APEX Oracle 11g HTTP Server - Cannot get SSL working

Question

I have installed APEX on Oracle 11g with the Oracle HTTP Server on MS Windows server.
Data base up and running, APEX up an running.
All works as expected on port 7777
When I try 4443 I get error message re self signed certificate by Oracle, but if I click through error message I get an https connection.
I want to replace default cert with a locally signed cert, and get SSL working on 4443, then switch to port 443.
I have used the Oracle Wallet manager, generated a CSR, had this signed by my corproate CA, and installed the corporate CA cert and the newly signed server cert into the wallet (with Auto Login Set) and saved it in:
D:\orahttp\Oracle_WT1\instances\apex\config\OHS\ohs1\keystores\infosec2wallet
This creates two files: ewallet.p12 and cwallet.sso
I then manually add the group/users "SYSTEM" and "Administrators" to these two files to match the security tab on the default wallet.
I T then go to the ssl.conf file located at:
D:\orahttp\Oracle_WT\instances\apex\config\OHS\ohs1\ssl.conf
and changed the entry:
#SSLWallet "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/default"
SSLWallet "${ORACLE_INSTANCE}/config/${COMPONENT_TYPE}/${COMPONENT_NAME}/keystores/infosec2wallet"
I then stop and start the Oracle HTTP Server - ohs1 from the start menu.
Then I try to connect from my desk top machine using the following URL:
https://us-pghinfosec2.ariba.com:4443/pls/apex/f?p=101:1:
I get the clasic MS IE Message:
==========
Internet Explorer cannot display the webpage
Most likely causes:
You are not connected to the Internet.
The website is encountering problems.
There might be a typing error in the address.
What you can try:
Diagnose Connection Problems
More information
This problem can be caused by a variety of issues, including:
Internet connectivity has been lost.
The website is temporarily unavailable.
The Domain Name Server (DNS) is not reachable.
The Domain Name Server (DNS) does not have a listing for the website's domain.
If this is an HTTPS (secure) address, click Tools, click Internet Options, click Advanced, and check to be sure the SSL and TLS protocols are enabled under the security section.
For offline users
You can still view subscribed feeds and some recently viewed webpages.
To view subscribed feeds
Click the Favorites Center button , click Feeds, and then click the feed you want to view.
To view recently visited webpages (might not work on all pages)
Click Tools , and then click Work Offline.
Click the Favorites Center button , click History, and then click the page you want to view.
==========
I am at a loss as to what to do. It acts like Oracle HTTP can not open my wallet.
I suspect it needs the password to the wallet but I cannot find any place to specify the password, and Auto Login should have addressed that issue.
Any insights welcome.
Thanks - Elton Hay

Answer 1

Hello Lakshmi,
>
I got your point but in our case HTTP Server and Oracle Database (APEX) running on different machines.
Oracle HTTP Server running on a Windows 2003 server and Oracle Database running on Sun Solaris machine.
So do i need to change Oracle 10g HTTP Server? do i need to install Oracle 11g HTTP SErver?
Please let me know if my question is not clear.
>
<ul><li>
I got your point but in our case HTTP Server and Oracle Database (APEX) running on different machines.Did I missed something?
You should have mentioned this additional information in the original question itself.
</li>
<li>Oracle HTTP Server running on a Windows 2003 server and Oracle Database running on Sun Solaris machine.As long as [url http://docs.oracle.com/cd/E37097_01/doc/install.42/e35123/otn_install.htm#BHAFJJDA]dads.conf is configured correctly there should not be a problem with this.
From Original question:
We are having Oracle APEX 3.1 version on Oracle 10g Database and Oracle 10g HTTP Server as web server in our organization.How did this setup of APEX worked?(i.e. on different machines)
If you still have doubt about this you can do the setup and find out before upgrading.
</li>
<li>So do i need to change Oracle 10g HTTP Server? do i need to install Oracle 11g HTTP SErver?This question is answered in the above post. As long as you fulfill the [url http://docs.oracle.com/cd/E37097_01/doc/install.42/e35123/pre_require.htm#CFHIIJBE]HTTP Server Requirements for APEX 4.2 (Also we are discussing this long about only Oracle 10g HTTP Server but which version?)
</li></ul>
Hope now I am more clear!
Regards,
Kiran