Config 9i Froms to use https

Question

We are configuring 9i Froms Servlet to use https according technical white paper from OTN - JAR File Signing for JInitiator 1.3
Here is our following steps:
1) Create a temporary directory, for example c:\temp\jar. Open a command prompt
session at that directory
2) Unpack the f90all.jar (download by ftp from our 9iAS mid-tier AIX host) into
this directory using the following jar command:
c:\jdk131\bin\jar -xvf c:\temp\jar\f90all.jar
3) Delete the c:\temp\jar\meta-inf directory created by the unpacking of the
JAR.
4) Repackage the JAR file in the c:\temp\jar directory using the jar command
again. c:\jdk131\bin\jar -cf f90all_resigned.jar *.*
Figure 14 ¡V Using the jar utility to re-create a JAR file
5) Sign the new version of the Forms JAR file with my custom signing identity:
c:\jdk131\bin\jarsigner
-keystore c:\jdk131\certificates\keystore
-storepass keystore_pwd
-keypass pjc_identity_pwd
f90all_resigned.jar
pjc_identity
6) verified the created jar is O.K. by using: jarsigner -verify
f90all_resigned.jar
7) ftp the new JAR file to the /forms90/java directory on the application
server machine for deployment
8)alter the formsweb.cfg configurations to refer to f90all_resigned.jar rather
than f90all.jar
9) open IE 6.0 to access the test form
http://mid-tier:7778/forms90/f90servlet?config=testing (also using SSO in 9i
Forms)
It pop up a dialog asking the user if we want to trust this code, then redirect
to the SSO login page and show the test for form in IE
So, the http is working.
10) open IE 6.0 to access the test forms
https://mid-tier:4443/forms90/f90servlet?config=testing (using SSO in 9i Forms)
It prompt error: Could not connect to
https://mid-tier:4443/forms90/java/f90all_resigned.jar.
Error message: Please ensure that the
certificate for this web server is installed in C:\Program
Files\Oracle\JInitiator
And then hang the browser.
Have anyone have idea how to solve this?

Answer 1

Ernest,
though not an expert on this: But is the certificate known by the HTTP server? HTTPS requires a custom certificate to encrypt the communication. The Public key needs to be known by the client (Jinitiator) and the Server (HTTP). As far as I remember there is a section on using HTTPS written in the Oracle9iAS application server docu.
I also don't think that resigning the Forms archive files is necessary to use HTTPS. The signature of the f90all.jar files only tells the client that the Java classes can be trusted
Frank