Oracle FAQ Your Portal to the Oracle Knowledge Grid

Home -> Community -> Mailing Lists -> Oracle-L -> Verisign and MetaLink

Verisign and MetaLink

From: Robyn Anderson Sands <robyn_at_iTeamTech.COM>
Date: Wed, 07 Jan 2004 07:54:26 -0800
Message-ID: <>

Per the doc on MetaLink, Oracle Wallet Manager and Sun Java JDK are affected by the Verisign certs.

Here is some of the info:
VeriSign Class 2 and Class 3 PCA root certificates are included in the Oracle Wallet Manager as well as Sun's Java JDK. These certificates will expire on January 7, 2004 and are referred to as the "Expiring" certificates
in this note.   

Both the Oracle Wallet Manager and Sun's Java JDK are shipped or utilized by the affected products listed above. These certificates are used in Oracle's products to authenticate web sites and applications communicating over SSL using VeriSign certificates. They are also used to digitally sign source code and libraries as a means to validate that the libraries and archives have come from a trusted source.  

VeriSign has issued new certificates with the same public key and new validity periods as a replacement for the expiring certificates. The expiring certificates should be replaced with the new certificates following the instructions described in this note.

Customers who use VeriSign Class 2 and Class3 PCA root certificates as  
trusted certificates for SSL authentication of users and servers  

(database or web server) will be affected by the root CA expiry starting
January 8, 2004. --- This patch will be available for the following products and versions: o Oracle Database Server (versions,, and o Oracle Application Server (versions,, and I can send a copy of the doc if you like. Robyn -- Please see the official ORACLE-L FAQ: -- Author: Robyn Anderson Sands INET: robyn_at_iTeamTech.COM Fat City Network Services -- 858-538-5051 San Diego, California -- Mailing list and web hosting services --------------------------------------------------------------------- To REMOVE yourself from this mailing list, send an E-Mail message to: (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from). You may
also send the HELP command for other information (like subscribing).
Received on Wed Jan 07 2004 - 09:54:26 CST

Original text of this message