Oracle | DBMS_USER

Oracle DBMS_USER_CERTS Version 23c

General Information

Library Note

Morgan's Library Page Header

ACE Director Alum Daniel Morgan, founder of Morgan's Library, is scheduling complimentary technical Workshops on Database Security for the first 30 Oracle Database customers located anywhere in North America, EMEA, LATAM, or APAC that send an email to asra_us@oracle.com. Request a Workshop for your organization today.

Purpose Utility enabling the addition, deletion and maintenance of certificates in the database.

This package uses subprograms to add and delete X.509 certificates which are used for blockchain table signature verification by the current user.

A typical use case is to attach a digital signature to a row in a blockchain table and be able to verify the digital signature later. A certificate used to sign one or more rows in blockchain tables and which has since expired should remain in the database until all those rows have been deleted from the blockchain tables.

AUTHID CURRENT_USER

Dependencies

DBMS_USER_CERTS_LIB

Documented Yes

First Available 20c

Security Model Owned by SYS with EXECUTE granted to PUBLIC

Source {ORACLE_HOME}/rdbms/admin/dbmscert.sql
{ORACLE_HOME}/rdbms/admin/prvtcert.plb

Subprograms

ADD_CERTIFICATE	DROP_CERTIFICATE	DROP_CERTIFICATE_REPL
ADD_CERTIFICAT_REPL

ADD_CERTIFICATE (parameter renamed in 23c)

Adds X.509 certificates which are used for signature verification of blockchain tables dbms_user_certs.add_certificate( x509_cert IN BLOB, cert_id OUT RAW); PRAGMA SUPPLEMENTAL_LOG_DATA(add_certificate, NONE);

TBD

ADD_CERTIFICATE_REPL (new 23c)

Undocumented dbms_user_certs.add_certificate_repl( x509_cert IN BLOB, cert_id IN RAW, cert_guid IN VARCHAR2, username IN VARCHAR2); PRAGMA SUPPLEMENTAL_LOG_DATA(add_certificate_repl, NONE);

TBD

DROP_CERTIFICATE (parameter renamed in 23c)

Drops a certificate that is used for signature verification of blockchain tables dbms_user_certs.drop_certificate(cert_id IN RAW); PRAGMA SUPPLEMENTAL_LOG_DATA(drop_certificate, NONE);

TBD

DROP_CERTIFICATE_REPL (new 23c)

Undocumented dbms_user_certs.drop_certificate( cert_id IN RAW, username IN VARCHAR2); PRAGMA SUPPLEMENTAL_LOG_DATA(drop_certificate_repl, NONE);

TBD