How To Configure OAG to Use A Dynamic CRL Certificate Validation (Doc ID 2293451.1)

Last updated on NOVEMBER 12, 2021

Applies to:

Goal

It is necessary for API Gateway to validate user certificates against the list of revoked certificates from the file based CRL.  This filter enables validation of certificates against a Certificate Revocation List (CRL) that has been published by a Certificate Authority (CA).  The CRL is retrieved from the specified URL and is cached by the server for certificate validation.  The filter automatically fetches a potentially updated CRL from this URL when the criteria specified in the Automatic CRL Update Preferences section are met.  This document is intended to be a guide as to how to configure OAG to use dynamic CRL certificate validation.

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.