How to create a senhasegura user wallet
  • 2 minutes to read
  • Dark
    Light
  • PDF

How to create a senhasegura user wallet

  • Dark
    Light
  • PDF

Article summary

In this document, you’ll find a step-by-step guide on how to create a user wallet to be used via the Oracle Database Proxy.

It’ll take five steps to configure the Oracle database so that it’s accessible via Database proxy in senhasegura, this document is the second step.

cluster_2_EN

Attention

It’s extremely important to correctly follow the order of documents for configuring the Oracle database so that it functions correctly as a Database Proxy.

Requirements

  • Oracle DB Server configured the minimum version is 19.0.0.0.0
  • Server with ORAPKI installed to create Wallets.
  • Connectivity of the user's workstation with senhasegura on ports 1521 and 2484.
  • Database client installed.
    • Dbeaver, minimum version:23.1.0
    • SQLPlus, minimum version:21.0.0.0.0
    • SQL Developer, minimum version:23.1.0.097
  • Don’t have filters enabled for the certificate.

Create wallet and import the certificate

The complete authentication process for DB Proxy with Oracle is performed via SSL. Therefore, the senhasegura user must also authenticate via certificate, using their IDE, for the connection to be established.
So, the senhasegura user must also have a wallet, which must be located on their workstation.

Before creating the wallet, it’s necessary to generate the senhasegura user certificate. To do this, the user must access the My certificate menu, within the user's preferences.

After generating a certificate, the user must download the file .p12, which will later be imported into your wallet. The file needs to be transferred to the location where the wallet will be generated.

Info

To find out how to collect the user's certificate in senhasegura, access the How to collect the senhasegura user’s certificate document.

Create wallet and import certificate

With the file .p12 in hand, the wallet must be created and the certificate must be imported.

Replace the strings presented in this table with the corresponding values:

StringValue
<USER_WALLET_DIR>Path where the user's wallet will be generated. For example: /tmp/<NOME_WALLET>
<USER_WALLET_PASS>Password to be assigned to the user's wallet.
<USER_SERVER>.p12File name .p12 of user.
<USER_CERT_PASS>Certificate password .p12. This password is in the senhasegura form, where the file was downloaded in the previous step.

Run the following command to create the wallet and import the certificate:

oracle$ orapki wallet create -wallet "<USER_WALLET_DIR>" -pwd <USER_WALLET_PASS> -auto_login
oracle$ orapki wallet import_pkcs12 -pkcs12file <USER>.p12 -pkcs12pwd <USER_CERT_PASS> -wallet "<USER_WALLET_DIR>" -pwd <USER_WALLET_PASS>

Collect the generated wallet and transfer it to the user's workstation

To do this, you can compress the wallet folder to facilitate the transfer.

oracle$ tar -cvzf orcl_user1-wallet.tar.gz /tmp/<NOME_WALLET>

After transfer to the user's workstation, you must extract the content and store it in a location of your choice. This location will be used to configure the IDE of your choice.

Finishing the second step of configuring Oracle for use via Database Proxy, access the document How to configure a device in senhasegura to use the Database Proxy with Oracle to perform the third part and continue the configuration.

Do you still have questions? Reach out to the senhasegura Community.


Was this article helpful?