Configure SSL for Tomcat 6x

Hi,
I have configured my tomcat server with SSL. The certificate I am using is created by keytool.
Its working fine when clientAuth="false".
But now I want to check client certificate too. So I changed clientAuth="true" and provided a client certificate too.
Now this is not working.
Please some body help me solve it.
Thnx in advnc.

Try a forum/mailinglist devoted to Tomcat. There's one at its own homepage.
This is just the JSP/JSTL forum.

Similar Messages

Configure SSL for Tomcat 6x with clientAuth="true"

Hi,
I have configured my tomcat server with SSL. The certificate I am using is created by keytool.
Its working fine when clientAuth="false".
But now I want to check client certificate too. So I changed clientAuth="true" and provided a client certificate too.
Now this is not working.
Please some body help me solve it.
Thnx in advnc.

Try a forum/mailinglist devoted to Tomcat. There's one at its own homepage.
This is just the JSP/JSTL forum.

Need info to configure SSL for Portal Server in EP6SP2

Hello,
We need to configure SSL for Portal Server. We are using J2EE 6.20 Patch 25 and EP6SP2P4. The ITS is already using https and it creats lots of Session issues since Portal is not in https.
Is there any OSS Note or How to guide to configure Portal to use SSL.
Thanks.
- PK

Hi Marcel,
Thanx for your Post, I have a Question, we will use CISCO for load balancing and SSL termination but I have a big issue, the URL in the portal applciation is always the same ant the URL in the borwser, I guess al the other URL´s are in the Frames, how will we configure the SSL termination for the login page in example if the URL in the Browser appears always the same?
Thanx in Advanced!!!

How Do I Configure SSL for RAC Installation.

Experts,
Requesting your inputs on configuring SSL for my RAC environment.
- Oracle DB version is 11.2.0.2
- RAC is with two nodes.
- Two nodes are : rac1.oracle.com and rac2.oracle.com
- RAC setup has SCAN feature configured. SCAN FQDN : racscan.oracle.com
- All clients talk to RAC DB using SCAN feature as shown below.
client applications -> racscan.oracle.com ---> rac1.oracle.com
---> rac2.oracle.com
- tnsnames.ora file on both RAC instances has hostname as "racscan.oracle.com" instead of their individual phyiscal host names.
How do I configure SSL for RAC:
1. Do I need to generate certificate request for individual hostnames or only for SCAN hostname ?.
2. If I generate a certificate based on SCAN hostname, how does SSL work since SCAN hostname is not a phyiscal host name ?
3. What is recommended strategy for configuring SSL for RAC environment ?
Thanks

The documentation on the creation of Oracle Wallets is not specific to RAC, and the RAC SCAN instructions for TCPS are very vague on the specific requirements for the certificates required in the wallets for proper operation. I too am struggling to get it to work. Does anyone have a more technical guide to the specific configuration of the certificates needed and what specific configuration file changes need to be made?
Also, the self signed documentation is getting REALLY old. Oracle, please stop giving instructions that demonstrate irresponsibility and show the proper method of certificate requesting and importing to wallets.
Edited by: user11338513 on Mar 21, 2012 2:23 PM

How to configure SSL for SOA BPM/Webcenter 11.1.1.3

Hi,
I have installed BPM 11.1.1.3 and Webcenter 11.1.1.3 in the same HOME. First installed BPM and then extended the domain for webcenter. During the installation I selected the SSL check-box also. Now how do I disable the HTTP and enable only HTTPS. I need to configure SSL can someone please provide some steps or a link to some document around SSL configuration of BPM/Webcenter 11.1.1.3.
Thanks

Hi,
Anyone I too am looking for the same info.
Thanks

Configuring SSL for SOA Server

Hi All,
I wrkin on SOA suite 11g. I am tryin to implement transport level security. Firstly 1-way authentication and than 2-way mutual authentication. For that I need to enable the SSL for SOA server which is managed by the WLS admin server. As per my knowledge the WLS comes with demoidentity and demotrust keystores. If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.
Now, in case i need to create new keystores than can i do the same using keytool utility. Additionally, is it possible to make CA using keytool utility? If yes, kindly provide me some links about how to do the same.
Thanks in advance.

Hi Shomit,
If I need to configure the SSL for SOA server do i need to create new keystores and CA,s or I can use the demo keystores.You can use the Demo keystores for dev purpose but it is NOT recommended to use demo keystores for production use.
in case i need to create new keystores than can i do the same using keytool utilityYes, you can do it using Keytool utility.
is it possible to make CA using keytool utility?Actually you can generate a self-signed cert and use that as a CA for signing CSR's.
kindly provide me some links about how to do the sameYou should get everything here -
http://download.oracle.com/docs/cd/E14571_01/web.1111/e13707/ssl.htm#i1200848
Regards,
Anuj

How configure SSL for Oracle Lite

Hi all,
I'm trying to configure SSL but I've many doubts.
I already have one SSL certificate, I read in the documentation that is necessary to use the keytool.
Someone can help me for use this tool?
tks,
Everson

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

Configure SSL for virtual web

Is it possible to achive the following:
-myhost is a web server.
-myweb1 is a virtual web located on myhost, so, it is an DNS alias of myhost. it's SSL runs on the server myhost.
-myhost2 is another virtual web located on myhost and it is an DNS alias of myhost also. it has another key/cert and run SSL on the server myhost also.
I have been asked to configure SSL termination on my CSS11506 to offload the SSLs trafic.
Could anyone advice me for a VIP, (myhost), can I use two key/CA? if so, how do I configure them?
Any comments will be appreciated
Thanks in advance.

ssl-proxy-list ssl-slot3
ssl-server 31
............. -> the one which working fine.
ssl-server 14
ssl-server 14 vip address 10.1.31.14
ssl-server 14 cipher rsa-with-rc4-128-sha 10.11.31.14 81
ssl-server 14 rsakey Myweb1Rkey
ssl-server 14 rsacert Myweb1Scert
ssl-server 15
ssl-server 15 vip address 10.1.31.15
ssl-server 15 rsakey Myweb2Rkey
ssl-server 15 rsacert Myweb2Scert
ssl-server 15 cipher rsa-with-rc4-128-sha 10.11.31.15 81
active
service ssl-slot3-srv
type ssl-accel
keepalive type none
slot 3
add ssl-proxy-list ssl-slot3
active
service myhost
ip address 10.4.31.14
keepalive type tcp
keepalive port 80
active
owner mytest
content myweb2-rule
add service ssl-slot3-srv
vip address 10.1.31.15
protocol tcp
port 443
content myweb2-rule2
vip address 10.4.31.15
protocol tcp
port 81
balance leastconn
add service myhost
active
content myweb1-rule
protocol tcp
port 443
add service ssl-slot3-srv
vip address 10.1.31.14
active
Do I miss anything?

Configuring SSL for Real-Time Collaboration

Hi,
We installed OCS10gR1 because we want to use Real-Time collaboration for delivering support. At this moment we are trying to configure SSL. We already worked through the following guides :
- Real-time collaboration admin guide
- OCS admin guide
- OCS Security guide
- OPMN admin guide
but it's still very fuzzy. It's hard to get a clear overview about the steps to follow to get SSL working for RTC. Is there some kind of "cookbook" or simple guide which describes all the steps in a clear way.
Thank you

Hi,
I ran the SSLconfigTool.sh script on the Infrastructure with success but the midtierSSLConfigTool.sh script didn't come to an end. Probably, I ran the script with the wrong options. I used the following options :
<oid hostname> gary.woerden.centric (hostname on which ocs resides)
<oid port> 389 (default)
<oid admin dn> I filled in orcladmin, but maybe dn=woerden,dn=centric would be better ???
<http server SSL port> 8250 (from portlist.ini)
<https> internet_appserver_registry (I really didn't know what value this must be)
<hostname of the computer> gary.woerden.centric
<True | False> False
The output of the script midtierSSLConfigTool.sh with the options mentioned above:
Modifying Collaboration Suite service registry
Exception in thread "main" javax.naming.AuthenticationException: [LDAP: error code 49 - Invalid Credentials]
at oracle.ldap.util.jndi.ConnectionUtil.returnInitialLdapContext(ConnectionUtil.java:492)
at oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(ConnectionUtil.java:135)
at oracle.ldap.util.jndi.ConnectionUtil.getDefaultDirCtx(ConnectionUtil.java:157)
at URLUpdate.main(URLUpdate.java:32)
Done. Please go to /opt/oracle/product/10.1.1/ocs/apps/imeeting/logs/rtcctl directory to check the log file.
Starting the SSL Configuration Tool...
Log file recording the current execution is '/home/oracle/SSLConfigTool_20051104_091126.log'.
Below is the command line you have entered:
SSLConfigTool -config_w_default -opwd ******** -ptl_dad portal -ptl_inv_pwd ********
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/bin/ldapbind -h gary.woerden.centric -p 636 -U 1
Querying password for Portal from OID.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/bin/ldapsearch -h gary.woerden.centric -p 636 -D cn=orcladmin -w ******** -U 1 -b "OrclResourceName=Portal,orclReferenceName=ocs.woerden.centric,cn=IAS Infrastructure Databases,cn=IAS,cn=Products,cn=OracleContext" -s sub "objectclass=*" orclpasswordattribute
Exit code: 0
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/dcm/bin/dcmctl updateConfig
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/opmn/bin/opmnctl stopproc ias-component=dcm-daemon
Configuring HTTPS for your ORACLE_HOME at:
/opt/oracle/product/10.1.1/ocs/apps
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/opmn/conf/opmn.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/opmn/conf/opmn.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/Apache/Apache/conf/ssl.conf' to file '/opt/oracle/product/10.1.1/ocs/apps/Apache/Apache/conf/ssl.conf.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/webcache/webcache.xml.tmp'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/sso/bin/ssoreg.sh -oracle_home_path /opt/oracle/product/10.1.1/ocs/apps -site_name SSLConfigTool_ssl_ocsapps.gary.woerden.centric -config_mod_osso TRUE -mod_osso_url https://gary.woerden.centric:8250 -u root
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/j2ee/OC4J_Portal/applications/portal/portal/WEB-INF/web.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/j2ee/OC4J_Portal/applications/portal/portal/WEB-INF/web.xml.orig_SSLConfigTool'.
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/portal/conf/iasconfig.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/portal/conf/iasconfig.xml.orig_SSLConfigTool'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/portal/conf/ptlconfig -encrypt
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/portal/conf/ptlconfig -dad portal -pw ********
Backing up file '/opt/oracle/product/10.1.1/ocs/apps/sysman/emd/targets.xml' to file '/opt/oracle/product/10.1.1/ocs/apps/sysman/emd/targets.xml.orig_SSLConfigTool'.
Executing command:
/opt/oracle/product/10.1.1/ocs/apps/dcm/bin/dcmctl updateConfig
This last command didn't come to an end.
Can you tell me what options are wrong and can I run the script again or should I first backup the backupped files ?
Thanx in advance!

Configure SSL for Soap to poa

Currently do not have SSL for soap enabled on my poas.
Looking to turn it on and I cannot find any documentation or TIDs in reference to Webaccess.
I know where to turn it on in the POA agent, but what do I need to do on the Webaccess server? Looked at the webacc.cfg file for a switch, but had no luck.
Any help much appreciated!
Christa

In article <[email protected]>, Ochschr wrote:
> I know where to turn it on in the POA agent, but what do I need to do on
> the Webaccess server? Looked at the webacc.cfg file for a switch, but
> had no luck.
>
SOAP is a classic client/server relationship, where the POA is the server
and Webaccess is the client. We put the certs just at the server for this
bit.
Not to be confused with the SSL encryption of the HTTPS that apache serves
up as web server to the end user browser sessions for content that happens
to be GW Webaccess.
Andy of
KonecnyConsulting.ca in Toronto
Knowledge Partner
http://forums.novell.com/member.php/75037-konecnya
If you find a post helpful and are logged in the Web interface, please
show your appreciation by clicking on the star below. Thanks!

How to configure SSL for Oracle Weblogic Server

Hi,
Please help me to configure SSL in oracle weblogic server.
If possible, please provide step by step to configure SSL.

this should help
http://weblogic-wonders.com/weblogic/2010/05/19/configuring-ssl-on-weblogic-server-custom-identity-custom-trust/

How to configure SSL in tomcat and transfer data through HTTPS.

Hi all,
I hav an urgent requirement for transfering data through HTTPS.But hav no idea how to achieve that,using SSL.
For that i have to configure tomcat.What and all i hav to do
download and which and all files i hav to alter for configuring the tomcat.
seeking for ur help,
thank you

Multi-posted.
http://forum.java.sun.com/thread.jspa?threadID=591116&messageID=3079266#3079266
http://forum.java.sun.com/thread.jspa?threadID=591062&messageID=3078566#3078566
http://forum.java.sun.com/thread.jspa?threadID=590987&messageID=3077736#3077736

Configure logging for tomcat

Hi all,
I could not find a hint how to configure the logging used in Creator, so
the logging output is shown in catalina.out or any other file.
The only information I could find was: the messages would go to the
container log. But they are not in tomcat 5.5. Is there a special logging.properties
file?
Thanks for any help,
Heike

So, figured this one out you can log this by setting a logger for.
etc.workflow.scripts to log all logging from all scripts, to log a specfic script use etc.workflow.scripts.<scriptName>$ecma.

SSL and Tomcat Conf. Ques

Hi Guys,
I really need your quick help...I am trying to configure SSL in Tomcat...I am using Tomcat 4.1 and JDK 1.4... I did all the steps mentioned on the below page...
http://tomcat.apache.org/tomcat-4.0-doc/ssl-howto.html
and my server.xml file is like this...

 <Connector className="org.apache.coyote.tomcat4.CoyoteConnector"
 port="8443" minProcessors="5" maxProcessors="75"
 enableLookups="true"
 acceptCount="100" debug="0" scheme="https" secure="true"
 useURIValidationHack="false" disableUploadTimeout="true">
 <Factory className="org.apache.coyote.tomcat4.CoyoteServerSocketFactory"
 clientAuth="true" protocol="TLS" />
 </Connector>I copied all the JAR files (from JSSE) in JAVA_home/jre/lib/ext...set all the path in classpath..
JSSE_home is set in Environment Variables
I restarted the server and type the following into browser
https://localhost:8443
it says "The page cannot be displayed"
can you please let me know which step I am missing??....
by using %JAVA_HOME%\bin\keytool -genkey -alias tomcat -keyalg RSA I have created ".keystore" in
C:\Document and Settings\vishu
what do I do now to run my JSP pages on SSL...
when server starts it doesn't give me any error..but I can't see the index page...
but if I am typing https://127.0.0.1:8443/ then it is displaying message about the certificate...and when I press OK button again "The Page can not be displayed" appears.
please help me out...
thanks
vishu

Hi,
thanks for the reply...I know that
https://localhost:8443
https://127.0.0.1:8443
are identical and make no difference...but isn't it strange that if I type
https://localhost:8443 then nothing comes up and if I type
https://127.0.0.1:8443 then one message box appear
Choose a digital certificate
The website you want to view requests identifications..Please choose a certificate ....
but the View Certificate tab is disable...the only option I have is press OK button...and once I press OK button The Page cannot be displayed appears..
can you please help me out...do I need to download any certificate??... how do I solve this thing...
and index.jsp is there in the ROOT folder...
http://127.0.0.1:8080/index.jsp is running fine..
vishu

Configuring SSL to make a HTTPS web Service call from XI

Hi All,
We are making a https web service call using soap adapter from XI. Looking at the various posts and SAP help links, we are configuring SSL for the same.
The procedure given in SAP help has been followed to configure SSL but with no luck. If someone had done this could you please give a step by step procedure to configure SSL, we might have missed out on something.
Also are there are any other settings apart from SSL to be done to make a https web service call using soap adapter from XI.
Cheers,
Chandra

user13046122 wrote:
I have an old pl/sql "helper" package, originally written to make SOAP Web Service calls from the database - it uses UTL_HTTP to invoke the target services.
I now need to make SOAP Web Service calls - from an 8.1.7.4 database
But the version of UTL_HTTP inside 8.1.7.4 does not contain the functions needed in the helper package
Can anybody suggest a means of making SOAP Web Service calls from an 8.1.7.4 database ?I think you'll be very lucky to find anyone here who still has access to a version of Oracle that is that old.... I mean... that's like what? 15 years old at least? I'm surprised you've still got hardware that can run that.
It would probably help if you could post what code you've got and explain which function(s) it's complaining about, as I doubt people will want to guess.

Configure SSL for Tomcat 6x

Similar Messages

Maybe you are looking for