Making API Calls with Oracle Wallet on a Linux System - Google Certificate

This guide explains how to make API calls to websites like Google Maps API and Open Holidays API using an Oracle Wallet setup on a Linux system.

Step 1: Prepare the Docker Volume

• Navigate to the default volume on the host and create a subdirectory for the wallet:
• Begin by accessing the Docker volume where you will store the wallet files. Create separate directories for each API you plan to interact with.

 

Bash

xxxxxxxxxx

 

1

cd /var/lib/docker/volumes/db_oracle-19c-data/_data

2

mkdir wallet

3

cd wallet

4

mkdir google

5

chmod 777 /var/lib/docker/volumes/db_oracle-19c-data/_data/wallet/google

• Download the certificates from the APIs:
• For each API, you'll need to obtain the SSL certificate. This can be done using the openssl command or manually downloading from the API's website.
• For Google Maps:
• Use the following command to download the certificate:

 

Bash

xxxxxxxxxx

 

1

echo | openssl s_client -servername maps.googleapis.com -connect maps.googleapis.com:443 | openssl x509 -outform PEM > google_cert.crt

• Alternatively, you can download it manually from the following link: Google Maps API.
• Ensure the certificate file has the appropriate permissions:

 

Bash

xxxxxxxxxx

 

1

chmod 777 /var/lib/docker/volumes/db_oracle-19c-data/_data/wallet/google/google.crt

Access the Docker Container and Install the Certificates

• Enter the Docker container and navigate to the respective directories:
• Access the Docker container where Oracle is running. Navigate to the directories where you will create the wallets.

 

Bash

xxxxxxxxxx

 

1

docker exec -it database bash

2

cd /opt/oracle/oradata/wallet/google

• Create new wallets for each API:
• Use the orapki command to create a wallet for each API. This wallet will store the SSL certificates.

 

Bash

xxxxxxxxxx

 

1

orapki wallet create -wallet /opt/oracle/oradata/wallet/google -pwd Sajjad -auto_login

• Add the certificates to the respective wallets:
• Import the downloaded certificates into the wallets using the orapki command.

 

Bash

xxxxxxxxxx

 

1

orapki wallet add -wallet /opt/oracle/oradata/wallet/google -trusted_cert -cert "google.crt" -pwd Sajjad

Additional Information

For more detailed information on using UTL_HTTP and SSL in Oracle databases, visit Oracle Base.

Additionally, ensure that the necessary network access control lists (ACLs) are configured in Oracle. Execute the following SQL commands as a sysadmin in SQL Developer:

 

SQL

xxxxxxxxxx

 

1

begin

2

  dbms_network_acl_admin.append_host_ace (

3

    host       => 'maps.googleapis.com', 

4

    lower_port => 443,

5

    upper_port => 443,

6

    ace        => xs$ace_type(privilege_list => xs$name_list('http'),

7

                              principal_name => 'WESS_PROD',

8

                              principal_type => xs_acl.ptype_db)); 

9

end;

Finally, update the global parameters to include the wallet paths:

 

SQL

xxxxxxxxxx

 

1

insert into GLOBAL_PARAMETER (p_name, p_value) values ('WALLET_PATH','file:/opt/oracle/oradata/wallet/google');

2

insert into GLOBAL_PARAMETER (p_name, p_value) values ('WALLET_PASS','Sajjad');

 {fullWidth}