HTTP Server - Win2K and Oracle 8.1.7 and 9iAS

I have a problem with the APACHE WEB SERVER on Windows 2000 Server. It does not come up - I get "error 1067 - process terminated unexpectedly". I have installed Oracle 8.1.7 and installed 9iAS with no errors, using the 101 Web Apps book. However, I get the above error. Also, when I go to a dos prompt, I got "Can't locate Cwd.pm in @INC (@INC contains: .) at (eval 1) line 1."
Many reboots and reinstalls later with no errors and perusing this site, I have had no luck - I am an expert now in installing and wiping clean of Oracle... I would appreciate if any of you can assist me over the edge (I mean, over the top)...
null

So, here we are. I have Oracle 8.1.7 on the Windows 2000 server. I have tried everything, including dropping everything twice, trying to install 9iAS portal - then installing Portal 3.0.8. Even just trying to use the HTTP server from 8i. I continue to get the Error 1067 from the Win2K services trying to start the HTTP server. When I go to the prompt and run apache.exe from the apache\apache directory, I get a "Can't locate Cwd.pm in @INC (@INC contains: .) at (eval 1) line 1." message.
HELP!!

Similar Messages

Difference between HTTP Server port and HTTP Server listen port

Hi,
What's the difference between the following?
Oracle HTTP Server port = 7780
Oracle HTTP Server listen port = 7781
They are the ports used in my 9ias 9.0.3 instance.
Please advise.
Thank you.

Hi,
The server port, 7780, is port where HTTP server response and listen ports are other ports tha HTTP Server can listen. In IAS, the default configuration, the server port is response for Web Cache and Web Cache connect with HTTP Server in listen port.
Marcio Mesti

Do we need Oracle HTTP server to host Oracle Apex ?

We are completely new to this Oracle Apex.
Wanted to know the licensing part of it , before we get into it.
I guess Oracle Apex is free as it comes with the Oracle database license.
1) Do we need some kind of HTTP server to host the Apex on the browser ?
2) Does any HTTP server will work with Oracle Apex ?
3) Any other free Oracle tool which we can use instead of licensing Oracle HTTP server for this Apex ?
Correct me if I am wrong.
Thanks in advance for the gurus out here.

johnpau2013 wrote:
We are completely new to this Oracle Apex.
Wanted to know the licensing part of it , before we get into it.
I guess Oracle Apex is free as it comes with the Oracle database license.
1) Do we need some kind of HTTP server to host the Apex on the browser ?Yes.
2) Does any HTTP server will work with Oracle Apex ?No.
3) Any other free Oracle tool which we can use instead of licensing Oracle HTTP server for this Apex ?
Correct me if I am wrong.OHS is covered by the DB license if OHS is run on the same server. See Joel's post and the document he links to: +{message:id=9256804}+.
For information about APEX HTTP server options, see:
<li>+About Oracle Application Express Architecture+
<li>+About Choosing an HTTP Server+
<li>+HTTP Server Requirements+
<li>APEX Listener

Web Service and Oracle HTTP Server

I have a web environment with Oracle Database 10.2.0.3 , oracle http server (using mod_plsql), Oracle pl/sql web toolkit. I need to create a web service that is accessed externally which will interact with the database (select, insert, delete). Is it possible to publish a web service to the Oracle Http Server or to implement web services with the environment above

Hello,
In RDBMS 10g you cannot directly expose WS from the DB you need to use the OracleAS Web Service Runtime to do it, following this documentation:
- Developing Web Services that Expose Database Resources
This is true if we are talking about "tooling/runtime/API" but after all Web Services are mainly XML (WSDL and SOAP) so it is still possible to create by hands (PL/SQL & static files) but it is probably a long work depending of the complexity of your services.
Also, in RDBMS 11, you can now directly expose WS from the DB using the embedded HTTP server, see this Oracle 11g New Features Document
Note that before taking one approach you must take time to write up your requirement regarding Web Services eg: do I need security, which time of encoding, interoperability, ..., ... For example WS-Security that is the standard to secure SOAP messages is not (yet) supported by the Oracle 11g RDBMS Native Web Services... where when you do use the WS-Runtime you can secure the Web Service..
Regards
Tugdual Grall

Some Smaller Problems concerning HTTP-Server and iSQL*PLUS

Hi!
System: WIN2K, ORA 9.0.0.1
1. Problem: With HTTP-Server launched by ORACLE at System Start
can not connect to DB via iSQL*Plus, message: ORA-12638 (german
message:"Abruf des Berechtigungsnachweis misslungen") Credential
retrieval failed. Does no longer occur when shutting down
service and relaunching Apache manually. Why?
2. HTTP Server dies instantly when accidentially sending /*
somewhere in SQL-Statement or alone via iSQL*Plus (in SQL*Plus
Window /* starts DOC-Mode without chance to end DOC-mode with #)
Can anyone help? Thank you!
TIP: Manipulating Database via iSQL*Plus on a Eudora-Browser
with IR Cellular impresses every Boss! :-)

Hello CJ
1st of all: Thank you for your answer!
What privilege iSQL*Plus connection are you trying make?Tried as normal user and as sysdba. Both works well with Apache
in Console, both doesn4t work with Apache as a Service started
(even if there is a 2nd Apache started in Console window)
Can you connect as a normal user
if you specify a full DB connection string? By full connection
string I mean the "(DESCRIPTION=(ADDRESS_LIST=(ADDRESS...)))"
etc. syntax commonly seen in tnsnames.ora. No! Error "SP2-0306 Invalid Option" occurs.
that the problem also occurs in the old GUI (non-web version)
version of SQL*Plus?Right! Typing DOC means entering (now unsupported) DOC Mode
(DOC> Prompt) return to SQL> with #. Typing /* gets you into DOC-
Mode but you can4t leave with #. (SQL*Plus userguide and
reference Part F Obsolete Commands)
In iSQL*Plus (web based version) typing /* caused apache to die
(on console!! as service as I mentioned: no connection ).
Somehow problem no longer occurs. (Miracle?)
3. Your Palm efforts sound neat! Can you share with the forum
how usable it is? Are there any configuration tricks
you found?No tricks needed, I just started a connection to a local
Provider via IR and Nokia Cellular. Connected to DB via
iSQL*Plus using Eudora-Browser, logged in as sysdba and shutdown
DB and started it again. Looked at some v$-views, killed a
session or two had a good time and impressed everyone. Decide
for yourself if this could be useful. Might be helpful for
remote troubleshooting during holidays so don4t tell your boss
about it.
(Did anyone try this on Windows CE? Like to know!)
Dominic

Oracle application server 10g and apex

Hi allm
Can someone show me a guide on how to use Oracle Application Server 10g with APEX. I'm currently using Oracle HTTP Server but decided to use OAS instead so that I can use the Report Server and the Oracle BI Publisher for the reports.
I'm currently using this guide (http://www.oracle.com/technology/products/database/application_express/howtos/howto_useoas10g.html) but I can't seem to find the marvel.conf and the oracle_apache.conf.
Also, is it really necessary to use OAS instead of Oracle HTTP Server if I want to use Oracle BI Publisher?
Thanks.
Allen
Edited by: A.Sandiego on Sep 3, 2008 12:01 AM

Hi,
Thanks for the response.
Unfortunately I still get the same problem. Somehow I just can't find the marvel.conf anywhere in my machine. I setup my APEX not by using the companion cd but by downloading the apex_3.1.2 then running the apexins.sql. Then install the Oracle HTTP Server only and configured the dads.conf located in the ORACLE_HTTP_SERVER_HOME/Apache/Apache/mod_plsql/conf. It works perfectly with this.
I then installed Oracle Application Server 10g. I'm trying to figure out how to use this instead of the Oracle HTTP Server.
Thanks.
Allen

How to call webservice through Oracle HTTP Server

I have cluster of three Managed Servers. They are behind a Oracle HTTP Server. I deployed a web service to the cluster. When calling web service, I got the error. The error is that the client of web service can not directly access the Managed Servers.
The error tell that it can not access http://webapp01:7003/webservice/HelloWorld?WSDL
Where webapp01 is the host name of a managed server.
Is there a way that web service return the result to HTTP Server and HTTP Server return it to web service client.

1. Before you invoke the WebServices from client program, I guess you may have already generated the webservices client jar for the WSDL that is deployed using sun jdk "wsimport" command or bea's clientgen ant task. At this time, what is the wsdl url you gave. In the generated client jar file you should see .JAVA files also. Check the Service related .java file and check the WSDL URL in that file. If it is using weblogic servers managed server host and port, then the problem you see is obvious.
2. To fix this, you re-generate the webservices client jar file again this time giving the http server host and port instead of weblogic host and port. I am hoping you already modified httpd.conf file to accept the webservice url pattern. Check the .JAVA file generated for service to see the WSDL URL that is having inside.
3. Another approach is on your client side, before you invoke any operation on WebService, you will be first getting Service object, then Port object and invoke methods on Port object. When you get Service Object, you can pass the WSDL URL as one parameter and ServiceName (QName) as second parameter. Most of time we use default constructor without any parameters to get Service object. But you can use other constructor and pass 2 parameters. The WSDL URL will have HttpServers host and port, and rest of the url for wsdl will be the same.
In our env, we have similar requirment. SOAP BPEL Process WebServices are deployed on WLS 10.3.1 on a Cluster with 2 ManagedServers. We have Apache Proxy in front of this Cluster. All our WSDL requests goes to Apache host and port + wsdl url. This inturn goes to one of the managed servers at a time in round-robin. This is working. In httpd.conf we gave "MatchExpression / " so that any request from apache will go to cluster.
HTH
Ravi Jegga

New Oracle HTTP server install unable to host remote HTMLDB.

Hi all.
I installed the Oracle HTTP Server from the Oracle 10G Release 1 companion CD on a Mac Powerbook running the Tiger OS. I have a CentOS Linux server on my network with Oracle 10G R2 database running that I've installed HTMLDB 2.0 on. I can not seem to get the HTTP server to serve up a front end to my HTMLDB. I can connect and log into the Oracle Database from the MAC using SQLPlus using the HTMLDB_PUBLIC_USER account and password.
Here is my dads.conf file:
Alias /i/ "/oracle/product/10.1.0/db_1/Apache/Apache/images/"
<Location /pls/htmldb>
SetHandler pls_handler
Order deny,allow
Allow from all
AllowOverride None
PlsqlDatabaseUsername HTMLDB_PUBLIC_USER
PlsqlDatabasePassword HTMLDB
PlsqlDatabaseConnectString CentOSServ3:1521:htmldb ServiceNameFormat
PlsqlDefaultPage htmldb
PlsqlDocumentTablename wwv_flow_file_objects$
PlsqlDocumentPath docs
PlsqlDocumentProcedure wwv_flow_file_manager.process_download
PlsqlAuthenticationMode Basic
PlsqlNLSLanguage AMERICAN_AMERICA.WE8MSWIN1252
</Location>
AddType text/xml xbl
AddType text/x-component htc
Here is the errors I'm seeing on the error log:
[Wed Jan 10 12:58:47 2007] [notice] FastCGI: process manager initialized (pid 246)
[Wed Jan 10 12:58:48 2007] [emerg] mod_onsint can't initialize ons runtime.
[Wed Jan 10 12:58:48 2007] [notice] Oracle-Application-Server-10g/10.1.2.0.0 Oracle-HTTP-Server configured -- resuming normal operations
[Wed Jan 10 12:58:48 2007] [notice] Accept mutex: flock (Default: flock)
[Wed Jan 10 12:58:58 2007] [error] [client 127.0.0.1] [ecid: 1168451937:192.168.2.121:249:0:12,0] mod_plsql: /pls/htmldb/htmldb HTTP-503 ORA-12514
It keeps giving me the error for the Language, but I've changed the PlsqlNLSLanguage serveral times to other posted values I've found and other postings and I still get that error.
Has anyone else worked through this or may have an idea how I can get this working?
Thanks,
Mike

Also, here is the error I get when browsing to : http://localhost:7780/pls/htmldb/htmldb from the HTTP server.
Service Temporarily Unavailable
The server is temporarily unable to service your request due to maintenance downtime or capacity problems. Please try again later.
Oracle-Application-Server-10g/10.1.2.0.0 Oracle-HTTP-Server Server at 192.168.3.1 Port 7780
Thanks,
Mike

Use oracle http server to configure mod_plsql

Hi,
I have a question.
I have already installed HTTP server using the Oracle Database10g Companion CD
on my Windows 2000 SP4.
At the end of the installation, it refers to http://<computer_name>:7777
to open the HTTP server page.
It seems work fine that it showed the Welcome page of HTTP Server and I find this
"Oracle HTTP Server is the Web server component of Oracle Application Server 10g Release 2 (10.1.2). Oracle HTTP Server is a robust, reliable Web server based on the Apache HTTP Server, version 1.3."
But I could'nt do anything of using the mod_plsql components nor another
Modules (mods) which showed in the welcome page since there is no link to such things.
BTW, I have experienced with the HTTP server previously on Oracle9i
When I open the HTTP server page, it showed links to some Modules (mods)
components such as mod_plsql, etc.
Does the HTTP Server in this version need to be configured to use the links like in Oracle9i's HTTP Server?
Or the new Oracle HTTP server does not support for this thing?
Actually, I worked on Oracle Workflow, which need the Oracle HTTP server to configure
some few things such as DAD.
Please, can anybody help me to solve this problem.
Thanks,
Buntoro

look at
http://download-west.oracle.com/docs/cd/B14117_01/server.101/b12255/confmods.htm
hope this helps
carlos

Using an Oracle Directory as DocumentRoot in Oracle Http Server

Hello,
¿Is it possible that OHS(Oracle Http Server) use an Oracle Directory(directory object in database) as its DocumentRoot? The idea behind that is put the web application's files in Oracle Directories for easily make updates and versioning.
Thank you very much for your help in advance.

Thanks Gary , Your reply is perfectly correct ,
I have verified the same with ETL data lineage guide ,
The Columns that match to the MCAL_CAL_NAME~MCAL_PERIOD_TYPE
MCAL_CAL_NAME = GL_PERIODS.PERIODS_SET_NAME
MCAL_PERIOD_TYPE = GL_PERIODS.PERIOD_TYPE
Query for same to get from EBS Source will be
select period_set_name , period_type From gl_periods ;
Thanks For Help !!
Regards
Neeraj Saini

How to isolate web applications at URL level with Oracle HTTP Server?

We have 2 machines each for oracle web cache, oracle http server and oracle application server (oc4j). We would like to host many web applications on this infrastructure. We have an issue with application/web site isolation for maintenance purposes.
We have several oc4j containers for different web sites/applications but they all use one instance of Oracle Http Server. When we need to make changes to an application/web site or introduce a new web site (URL), we change the OHS configuration and restart OHS on each of the machines.
As we have many URLs hosted on this OHS and plan to host a lot more (may be around 300), we need a way to slice and dice the URLs so that every change or any change should not need to go through a regression cycle or testing cycle for all the applications each weekend (our change window). When we used Apache earlier, we used to be able to create multiple httpd.conf (process level isolation) to cater to different applications.
We could do this with Oracle Http Server too but Oracle will not support us. I appreciate any advice or suggestion with this issue.
Thank you
Ramana

Hi Joey,
A great idea! I recently presented at a local user group meeting about my WebSockets API (see the links in my signature). I've uploaded the presentation and the demo code I gave to our UG here.
I think the barrier to entry is with needing to know the web languages (e.g. html/css/js) as well as writing your LabVIEW code. I have joined the group and look forward to seeing some interesting content on there! Certainly some demos of using AJAX to make requests to Web Services and do something with the data (e.g. display on a graph) would be a good place to start.
Certified LabVIEW Architect, Certified TestStand Developer
NI Days (and A&DF): 2010, 2011, 2013, 2014
NI Week: 2012, 2014
Knowledgeable in all things Giant Tetris and WebSockets

Install Oracle HTTP Server to Oracle Database XE

Successfully managed to install Oracle Database XE to Windows 2000 (after temporarily dropping TNSNAMES and TNS_ADMIN variables). I want to learn how to use Application Express (formerly HTML DB) and it would be a pain/take ages to get the enterprise DBA's to install it onto a supported networked instance. I have installed HTML DB into Oracle XE but the post installation instructions require that Oracle HTTP Server is installed. How do you get Oracle HTTP Server installed into Oracle XE? Oracle Universal Installer does not recognise Oracle XE as an Oracle Home. How do you use Oracle Universal Installer on Oracle XE? or how do you download Oracle HTTP Server with InstallShield? Seems strange that Oracle XE does not integrate with other toolset installations.
Thanks

ALTER SESSION SET CURRENT_SCHEMA = FLOWS_020000;
exec FLOWS_020000.wwv_flow_upgrade.switch_schemas ('FLOWS_020000','FLOWS_020100');commit;I would give it a try, it's hard to make it worse ;).
Oracle XE / Apex is almost the same.
Some of the differences are:
- SSO authentication is not supported out of the box (although there are workarounds)
- You can assign only a single database schema to a workspace
- There are no developer accounts in the workspaces
Basically, both version are pretty much the same. You can export / import applications both ways.
I cannot see what you mean by missing templates. They are all there (although not in the filesystem but stored in the database via XMLDB).
You can reach the documentation from the homepage of XE and also from Start > Programs > Oracle Express Edition
~Dietmar.

Oracle (Apache) HTTP Server - Default Header Size limitation

Does the Oracle HTTP Server have a http header size limitation? If so, what is the maximum size allowed for http headers? Can it be changed, and how?
Which version of Apache shipped with AS 9.0.4? I've been trying to find the answer to my questions in the Apache 1.3 documentation, but I'm not having any luck.
Let me explain my problem. We're using Vintela's Single Sign-On library for authentication in our java applications. Recently we ran into a problem where a user was not being granted access to the application. Much debugging occured, eventually we had to open a trouble ticket with Vintela. They suggested it might be a http header size limitation and to check the configuration for the web cache and apache. We easily found the configuration options for the web cache, but are still looking for apache.
We've by-passed the web cache and accessed the HTTP server directly and we are still experiancing the same problem.
To keep this message short and concise, I've omitted most of our troubleshooting, we're pretty sure the problem is related to a HTTP header size limitation.

One trick I saw the Oracle guys do is telnet to the httpd port and manually type in an HTTP request.
Perhaps ask the Vintela people for a test string that you can paste in a telnet window to test if the server handles it correctly.
Also, you can put Apache in a sort of debug mode as well using the AS Console. I can't remember, but I think this may show the entire http request including the headers.

Oracle HTTP Server, client certificate chain

I use Oracle (Apache) HTTP Server, installed from Oracle SOA Suit distrib.
There're 2 types of ssl client cert chains that I use: client-issue-root, client-root.
My ssl works fine, unless I should config mod_ossl to accept only user certificates signed by certificate issuer (not root).
I add SSLRequire directive:
SSLOptions StdEnvVars ExportCertData
SSLRequire (%{SSL_CLIENT_CERT_CHAIN_0} == file("/path/to/issue.cer"))
but this doesn't work (condition expression always turn in false), and
SSLOptions StdEnvVars ExportCertData
SSLRequire (%{SSL_CLIENT_CERT_CHAIN_0} == "")
condition always turn in true.
So, SSL_CLIENT_CERT_CHAIN_0 is ALWAYS EMPTY.
I've tried to use different versions of ApacheModuleOSSL.dll (build in 09/19/2006 version 10.1.3.1, 06/12/2007 version 10.1.3.3), result is the same.
I've found something about mod_ssl (not mod_ossl) in "Technologies for Information Environment Security: TIES project report" (http://edina.ac.uk/projects/ties/ties_23-9.pdf):
"NOTE: This is the second, and more significant, problem we encountered in this area of mod_ssl: the first caused all the
SSL_CLIENT_CERT_CHAIN_n environmental variables to be empty. We traced this bug back to a literal +17 offset into a
character string that should have been +18, but by the time we had done so, a fixed version was available."
Is there the same problem in mod_ossl?
Does anybody have any ideas?

Once again)
http://www.mail-archive.com/[email protected]/msg11705.html
I've got a question for Oracle developers: is this the same problem in OHS and OHS2 mod_ossl?
And if yes, when we can wait the patch?
Thanks!

Installation of the VeriSign digital certification in Oracle HTTP Server

I am not obtaining to generate to the pair of keys and the CSR in Oracle HTTP Server, will have some tip I is thankful.
Thanks
Leandro

Hi Leandro,
Here are some steps to setup digital certificates into Oracle HTTP Server for Unix.
1. The temporary working directory is /u01/tmp/myssl.
2. The contents of <9iAS_HOME>/Apache/open_ssl/bin have been copied to the
temporary working directory created in Assumption #1.
3. SSL file names are priv.key (private key), certreq.csr (certificate request),
and cert.crt (SSL certificate). The actual SSL certificate file could be
named other than 'cert.crt'.
4. By default, SSL is configured using port 443, which requires ROOT access to
start the web listener.
If you want to change this from the default port, you will need to change
the following two parameters in the httpd.conf file to an unused port number:
Listen 443
<VirtualHost default:443>
5. All necessary UNIX environment variables are set correctly for your Oracle
product before implementing these procedures.
6. User must be familiar with UNIX concepts like shell navigation, UNIX
environments, file manipulation/search, file copy/backups, etc.
How to Request and Configure an SSL Certificate for Oracle9i Application Server
Step-by-Step Instructions:
1. Change your present working directory to the temporary working directory, e.g.,
/u01/tmp/myssl. Ensure the contents of <9iAS_HOME>/Apache/open_ssl/bin have
been copied into this temporary working directory.
2. Copy 5 large files, each at least 250KB, into your temporary working directory.
Suggest looking in any /bin directory for large sized binary files. Execute
the following command to generate the random character file:
     % openssl md5 * > rand.rnd
3. Execute the following command to generate the private key (priv.key):
% openssl genrsa -rand rand.rnd -des3 1024 > priv.key
     - when prompted, enter a "PEM pass phrase" password
     - re-enter password when prompted to verify password
     -- remember the pass phrase password you entered
     - this command generates the priv.key file and associated pass phrase
     - set permissions on the priv.key file to prevent unauthorized editing
     % chmod 400 priv.key
     - backup the priv.key file to a secure location
NOTE
The PEM pass phrase must be at least 4 characters in length. Remember this
pass phrase, you will be prompted to enter it in the next step and each
time you start up the Oracle HTTP Server (OHS) in SSL mode.
Optionally, you can unencrypt the value of the private key, so that you
will not be prompted for the PEM pass phrase every time you start up OHS
in SSL mode.
To unencrypt the private key, execute the following two commands (Note:
ensure file permissions set to r+w):
     % cp priv.key priv.key.bak
     % openssl rsa -in priv.key.bak -out priv.key
- the demo certificate shipped with Oracle9iAS does not require a pass
phrase to start OHS in SSL mode.
- on UNIX, to generate the certificate request and start OHS in SSL mode,
the pass phrase must be entered, unless you executed the above steps
to unencrypt.
- on Windows NT/2000, if a certificate is used that has a pass phrase,
the OHS will hang; therefore, on Windows NT/2000, you must execute
the steps to unencrypt.
4. Execute the following command to generate an SSL certificate request
(certreq.csr) based on your private key.
     % openssl req -new -key priv.key -out certreq.csr -config openssl.cnf
     - when prompted, enter the "PEM pass phrase" set when the private key
was created.
     - when prompted, enter the requested fields that make up the
Distinguished Name.
     -- each entry must be valid information, i.e., email, state, location, etc.
     - when prompted for the "Common Name", you MUST enter the fully
qualified name which will be accessed via client browsers; e.g.,
if clients will use:
https://mysite.domain.com
     -- then, you must enter mysite.domain.com as the "Common Name"
     - the requested 'extra' attributes, i.e., "challenge password" and
"optional company name", are OPTIONAL; just hit ENTER to use NULL values.
5. You should now have the private key and certificate request files (priv.key
and certreq.csr) in your temporary working directory.
NOTE
At this point, you can use your certificate request file 'certreq.csr' to
order a valid SSL certificate from any CA-vendor, e.g., Verisign.
After you receive your SSL certificate, skip to Step #6 for instructions
on how to deploy your SSL files.
OPTIONAL
You can start 9iAS in SSL mode (see Step #12) and test the pre-installed demo
certificate and private key included for testing purposes.
It is a good idea to test to be sure the Oracle HTTP Server SSL mode works
successfully before deploying your new SSL certificate. To try these demo
files, access the 9iAS index page in a browser using the HTTPS protocol and
the appropriate SSL Listen port. URL format:
https://myhost.domain.com:<ssl_port>
The user will see a Security Alert (IE), or New Site Certificate (Netscape)
warning message, click Continue/Next to accept.
OPTIONAL
To create a self-signed certificate, execute the following commands:
(csh) % setenv RANDFILE rand.rnd
<sh or ksh> % export RANDFILE=rand.rnd
% openssl x509 -req -days 30 -in certreq.csr -signkey priv.key > tempcert.crt
- when prompted, enter the "PEM pass phrase" set when the private key was created.
- this command generates a temporary self-signed certificate file 'tempcert.crt'
valid for 30 days, which can be used while awaiting a valid SSL certificate
purchased from an authorized CA-vendor.
- if this option is used, after generating the 'tempcert.crt' file, skip to
Step #6 for instructions on how to deploy your SSL files.
OPTIONAL
These steps are specifically for requesting a TRIAL certificate from the
CA-vendor Verisign.
- Go to www.verisign.com and click on "Free Guides and Trials" link and
follow instructions to request a "Free Trial SSL ID". During this process,
you will be asked to provide certificate request information.
- Open the 'certreq.csr' file using your text editor of choice.
- Starting with "-----BEGIN NEW CERTIFICATE REQUEST-----" copy all lines
including the BEGIN and END of certificate lines.
- Paste this copied data into the Verisign page where requested and continue.
- You will see the Verisign web site decode your certificate request
information. This decoded information is presented to you to verify it is
correct. If it is, then continue with the process.
- You will be presented with another set of questions from Verisign. Be sure
to answer with the correct email address, as this address will be used to
send your SSL certificate.
- After you answer all these questions, you will be sent a TRIAL 14-day
SSL certificate via email.
- WARNING! You must follow this step carefully, you cannot copy and paste
information from an email to a new text file. After you get your TRIAL
certificate, save the entire email message to a text file. Open this file
using your text editor of choice. You will see the email address header
information and the line:
-----BEGIN CERTIFICATE-----
- Delete all text that appears before the -----BEGIN CERTIFICATE----- line.
The modified file should contain only certificate information. After you
delete the email header, save this text file inside your temporary directory
with the filename 'trialcert.crt'.
6. Now you are ready to configure Oracle9i Application Server (9iAS) with your
SSL certificate files.
7. Back up your existing <9iAS_HOME>/Apache/Apache/conf/httpd.conf file.
8. Open the httpd.conf file with your text editor of choice.
9. Edit the following httpd.conf directives to use your generated private key
and SSL certificate file, which could be the filename for either the
temporary self-signed certificate, the TRIAL test certificate, or the
purchased valid certificate. The information following the # symbol are
comments.
NOTE
The directory of the SSL files (private key and certificate file)
can reside in any location you choose. The temporary working
directory will continue to be referenced in these procedure steps.
# use the appropriate (i.e., valid, temporary, or trial) certificate filename
SSLCertificateFile /u01/tmp/myssl/tempcert.crt
#private key from Step #4 above:
SSLCertificateKeyFile /u01/tmp/myssl/priv.key
10. Save your modified httpd.conf and exit the text editor.
11. Log in as authorized user (if default ports 80 and 443 are used, ROOT user
must execute commands in next step).
12. Execute the following command to stop, then start Apache in SSL mode
(ensure proper UNIX environments are set; else, execute command from
<9iAS_HOME>/Apache/Apache/bin.)
For Oracle8iAS 1.x:
% httpdsctl stop
% httpdsctl startssl
For Oracle9iAS 1.0.2.x:
% apachectl stop
% apachectl startssl
- when prompted, enter the "pass phrase" created in Step #3.
-- not required if you unencrypted the private key file
- when the Oracle HTTP Server starts successfully in SSL mode, access the
9iAS index page in a browser using the HTTPS protocol and the appropriate
SSL Listen port. URL format:
https://myhost.domain.com:<ssl_port>
- if using a temporary self-signed or TRIAL test certificate, the user will
see a Security Alert (IE), or New Site Certificate (Netscape) warning message,
click Continue/Next to accept.
====================
I hope this help !!
Ilan Salviano

HTTP Server - Win2K and Oracle 8.1.7 and 9iAS

Similar Messages

Maybe you are looking for