The DBMS_TRUSTED_CERTIFICATE_MANAGER system package is used to add, delete, and modify CA root certificates trusted by the OBServer cluster, for RPC security authentication.
Applicability
This topic applies only to OceanBase Database Enterprise Edition. OceanBase Database Community Edition does not support this feature.
Privilege requirements
The caller must be the sys tenant to call the system package.
Subprograms of DBMS_TRUSTED_CERTIFICATE_MANAGER
The following table lists the subprograms of DBMS_TRUSTED_CERTIFICATE_MANAGER in the current OceanBase Database version and their brief descriptions.
| Subprogram | Description |
|---|---|
| ADD_TRUSTED_CERTIFICATE | Adds a CA root certificate so that OBServer clusters or OMS components that use the certificate can securely authenticate and connect to the cluster through RPC. |
| DELETE_TRUSTED_CERTIFICATE | Removes a CA root certificate, preventing OBServer clusters or OMS components that use the certificate from connecting to the cluster. |
| UPDATE_TRUSTED_CERTIFICATE | Updates the CA root certificate information trusted by the OBServer cluster. |