Showing posts with label certificates. Show all posts
Showing posts with label certificates. Show all posts

Sunday, July 27, 2008

Configuring Commercial certificates on weblogic server

Following are the steps that are required to configure SSL.


************************************************************************
1. Open a new command prompt window and set the path to your domain directory.



2. Run setDomainEnv.cmd to set the environment.



Eg :-


Steps to create self sign certificates for weblogic server

Step 1: Create a public/private key pair in a JKS file name privatekey.jks file.


You can change the attribute name according to your requirement.



keytool -genkey -alias Sandeep -keyalg RSA -dname "CN=Singh, OU=gbs, O=bea, L=abc, ST=ind, C=in" -keypass keypass -storepass storepass -validity 999 -keystore C:bea92user_projectsdomainsBatch2EvalClient-certnewprivatekey.jks



Step 2: self signing the certificate


----------------------------------------


keytool -selfcert -v -alias Sandeep -keypass keypass -keystore C:bea92user_projectsdomainsBatch2EvalClient-certnewprivatekey.jks -storepass storepass -storetype jks



Step 3: Exporting the certificate from the keystore into a DER file.


--------------------------------------------------------------------------------


keytool -export -v -alias Sandeep -file rootca.der -keystore C:bea92user_projectsdomainsBatch2EvalClient-certnewprivatekey.jks -storepass storepass



Step 4: Creating a trust for the above certificate in trust.jks file


keytool -import -v -trustcacerts -alias Singh -file rootca.der -keystore C:bea92user_projectsdomainsBatch2EvalClient-certnewtrust.jks -storepass storepass

how to configure Self sign certificate on weblogic server.

In order to configure SSL on a weblogic server, it is required that the server is configured for the private keys, digital certificates.

Weblogic server uses JKS format(Java key store) to store private keys and digital certificates.
This is called a keystore file.

Weblogic requires two keystore files for configuring SSL.
1. A identity.jks file:
2. A trust.jks file: