The Root OCA Certificate Does Not Contain A CRL Distribution Point - How to Work Around This? (Doc ID 401284.1)

Last updated on FEBRUARY 03, 2022

Applies to:

Oracle Security Service - Version 10.1.2.0 and later
Information in this document applies to any platform.Goal

OCA version 10.1.2.0.2.

For inter-operation with Check Point VPN-1 the CRL distribution points (LDAP / HTTP) must be encoded into the root Certificate Authority certificate as x509v3 extensions for the VPN-1 to be able to pull CRL-Lists.

Unlike user and server certificates, the root CA certificate from Oracle Certificate Authority (OCA) does not include the CRL distribution point in the X509v3 extensions.

Can the root OCA certificate be changed to encode this URI (and maybe in addition an HTTP-URI) in the X509v3 extensions?

Solution

	To view full details, sign in with your My Oracle Support account.
	Don't have a My Oracle Support account? Click to get started!

In this Document

Goal

Solution

References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.

The Root OCA Certificate Does Not Contain A CRL Distribution Point - How to Work Around This? (Doc ID 401284.1)

Applies to:

Solution

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!