This page (revision-24) was last changed on 26-Nov-2021 10:22 by kparrott

This page was created on 26-Nov-2021 10:22 by Administrator

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note
24 26-Nov-2021 10:22 9 KB kparrott to previous
23 26-Nov-2021 10:22 9 KB JMyers to previous | to last
22 26-Nov-2021 10:22 9 KB JMyers to previous | to last
21 26-Nov-2021 10:22 9 KB JMyers to previous | to last

Page References

Incoming links Outgoing links
CONFIGURING SSL
CONFIGURING SSL

Version management

Difference between version and

At line 5 changed one line
!!Implementing and Configuring SSL
!!Implementing and Configuring SSL\\
----
At line 12 changed one line
# From the start menu select: {{__''All Programs >Oracle-Home >Integrated Management Tool >Wallet Manager''__}}
#From the start menu select: {{__''All Programs >Oracle-Home >Integrated Management Tool >Wallet Manager''__}}\\ \\
#In Oracle Wallet Manager select: ''__Wallet >New __''\\ \\
#You will be prompted with a dialog box informing you that your default wallet directory does not exist and asked if you wish to create it. Answer, ‘Yes’.\\ \\
#Enter a password for the new wallet and re-enter it again to confirm. Leave the wallet type to ‘Standard’ (default).\\ \\
#After entering the password, you will be prompted with a dialog box indicating that a new wallet has been created and asked if you wish to create a certificate request at this time. Answer, ‘Yes’.\\ \\You will need to generate a certificate request to send to a certificate authority such as VeriSign, RSA, Entrust, etc. The below information will need to be filled out.\\ \\*__Common Name:__ ''<fully qualified server name> ''\\*__Organization Unit:__ ''<department name or region>''\\*__Organization:__ ''<name of company>''\\*__Locality/City:__ ''<self explanatory>''\\*__State/Province:__ ''<self explanatory>''\\*__Country:__ ''<self explanatory>''\\*__Key Size:__ ''1024bits (user define)''\\ \\%%information:Typically, Certificate Authorities (CA) use key sizes of 1024 or 2048. When certificate owners wish to keep their keys for a longer duration, they choose 3072 or 4096 bit keys. (The higher the value the more secure.)%%\\ \\Once you have entered the required information, click __OK__. You will receive a message informing you that the certificate request has been created; submit that request to a CA.\\ \\
#Click __OK__. You will notice in the Wallet panel on the left of your screen there is a __''Certificate: ~[Requested]''__ icon.\\ \\At this stage you are ready to send your request to a certificate authority for them to issue you a valid certificate.\\ \\
#Save your current settings in the Oracle Wallet Manager. Select:\\__''>Wallet >Save as ''__''Oracle-Home\Apache\Apache\conf\ssl.wlt\default''
At line 14 removed 30 lines
2. In Oracle Wallet Manager select: ''__Wallet >New __''
3. You will be prompted with a dialog box informing you that your default wallet directory does not exist and asked if you wish to create it. Answer, ‘Yes’.
4. Enter a password for the new wallet and re-enter it again to confirm. Leave the wallet type to ‘Standard’ (default).
5. After entering the password, you will be prompted with a dialog box indicating that a new wallet has been created and asked if you wish to create a certificate request at this time. Answer, ‘Yes’.
You will need to generate a certificate request to send to a certificate authority such as VeriSign, RSA, Entrust, etc. The below information will need to be filled out.
*__Common Name:__ ''<fully qualified server name> ''
*__Organization Unit:__ ''<department name or region>''
*__Organization:__ ''<name of company>''
*__Locality/City:__ ''<self explanatory>''
*__State/Province:__ ''<self explanatory>''
*__Country:__ ''<self explanatory>''
*__Key Size:__ ''1024bits (user define)''
__Note:__ Typically, Certificate Authorities (CA) use key sizes of 1024 or 2048. When certificate owners wish to keep their keys for a longer duration, they choose 3072 or 4096 bit keys. (The higher the value the more secure.)
Once you have entered the required information, click __OK__. You will receive a message informing you that the certificate request has been created; submit that request to a CA.
6. Click __OK__. You will notice in the Wallet panel on the left of your screen there is a __''Certificate: ~[Requested]''__ icon.
At this stage you are ready to send your request to a certificate authority for them to issue you a valid certificate.
7. Save your current settings in the Oracle Wallet Manager. Select:
__''>Wallet >Save as ''__
''Oracle-Home\Apache\Apache\conf\ssl.wlt\default''
At line 52 changed 9 lines
#Copy the contents of the certificate; starting at: ''__----Begin Certificate Request---__'' and ending at ''__---End Certificate Request---__''\\
{{{
-----BEGIN NEW CERTIFICATE REQUEST-----
MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdNYXJraGFtMRcwFQY
DVQQKEw5IaWdoIExpbmUgQ29ycDEbMBkGA1UECxMSVGVjaG5pY2FsIFNlcnZpY2VzMSEwHwYDVQQDExh0ZWNocm5kLm
hpZ2hsaW5lY29ycC5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAO4R0gKtW2/XH/+/cQv6KGKCe4Lzm6xIx
RK4dko38YZWk7kDEDxRasvBmYbdb+v-----END NEW CERTIFICATE REQUEST-----
}}}
#Paste the content into the Oracle Wallet Manager by right clicking the ''__Certificate:~[Requested]__'' icon.
#Copy the contents of the certificate; starting at: ''__----Begin Certificate Request---__'' and ending at ''__---End Certificate Request---__''\\%%information -----BEGIN NEW CERTIFICATE REQUEST-----MIIByzCCATQCAQAwgYoxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlvMRAwDgYDVQQHEwdNYXJraGFtMRcwFQY\\DVQQKEw5IaWdoIExpbmUgQ29ycDEbMBkGA1UECxMSVGVjaG5pY2FsIFNlcnZpY2VzMSEwHwYDVQQDExh0ZWNocm5kLm\\hpZ2hsaW5lY29ycC5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAO4R0gKtW2/XH/+/cQv6KGKCe4Lzm6xIx\\RK4dko38YZWk7kDEDxRasvBmYbdb+v-----END NEW CERTIFICATE REQUEST-----%%
#Paste the content into the Oracle Wallet Manager by right clicking the ''__Certificate:~[Requested]__'' icon.\\ \\
#Select ''__Import User Certificate __''\\ \\
#Paste the certificate into the Import Certificate box and click ''__OK__''\\Once the certificate as been imported successfully, the ''__Certificate:~[Requested]__'' icon will change to ''__Certificate:~[Ready]. __''\\ \\
#From the menu select: ''__Wallet__'' > ''__AutoLogin__''\\ \\
#Place a check mark in this field.\\ \\
#From the menu select: ''__Wallet__'' > ''__Save As__''\\ \\
#Browse to: ''Oracle-Home\Apache\Apache\conf\ssl.wlt\default''\\ \\At this point Oracle wallet will inform you that a wallet already exists in this location and will ask if you wish to overwrite. The above location overrides the default certificate that is deployed when your installed the application server – you do not have to store your certificate in this location.\\ \\
#Close Oracle wallet\\
----
!Step 2: Import Above Certificate into Java Keystore
#For those customers who want to implement SSL using a self-sign certificate or an in-house certificate, you MUST import the root certificate of the CA first before importing the user certificate. The below steps will import the root certificate and the user certificate into the Java keystore.\\The default keystore is stored in the following location: ''ORACLE-HOME\jdk\jre\lib\security\cacerts''\\%%information __Note__ The default password is __changeit’__. We strongly recommend changing it once your configuration is complete.%%\\
#To simplify the configuration, I recommend saving the root and user certificate in a file with a cer extension. For example root.cer\\ \\
#From the command prompt navigate to the following directory: ''ORACLE-HOME\jdk\jre\lib\security\'' and issue the following command:
At line 62 removed 30 lines
10. Select ''__Import User Certificate __''
11. Paste the certificate into the Import Certificate box and click ''__OK__''
Once the certificate as been imported successfully, the ''__Certificate:~[Requested]__'' icon will change to ''__Certificate:~[Ready]. __''
12. From the menu select: ''__Wallet__'' > ''__AutoLogin__''
13. Place a check mark in this field.
14. From the menu select: ''__Wallet__'' > ''__Save As__''
15. Browse to: ''Oracle-Home\Apache\Apache\conf\ssl.wlt\default''
At this point Oracle wallet will inform you that a wallet already exists in this location and will ask if you wish to overwrite. The above location overrides the default certificate that is deployed when your installed the application server – you do not have to store your certificate in this location.
16. Close Oracle wallet
!Step 2: Import above certificate into java keystore
1. For those customers who want to implement SSL using a self-sign certificate or an in-house certificate, you MUST import the root certificate of the CA first before importing the user certificate. The below steps will import the root certificate and the user certificate into the java keystore.
The default keystore is stored in the following location: ''ORACLE-HOME\jdk\jre\lib\security\cacerts''
__Note:__ The default password is __changeit’__. We strongly recommend changing it once your configuration is complete.
2. To simplify the configuration, I recommend saving the root and user certificate in a file with an cer extension. For example root.cer
3. From the command prompt navigate to the following directory: ''ORACLE-HOME\jdk\jre\lib\security\'' and issue the following command:
This page (revision-24) was last changed on 26-Nov-2021 10:22 by kparrottTop