Oracle Wallet Manager hang when import a trusted cert

Question

i'm facing problem when import 1 of my client's cert.
it hang and not responsive when i try to import it.
the oracle wallet manager version is 10.1.0.4.2
my client's cert is 512bit self signed
Message was edited by:
kinwah.lai

Answer 1

Hi,
To use it, you need to convert the cert into binary format. Then it is simply dumpasn1 bincert.cer. This dumpasn1 output is obtained from your cert:
0 30 524: SEQUENCE {
4 30 438: SEQUENCE {
8 A0 3: [0] {
10 02 1: INTEGER 2
13 02 17: INTEGER
: 00 C4 CE 12 F5 0D A9 0A 4C C1 56 80 3F B0 01 7C
: 99
32 30 13: SEQUENCE {
34 06 9: OBJECT IDENTIFIER
: sha1withRSAEncryption (1 2 840 113549 1 1 5)
45 05 0: NULL
47 30 126: SEQUENCE {
49 31 11: SET {
51 30 9: SEQUENCE {
53 06 3: OBJECT IDENTIFIER countryName (2 5 4 6)
58 13 2: PrintableString 'MY'
62 31 17: SET {
64 30 15: SEQUENCE {
66 06 3: OBJECT IDENTIFIER localityName (2 5 4 7)
71 13 8: PrintableString 'Malaysia'
81 31 35: SET {
83 30 33: SEQUENCE {
85 06 3: OBJECT IDENTIFIER organizationName (2 5 4 10)
90 13 26: PrintableString 'Carrefour.net V22 Malaysia'
118 31 55: SET {
120 30 53: SEQUENCE {
122 06 3: OBJECT IDENTIFIER commonName (2 5 4 3)
127 1E 46: BMPString
: '[email protected]'
175 30 30: SEQUENCE {
177 17 13: UTCTime '070309053122Z'
192 17 13: UTCTime '090309053122Z'
207 30 126: SEQUENCE {
209 31 11: SET {
211 30 9: SEQUENCE {
213 06 3: OBJECT IDENTIFIER countryName (2 5 4 6)
218 13 2: PrintableString 'MY'
222 31 17: SET {
224 30 15: SEQUENCE {
226 06 3: OBJECT IDENTIFIER localityName (2 5 4 7)
231 13 8: PrintableString 'Malaysia'
241 31 35: SET {
243 30 33: SEQUENCE {
245 06 3: OBJECT IDENTIFIER organizationName (2 5 4 10)
250 13 26: PrintableString 'Carrefour.net V22 Malaysia'
278 31 55: SET {
280 30 53: SEQUENCE {
282 06 3: OBJECT IDENTIFIER commonName (2 5 4 3)
287 1E 46: BMPString
: '[email protected]'
335 30 92: SEQUENCE {
337 30 13: SEQUENCE {
339 06 9: OBJECT IDENTIFIER rsaEncryption (1 2 840 113549 1 1 1)
350 05 0: NULL
352 03 75: BIT STRING 0 unused bits, encapsulates {
355 30 72: SEQUENCE {
357 02 65: INTEGER
: 00 86 75 E6 DA C8 18 CB 77 44 C5 E9 48 F7 45 41
: 85 52 8E 70 E7 D1 D0 C5 7E 48 5D BC AB 9E C9 99
: CC 70 FC 18 F2 E4 12 78 38 7D CA 06 3C 18 64 E6
: FD 6B 3A CD 00 02 2B A0 67 CB F0 86 1C 13 0F 43
: D1
424 02 3: INTEGER 65537
429 A3 15: [3] {
431 30 13: SEQUENCE {
433 30 11: SEQUENCE {
435 06 3: OBJECT IDENTIFIER keyUsage (2 5 29 15)
440 04 4: OCTET STRING, encapsulates {
442 03 2: BIT STRING 0 unused bits
: '00000101'B
: Error: Spurious zero bits in bitstring.
446 30 13: SEQUENCE {
448 06 9: OBJECT IDENTIFIER
: sha1withRSAEncryption (1 2 840 113549 1 1 5)
459 05 0: NULL
461 03 65: BIT STRING 0 unused bits
: 51 13 3B 3C 7A EA 9A 97 30 FA F1 2E E5 A4 CD 77
: D6 02 6D BF 1B 4D E3 F3 5F 93 3F D7 96 0E 40 69
: 8A 29 B4 B1 B5 C0 79 B8 4C 6E 96 C6 15 26 61 F7
: 4E D5 27 9C 71 B6 5D 92 E6 3B 71 6E 76 02 E1 97
0 warnings, 1 error.
As you can see, there is an error: Error: Spurious zero bits in bitstring. For this particular instance, OWM cannot import this cert properly. Please ask your tp to provide a self signed cert that complies with the ASN1 standard.
Eng