Which certificate type involves the uploading of a keystore (.jks) file to Oracle Integration (OIC) to facilitate two-way SSL communication with external services?

Two-way SSL (Secure Sockets Layer), also known as mutual TLS (mTLS), requires both the client and server to exchange and validate their public key certificates to establish a secure connection. In Oracle Integration (OIC), when acting as a client to an external service that requires two-way SSL, OIC must present its own identity certificate. This is accomplished by uploading an "Identity Certificate" which is packaged in a Java KeyStore (.jks) file containing the private key and the public certificate chain. The standard format for these public key certificates used in SSL/TLS communication is X.509.

A. SAML: This is an XML-based standard for exchanging authentication and authorization data for Single Sign-On (SSO), not for establishing transport-level security like two-way SSL.
B. PGP: Pretty Good Privacy (PGP) is a standard used for encrypting and decrypting data at rest or in transit (e.g., files), not for authenticating endpoints in an SSL/TLS handshake.
D. Signing key: This is a generic term for a private key used to create digital signatures. While a private key is part of the keystore, "Signing key" is not a certificate type standard like X.509.

1. Oracle Official Documentation - Using Integrations in Oracle Integration Generation 2: In the section on managing security certificates

it details the process for two-way SSL. It states

"For two-way SSL communication

you must upload an identity certificate. This certificate type requires you to upload a keystore file (.jks) that contains the private key and the certificate of the client." The certificates contained within the keystore for SSL/TLS are based on the X.509 standard.

Source: Oracle Help Center

Using Integrations in Oracle Integration Generation 2

"Manage Security Certificates"

Section: "Upload a Certificate".

2. Oracle Official Documentation - REST API for Oracle Integration Generation 2: The security overview for the REST API discusses the use of SSL for secure communication. The underlying certificate technology for all SSL/TLS communication

including the certificates managed within OIC

is X.509.

Source: Oracle Help Center

REST API for Oracle Integration Generation 2

"Security"

Section: "Transport Layer Security".