So I've had this issue trying to configure this in DBeaver. I lost a lot of time in the OCI console following a false lead (the ACL error usually means it's a authorization issue). I expect other JDBC clients might have a similar issue, so this is how I eventually solved it.

Under driver manager / Oracle / libraries:

• make sure the driver is using ocjdbc:11, not ocjdbc:8

• add oraclepki-19.11.0.0.jar dependency: https://mvnrepository.com/artifact/com.oracle.database.jdbc/oraclepki/19.11.0.0

Under connection settings / Driver properties set the keystore and the truststore (location, password and type for both). The password is the one provided when you downloaded the Wallet from the portal.

The connection settings are just using the TNS setup.