" and let it be used for a longer, safer version history for your backups.
    But like you, I want to use my Time Machine for additional network storage. So I plugged a cheap, compact hard drive into the Time Capsule USB port, and that shows up in File Sharing too. There is no need to buy anything fancier since it will be limited by both network speed and USB 2.0 anyway.

Maybe you are looking for

  • Songs play fine in iTune but when I transfer to my iPod Nano it plays with scratch sounds, how can I fix this?

    anyone has the same issue?

  • 3rd party order quesiton

    For the 3rd party Normally when we create the 3rd party order system automatically  create the PR ,Next to create the PO.and if we change the data(quantity / deliver date) in the sales order the  system will  automatically made the information date i

  • Oracle Enterprise Plugin using WBEM fetchlet

    Hi I am trying to create the OEM 12c plugin using WBEM fetchlet. The Response metric definition is quite standard using the information given in the Oracle Docs - http://docs.oracle.com/cd/B19306_01/em.102/b16246/fetchlets.htm#i1007401. The plugin va

  • 2 questions (garage band, VST related)

    1. I tried opening a garageband project in Logic Express 7.2 (running an intel mac..) but I couldn't hear any sound but the volume meters were going up and down. Does anyone know what could be wrong ? p.s the project works fine in Garageband 2. I hav

  • Unit of measure conversion

    Hello All could you please explain me how unit of measure ( sales unit and base UOM) works and their conversions in matrial master and in purchase info record? My scenario is this base UOM is pc (piece) sales unit ( KG) while creating sales order it