Browsers come with pre-configured set of trusted certificates. Oracle databases don't. So when a developer tries to issue an https URL to some website, it fails with a certificate error until I add the site's root certificate to a wallet. This is a real pain, for the developers as well as for me. Does anyone have (or know of) a wallet that has all the commonly used certificates installed?
So far I've accumulated these, but I'm sure there are many more that will be needed:
$ orapki wallet display -wallet $WALLET -pwd $PWD
Oracle PKI Tool : Version 126.96.36.199
Copyright (c) 2004, 2014, Oracle and/or its affiliates. All rights reserved.
Subject: CN=VeriSign Class 3 Public Primary Certification Authority - G5,OU=(c) 2006 VeriSign\, Inc. - For authorized use only,OU=VeriSign Trust Network,O=VeriSign\, Inc.,C=US
Subject: CN=GeoTrust Global CA,O=GeoTrust Inc.,C=US
Subject: CN=Symantec Class 3 Secure Server CA - G4,OU=Symantec Trust Network,O=Symantec Corporation,C=US
Subject: OU=Class 2 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: CN=DigiCert Global Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject: OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: CN=Baltimore CyberTrust Root,OU=CyberTrust,O=Baltimore,C=IE
Subject: OU=Class 1 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US
Subject: CN=DigiCert SHA2 Secure Server CA,O=DigiCert Inc,C=US
Subject: CN=GTE CyberTrust Global Root,OU=GTE CyberTrust Solutions\, Inc.,O=GTE Corporation,C=US