Configure SSL for Soap to poa

Currently do not have SSL for soap enabled on my poas.
Looking to turn it on and I cannot find any documentation or TIDs in reference to Webaccess.
I know where to turn it on in the POA agent, but what do I need to do on the Webaccess server? Looked at the webacc.cfg file for a switch, but had no luck.
Any help much appreciated!
Christa

In article <[email protected]>, Ochschr wrote:
> I know where to turn it on in the POA agent, but what do I need to do on
> the Webaccess server? Looked at the webacc.cfg file for a switch, but
> had no luck.
>
SOAP is a classic client/server relationship, where the POA is the server
and Webaccess is the client. We put the certs just at the server for this
bit.
Not to be confused with the SSL encryption of the HTTPS that apache serves
up as web server to the end user browser sessions for content that happens
to be GW Webaccess.
Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

Similar Messages

Need info to configure SSL for Portal Server in EP6SP2

Hello,
We need to configure SSL for Portal Server. We are using J2EE 6.20 Patch 25 and EP6SP2P4. The ITS is already using https and it creats lots of Session issues since Portal is not in https.
Is there any OSS Note or How to guide to configure Portal to use SSL.
Thanks.
- PK

Hi Marcel,
Thanx for your Post, I have a Question, we will use CISCO for load balancing and SSL termination but I have a big issue, the URL in the portal applciation is always the same ant the URL in the borwser, I guess al the other URL´s are in the Frames, how will we configure the SSL termination for the login page in example if the URL in the Browser appears always the same?
Thanx in Advanced!!!

How Do I Configure SSL for RAC Installation.

Experts,
Requesting your inputs on configuring SSL for my RAC environment.
- Oracle DB version is 11.2.0.2
- RAC is with two nodes.
- Two nodes are : rac1.oracle.com and rac2.oracle.com
- RAC setup has SCAN feature configured. SCAN FQDN : racscan.oracle.com
- All clients talk to RAC DB using SCAN feature as shown below.
client applications -> racscan.oracle.com ---> rac1.oracle.com
---> rac2.oracle.com
- tnsnames.ora file on both RAC instances has hostname as "racscan.oracle.com" instead of their individual phyiscal host names.
How do I configure SSL for RAC:
1. Do I need to generate certificate request for individual hostnames or only for SCAN hostname ?.
2. If I generate a certificate based on SCAN hostname, how does SSL work since SCAN hostname is not a phyiscal host name ?
3. What is recommended strategy for configuring SSL for RAC environment ?
Thanks

The documentation on the creation of Oracle Wallets is not specific to RAC, and the RAC SCAN instructions for TCPS are very vague on the specific requirements for the certificates required in the wallets for proper operation. I too am struggling to get it to work. Does anyone have a more technical guide to the specific configuration of the certificates needed and what specific configuration file changes need to be made?
Also, the self signed documentation is getting REALLY old. Oracle, please stop giving instructions that demonstrate irresponsibility and show the proper method of certificate requesting and importing to wallets.
Edited by: user11338513 on Mar 21, 2012 2:23 PM

How to configure SSL for SOA BPM/Webcenter 11.1.1.3

Hi,
I have installed BPM 11.1.1.3 and Webcenter 11.1.1.3 in the same HOME. First installed BPM and then extended the domain for webcenter. During the installation I selected the SSL check-box also. Now how do I disable the HTTP and enable only HTTPS. I need to configure SSL can someone please provide some steps or a link to some document around SSL configuration of BPM/Webcenter 11.1.1.3.
Thanks

Hi,
Anyone I too am looking for the same info.
Thanks

Configuring SSL for SOA Server

Hi All,
I wrkin on SOA suite 11g. I am tryin to implement transport level security. Firstly 1-way authentication and than 2-way mutual authentication. For that I need to enable the SSL for SOA server which is managed by the WLS admin server. As per my knowledge the WLS comes with demoidentity and demotrust keystores. If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.
Now, in case i need to create new keystores than can i do the same using keytool utility. Additionally, is it possible to make CA using keytool utility? If yes, kindly provide me some links about how to do the same.
Thanks in advance.

Hi Shomit,
If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.You can use the Demo keystores for dev purpose but it is NOT recommended to use demo keystores for production use.
in case i need to create new keystores than can i do the same using keytool utilityYes, you can do it using Keytool utility.
is it possible to make CA using keytool utility?Actually you can generate a self-signed cert and use that as a CA for signing CSR's.
kindly provide me some links about how to do the sameYou should get everything here -
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13707/ssl.htm#i1200848
Regards,
Anuj

How configure SSL for Oracle Lite

Hi all,
I'm trying to configure SSL but I've many doubts.
I already have one SSL certificate, I read in the documentation that is necessary to use the keytool.
Someone can help me for use this tool?
tks,
Everson

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

Configure SSL for virtual web

Is it possible to achive the following:
-myhost is a web server.
-myweb1 is a virtual web located on myhost, so, it is an DNS alias of myhost. it's SSL runs on the server myhost.
-myhost2 is another virtual web located on myhost and it is an DNS alias of myhost also. it has another key/cert and run SSL on the server myhost also.
I have been asked to configure SSL termination on my CSS11506 to offload the SSLs trafic.
Could anyone advice me for a VIP, (myhost), can I use two key/CA? if so, how do I configure them?
Any comments will be appreciated
Thanks in advance.

ssl-proxy-list ssl-slot3
ssl-server 31
............. -> the one which working fine.
ssl-server 14
ssl-server 14 vip address 10.1.31.14
ssl-server 14 cipher rsa-with-rc4-128-sha 10.11.31.14 81
ssl-server 14 rsakey Myweb1Rkey
ssl-server 14 rsacert Myweb1Scert
ssl-server 15
ssl-server 15 vip address 10.1.31.15
ssl-server 15 rsakey Myweb2Rkey
ssl-server 15 rsacert Myweb2Scert
ssl-server 15 cipher rsa-with-rc4-128-sha 10.11.31.15 81
active
service ssl-slot3-srv
type ssl-accel
keepalive type none
slot 3
add ssl-proxy-list ssl-slot3
active
service myhost
ip address 10.4.31.14
keepalive type tcp
keepalive port 80
active
owner mytest
content myweb2-rule
add service ssl-slot3-srv
vip address 10.1.31.15
protocol tcp
port 443
content myweb2-rule2
vip address 10.4.31.15
protocol tcp
port 81
balance leastconn
add service myhost
active
content myweb1-rule
protocol tcp
port 443
add service ssl-slot3-srv
vip address 10.1.31.14
active
Do I miss anything?

Configuring SSL for Real-Time Collaboration

Hi,
We installed OCS10gR1 because we want to use Real-Time collaboration for delivering support. At this moment we are trying to configure SSL. We already worked through the following guides :
- Real-time collaboration admin guide
- OCS admin guide
- OCS Security guide
- OPMN admin guide
but it's still very fuzzy. It's hard to get a clear overview about the steps to follow to get SSL working for RTC. Is there some kind of "cookbook" or simple guide which describes all the steps in a clear way.
Thank you

Hi,
I ran the SSLconfigTool.sh script on the Infrastructure with success but the midtierSSLConfigTool.sh script didn't come to an end. Probably, I ran the script with the wrong options. I used the following options :
<oid hostname> gary.woerden.centric (hostname on which ocs resides)
<oid port> 389 (default)
<oid admin dn> I filled in orcladmin, but maybe dn=woerden,dn=centric would be better ???
<http server SSL port> 8250 (from portlist.ini)
<https> internet_appserver_registry (I really didn't know what value this must be)
<hostname of the computer> gary.woerden.centric
<True | False> False
The output of the script midtierSSLConfigTool.sh with the options mentioned above:
Modifying Collaboration Suite service registry
Exception in thread "main" javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at oracle.ldap.util.jndi.ConnectionUtil.returnInitialLdapContext(ConnectionUtil.java:492)
at oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(ConnectionUtil.java:135)
at oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(ConnectionUtil.java:157)
at URLUpdate.main(URLUpdate.java:32)
Done. Please go to /opt/oracle/product/10.1.1/ocs/apps/imeeting/logs/rtcctl directory to check the log file.
Starting the SSL Configuration Tool...
Log file recording the current execution is '/home/oracle/SSLConfigTool_20051104_091126.log'.
Below is the command line you have entered:
SSLConfigTool -config_w_default -opwd ******** -ptl_dad portal -ptl_inv_pwd ********
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/bin/ldapbind -h gary.woerden.centric -p 636 -U 1
Querying password for Portal from OID.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/bin/ldapsearch -h gary.woerden.centric -p 636 -D cn=orcladmin -w ******** -U 1 -b "OrclResourceName=Portal,orclReferenceName=ocs.woerden.centric,cn=IAS Infrastructure Databases,cn=IAS,cn=Products,cn=OracleContext" -s sub "objectclass=*" orclpasswordattribute
Exit code: 0
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/dcm/bin/dcmctl updateConfig
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/opmn/bin/opmnctl stopproc ias-component=dcm-daemon
Configuring HTTPS for your ORACLE_HOME at:
/opt/oracle/product/10.1.1/ocs/apps
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/opmn/conf/opmn.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/opmn/conf/opmn.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/Apache/Apache/conf/ssl.conf' to file '/opt/oracle/product/10.1.1/ocs/apps/Apache/Apache/conf/ssl.conf.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml.tmp'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/sso/bin/ssoreg.sh -oracle_home_path /opt/oracle/product/10.1.1/ocs/apps -site_name SSLConfigTool_ssl_ocsapps.gary.woerden.centric -config_mod_osso TRUE -mod_osso_url https://gary.woerden.centric:8250 -u root
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/j2ee/OC4J_Portal/applications/portal/portal/WEB-INF/web.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/j2ee/OC4J_Portal/applications/portal/portal/WEB-INF/web.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/portal/conf/iasconfig.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/portal/conf/iasconfig.xml.orig_SSLConfigTool'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/portal/conf/ptlconfig -encrypt
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/portal/conf/ptlconfig -dad portal -pw ********
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/sysman/emd/targets.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/sysman/emd/targets.xml.orig_SSLConfigTool'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/dcm/bin/dcmctl updateConfig
This last command didn't come to an end.
Can you tell me what options are wrong and can I run the script again or should I first backup the backupped files ?
Thanx in advance!

How to configure SSL for Oracle Weblogic Server

Hi,
Please help me to configure SSL in oracle weblogic server.
If possible, please provide step by step to configure SSL.

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

Using Dynamic Configuration api for SOAP adapter

I want to use Dynamic Configuration api to send a SOAP request to a webservice.
tha value in my adapter is
my Target URL is
http://xidr3.bcs.de:50000/XISOAPAdapter/MessageServlet? channel=:Routing2_Service:SS_SOAP_Sender_Working_June12&nosoap=true
which is the corresponding field i have to set in Dynamic Configuration?
I have written the following code is this right?
DynamicConfiguration conf = (DynamicConfiguration) container.getTransformationParameters().get(StreamTransformationConstants.DYNAMIC_CONFIGURATION);
String temp = "http:/"+"/sap.com/xi/XI/System/SOAP";
DynamicConfigurationKey key = DynamicConfigurationKey.create(temp, "TServerLocation");
String varURL =
"http:/"+"/xidr3.bcs.de:50000/XISOAPAdapter/MessageServlet?channel=:Routing2_Service:SS_SOAP_Sender_Working_June12&nosoap=true";
conf.put(key,varURL);
return "";

Hi,
Yes, your code looks fine. Can you let me know what is the error you are getting. Have you checked the Flag in your communication channel.
Use Adapter-Specific Message Attributes
Variable Transport Binding
Once you test your scenario you can see the Dynamic URL in your message Header by going to tcode sxmb_moni. See if you are able to find something called DynamicConfiguration in your message haeader. If yes what is the value set there.
PS: From the target URL you posted It looks like your webservice is hosted on the XI box itself. Is it the same XI box or different box? Just curious to know.
Reward point if answer is helpful
Thanks
Amit

Configure SSL for Tomcat 6x with clientAuth="true"

Hi,
I have configured my tomcat server with SSL. The certificate I am using is created by keytool.
Its working fine when clientAuth="false".
But now I want to check client certificate too. So I changed clientAuth="true" and provided a client certificate too.
Now this is not working.
Please some body help me solve it.
Thnx in advnc.

Try a forum/mailinglist devoted to Tomcat. There's one at its own homepage.
This is just the JSP/JSTL forum.

Configure SSL for Tomcat 6x

Hi,
I have configured my tomcat server with SSL. The certificate I am using is created by keytool.
Its working fine when clientAuth="false".
But now I want to check client certificate too. So I changed clientAuth="true" and provided a client certificate too.
Now this is not working.
Please some body help me solve it.
Thnx in advnc.

Try a forum/mailinglist devoted to Tomcat. There's one at its own homepage.
This is just the JSP/JSTL forum.

Configuring SSL to make a HTTPS web Service call from XI

Hi All,
We are making a https web service call using soap adapter from XI. Looking at the various posts and SAP help links, we are configuring SSL for the same.
The procedure given in SAP help has been followed to configure SSL but with no luck. If someone had done this could you please give a step by step procedure to configure SSL, we might have missed out on something.
Also are there are any other settings apart from SSL to be done to make a https web service call using soap adapter from XI.
Cheers,
Chandra

user13046122 wrote:
I have an old pl/sql "helper" package, originally written to make SOAP Web Service calls from the database - it uses UTL_HTTP to invoke the target services.
I now need to make SOAP Web Service calls - from an 8.1.7.4 database
But the version of UTL_HTTP inside 8.1.7.4 does not contain the functions needed in the helper package
Can anybody suggest a means of making SOAP Web Service calls from an 8.1.7.4 database ?I think you'll be very lucky to find anyone here who still has access to a version of Oracle that is that old.... I mean... that's like what? 15 years old at least? I'm surprised you've still got hardware that can run that.
It would probably help if you could post what code you've got and explain which function(s) it's complaining about, as I doubt people will want to guess.

Configuring SSL in Oracle Apps 11.5.10.2

Hi,
I am in the process of configuring SSL in oracle apps 11.5.10.2.
I am a bit confused with the Note ID: 123718.1. Could you please clarify me on the below things?
1. SSL can be implemented at three levels,
(a) Oracle Web/Apache Server Level
(b) Oracle Form Server Level
(c) Oracle Database Level
Can Implement SSL on any one or any two component levels? As per Note:123718.1, we MUST configure SSL for both the Oracle HTTP Server and Oracle Forms Level and these cannot be configured independently.
2. As per the Note ID: 123718.1, Option 2.1. Certificate Provisioning for Oracle HTTP Server
Point b in point 2 says to execute "$OPENSSL_TOP/bin/openssl sha1 or* > $HOME/.rnd"
But which will be the OPENSSL_TOP?
Please advise on these above two queries.
Thanks in advance
Regards,
Sravan

Thanks Hussien,
I have completed SSL configuration at all level including database. Forms are not getting launched. I am getting below error in the Java Console.
Java Plug-in 1.6.0_23
Using JRE version 1.6.0_23-b05 Java HotSpot(TM) Client VM
User home directory = C:\Documents and Settings\sdalav
c: clear console window
f: finalize objects on finalization queue
g: garbage collect
h: display this help message
l: dump classloader list
m: print memory usage
o: trigger logging
q: hide console
r: reload policy configuration
s: dump system and deployment properties
t: dump thread list
v: dump thread stack
x: clear classloader cache
0-5: set trace level to <n>
proxyHost=null
proxyPort=0
connectMode=HTTPS
Exception in thread "thread applet-oracle.forms.engine.Main-2" java.lang.NoClassDefFoundError: oracle/security/ssl/OracleSSLSocketFactory
 at oracle.forms.net.HTTPSStream.<init>(Unknown Source)
 at oracle.forms.net.HTTPConnection.connect(Unknown Source)
 at oracle.forms.engine.Runform.initConnection(Unknown Source)
 at oracle.forms.engine.Runform.startRunform(Unknown Source)
 at oracle.forms.engine.Main.createRunform(Unknown Source)
 at oracle.forms.engine.Main.start(Unknown Source)
 at sun.plugin2.applet.Plugin2Manager$AppletExecutionRunnable.run(Unknown Source)
 at java.lang.Thread.run(Unknown Source)
Caused by: java.lang.ClassNotFoundException: oracle.security.ssl.OracleSSLSocketFactory
 at sun.plugin2.applet.Applet2ClassLoader.findClass(Unknown Source)
 at sun.plugin2.applet.Plugin2ClassLoader.loadClass0(Unknown Source)
 at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
 at sun.plugin2.applet.Plugin2ClassLoader.loadClass(Unknown Source)
 at java.lang.ClassLoader.loadClass(Unknown Source)
 ... 8 more
Caused by: java.io.IOException: open HTTP connection failed:https://sandispa.bp.com:8443/OA_JAVA/oracle/security/ssl/OracleSSLSocketFactory.class
 at sun.plugin2.applet.Applet2ClassLoader.getBytes(Unknown Source)
 at sun.plugin2.applet.Applet2ClassLoader.access$000(Unknown Source)
 at sun.plugin2.applet.Applet2ClassLoader$1.run(Unknown Source)
 at java.security.AccessController.doPrivileged(Native Method)
 ... 13 more
Thanks,
Sravan

SSL for Apex 4.0 with PL/SQL Embedded Gateway

Hello
I'm trying to implement ssl to already installed apex 4.0. Os version: Red Hat Enterprise Linux Server release 5.5 (Tikanga)
Oracle Database 11.2.0.3
I used the following note to configure ssl for apex:
http://wiki.shellprompt.net/bin/view/Apex/SSLandAPEXxdbHttp?TWIKISID=9ad53fc01edafaa65304ca32191cf00a
1. used function dbms_xdb.setlistenerendpoint (2,'TESTHOST',2484,2) to configure xdbconfig.xml.
2. listener.ora:
SID_LIST_ORCL =
(SID_LIST =
(SID_DESC =
(SID_NAME = ORCL)
(ORACLE_HOME = /opt/oracle/db/11.2.0.3)
SSL_CLIENT_AUTHENTICATION = FALSE
WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /opt/oracle/db/11.2.0.3/own/wallet/oracle)
ORCL =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = testhost.testdomain.com)(PORT = 1521))
ORCL_SSL =
(DESCRIPTION_LIST =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCPS)(HOST = testhost.testdomain.com)(PORT = 2484))
ADR_BASE_ORCL_SSL = /opt/oracle/db
3. sqlnet.ora:
NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)
WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /opt/oracle/db/11.2.0.3/own/wallet/oracle)
ADR_BASE = /opt/oracle/db
SET_CLIENT_AUTHENTICATION = FALSE
# lsnrctl status orcl
Connecting to (DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=testhost.testdomain.com)(PORT=1521)))
STATUS of the LISTENER
Alias orcl
Version TNSLSNR for Linux: Version 11.2.0.3.0 - Production
Start Date 03-FEB-2013 12:53:03
Uptime 0 days 0 hr. 26 min. 56 sec
Trace Level off
Security ON: Local OS Authentication
SNMP OFF
Listener Parameter File /opt/oracle/db/11.2.0.3/network/admin/listener.ora
Listener Log File /opt/oracle/db/11.2.0.3/log/diag/tnslsnr/testhost/orcl/alert/log.xml
Listening Endpoints Summary...
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=testhost.testdomain.com)(PORT=1521)))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcp)(HOST=testhost.testdomain.com)(PORT=8080))(Presentation=HTTP)(Session=RAW))
(DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=testhost.testdomain.com)(PORT=2484))(Presentation=HTTP)(Session=RAW))
Services Summary...
Service "ORCL" has 1 instance(s).
Instance "ORCL", status UNKNOWN, has 1 handler(s) for this service...
Service "orcl.testdomain.com" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
Service "orclXDB.testdomain.com" has 1 instance(s).
Instance "orcl", status READY, has 1 handler(s) for this service...
The command completed successfully
# cat /etc/hosts
127.0.0.1 testhost.testdomain.com testhost localhost
Common usage of Apex via http://testhost:8080/apex is available but
https://testhost:2484/apex shows
"Firefox can't establish a connection to the server at testhost.testdomain.com:2484." error
Please any ideas.
Edited by: 985770 on Feb 3, 2013 2:33 AM

This should help you find them:
http://daust.blogspot.com/2006/03/where-are-images-of-application.html

Configure SSL for Soap to poa

Similar Messages

Maybe you are looking for