This page (revision-10) was last changed on 26-Nov-2021 10:22 by ibarr

This page was created on 26-Nov-2021 10:22 by ibarr

Only authorized users are allowed to rename pages.

Only authorized users are allowed to delete pages.

Page revision history

Version Date Modified Size Author Changes ... Change note
10 26-Nov-2021 10:22 8 KB ibarr to previous
9 26-Nov-2021 10:22 8 KB ibarr to previous | to last
8 26-Nov-2021 10:22 8 KB ibarr to previous | to last
7 26-Nov-2021 10:22 8 KB ibarr to previous | to last
6 26-Nov-2021 10:22 7 KB ibarr to previous | to last
5 26-Nov-2021 10:22 7 KB ibarr to previous | to last
4 26-Nov-2021 10:22 7 KB ibarr to previous | to last
3 26-Nov-2021 10:22 7 KB ibarr to previous | to last
2 26-Nov-2021 10:22 6 KB ibarr to previous | to last SOP.Configure SSL in WebLogic Server ==> Configure SSL in WebLogic Server
1 26-Nov-2021 10:22 6 KB ibarr to last

Page References

Incoming links Outgoing links
Configure SSL in Web Logic Server...nobody
Configure SSL in WebLogic Server

Version management

Difference between version and

At line 14 changed one line
|Iain Barr|2015-05-25|Corrections to KEYTOOL command lisnes|3
|Iain Barr|2015-05-25|Corrections to KEYTOOL command lines|3
At line 46 changed one line
Once you have received the certificate back from your certificate authority, you will need to import it along with the Root CA certificate(s) into your keystore.\\
Once you have received the certificate back from your certificate authority (CA), you will need to import it along with the Root CA certificate(s) and any intermediate cerificates into your keystore.\\
In the file explorer of MS Windows, open the server certificate from your CA and select the Certificate Path tab. \\
[GoDaddyCert.jpg]\\
The server name has been blocked out for security reasons.\\
\\
If the certificate shows several CA's above the server name as in the GoDaddy example above, each CA ''must be'' imported into the keystore.\\
\\
In the case of GoDaddy, the CA certificates are included in a certificate bundle. However each certificate will need to be separated out into its own file an imported. Alternately you can download the individual certificates from their web site at [GoDaddy repository|https://certs.godaddy.com/repository]\\
\\
At line 52 changed one line
Repeat this step for each Root and Intermediate certificate.\\
Repeat this step for each Root and Intermediate certificate, ensuring each has a unique alias in the keystore (IE. change both the -alias and -file options for each import). These certificates need to be imported in order listed in the certificate path of the server.\\
\\
At line 66 added 3 lines
\\
If an error during the import is generated with the string "failed to establish chain from reply", a certificate may have been missed or imported in the wrong order.\\
At line 90 added one line
\\
At line 96 added one line
Click on 'Advanced' and ensure the 'Use JSSE SSL' check mark is turned on.
At line 98 added 9 lines
Select the Server Start tab \\
in the 'Arguments text area add:\\
%%prettify
{{{
-Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.1
}}}
/%
This defines the minimum protocol version to use during SSL handshake.\\
At line 112 added one line
Ensure the lists of resources include 'cryptoj.jar' and 'wlthint3client.jar'. The 'wlfullclient.jar' should not be used.\\
At line 115 added 4 lines
%%warning
If the rootCA is an internal certificate authority, the list of Java trusted CA's will need to be modified on the server. The Java keystore file is named 'cacerts' and is located in the security directory under JRE. IE. /usr/java/jdk1.8.0_45/jre/lib/security.
%%
At line 96 removed one line
This page (revision-10) was last changed on 26-Nov-2021 10:22 by ibarrTop