6.2.2 Enable one-way SSL

This topic explains systematic instructions to enable one-way SSL.

  1. Generate a custom keystore identity.jks for Weblogic Server containing a certificate.
  2. In the Settings for AdminServer screen, set the Keystore details under the Keystore tab.

    Figure 6-11 Settings for Admin server - Keystore Identity



    For more information, refer to the fields description table.

    Table 6-1 Keystore- Field Description

    Field Description
    Custom Identity Keystore Specify the identity.jks file location
    Custom Identity Keystore Type Specify Keystore type as JKS.
    Custom Identity Keystore Passphrase Specify the passphrase used to create the Keystore.
    Confirm Custom Identity Keystore Passphrase Confirm the passphrase used to create the Keystore.

    Figure 6-12 Keystore

  3. Copy the certificate to Oracle HTTP Server and import the new certificate into the OHS wallet as a trusted certificate.
  4. Add the following new directive in mod_wl_ohs.conf to point to the wallet location.
    WlSSLWallet ${ORACLE_INSTANCE}/config/OHS/{COMPONENT_NAME}/keystores/default
  5. Change the port in the mod_wl_ohs.conf file to point to the SSL port of the Weblogic server.
  6. Restart both Weblogic Server and Oracle HTTP Server.