Configuring BI Publisher with BI Server on SSL

Question

I am trying to configure BI Publisher 10.1.3.4 with a BI Server that is configured in SSL.
The options we have for appending the connection string are:
<Property Name>:= <Catalog>|<User>|<Password>|<SSL>|<SSLKeyStoreFileName> |<SSLKeyStorePassword>|<TrustAnyServer>|<TrustStoreFileName >|<TrustStorePassword>|<LogLevel>|<LogFilePath>|<PrimaryCCS>|<PrimaryCCSPort>| <SecondaryCCS>|<SecondaryCCSPort>
eg:ssl=true;sslKeystorefilename=<path and filename of keystore>;sslKeystorepassword=<password of keystore and key>;trustanyserver=true;
How should we configure this if we do not have a keystore on BI Server with SSL.
We only have a cacert.pem,server-req.pem,server-cert.pem,server-key.pem,serverpwd.txt and cacert.pem..

Answer 1

We have got the solution for this issue.
We need to generate a certificate thro a keytool with a Distinguished Name associated with it.
Certifying it with self cert of keytool and import the certified certificate into the jave a keystore cacerts and modifying the web site that directs the url to the Publisher Application.
Steps below:
C:\OracleBI\oc4j_bi\j2ee\home\config>keytool -genkey -keyalg RSA -keystore sslfile -storepass obiee123 -alias testalias5
What is your first and last name?
[Unknown]: shravan
What is the name of your organizational unit?
[Unknown]: unit
What is the name of your organization?
[Unknown]: Org
What is the name of your City or Locality?
[Unknown]: BU
What is the name of your State or Province?
[Unknown]: MA
What is the two-letter country code for this unit?
[Unknown]: US
Is CN=shravan, OU=unit, O=Org, L=BU, ST=MA, C=US correct?
[no]: yes
Enter key password for <testalias>
(RETURN if same as keystore password):
C:\OracleBI\oc4j_bi\j2ee\home\config>keytool -selfcert -keystore sslfile -storepass obiee123 -alias testalias
C:\OracleBI\oc4j_bi\j2ee\home\config>keytool -list -keystore sslfile -rfc
Enter keystore password: obiee123
Keystore type: jks
Keystore provider: SUN
Your keystore contains 1 entry
Alias name: testalias
Creation date: Dec 31, 2008
Entry type: keyEntry
Certificate chain length: 1
Certificate[1]:
-----BEGIN CERTIFICATE-----
MIICMDCCAZkCBElbp/wwDQYJKoZIhvcNAQEEBQAwXzELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAk1B
MQswCQYDVQQHEwJCVTEUMBIGA1UEChMLT3JhY2xlIENvcnAxEDAOBgNVBAsTB1N1cHBvcnQxDjAM
BgNVBAMTBUJpbmR1MB4XDTA4MTIzMTE3MTIyOFoXDTA5MDMzMTE3MTIyOFowXzELMAkGA1UEBhMC
VVMxCzAJBgNVBAgTAk1BMQswCQYDVQQHEwJCVTEUMBIGA1UEChMLT3JhY2xlIENvcnAxEDAOBgNV
BAsTB1N1cHBvcnQxDjAMBgNVBAMTBUJpbmR1MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDL
yBssKV4mneXMpvIJbAdlVUe2PkWTKYNjs52mEa6a05kbgUstvtL1OAMErycLZUwe4I0q/PKEKZ6K
4e3AITnUugeHBIxki62DIZcMpHq5NgbqKuEFboBZJeRZgTy61aBfEWIclWpUi0BblXpUZCv0KYAV
QgSVh71QDJJGyUjTgwIDAQABMA0GCSqGSIb3DQEBBAUAA4GBAHNnUcwia4abj5pJ97uPtbtiKB4b
6Yx6G/RDf67jwThvvOHgYBo9ue+4s+VXAoNXp7NwFlLTvv0OopSq8IQvQyFy/cTpqYMT4In0t+u+
0VaKXeL+sMwi3wRYI0RYbMy6NwxGLekjEHLaZa4IXoR8koD69TJLwXk92h48vnLI3YnB
-----END CERTIFICATE-----
C:\OracleBI\oc4j_bi\j2ee\home\config>keytool -export -alias testalias -keystore sslfile -file myfile.crt
Enter keystore password: obiee123
Certificate stored in file <myfile6.crt>
C:\OracleBI\oc4j_bi\j2ee\home\config>
C:\Program Files\Java\jdk1.5.0_14\jre\lib\security>keytool -import -trustcacerts -alias testalias6 -file myfile6.crt -keystore cacerts -storetype JKS
Enter keystore password: changeit
Owner: CN=shravan, OU=unit, O=Org, L=BU, ST=MA, C=US
Issuer: CN=shravan, OU=unit, O=Org, L=BU, ST=MA, C=US
Serial number: 495ba7fc
Valid from: Wed Dec 31 10:12:28 MST 2008 until: Tue Mar 31 11:12:28 MDT 2009
Certificate fingerprints:
MD5: 14:B5:82:73:8B:9F:DF:D5:8D:BF:69:A8:DC:AA:E1:43
SHA1: 4E:8B:34:8D:76:BE:83:81:CF:3E:9F:5D:6C:C0:44:55:6B:58:71:81
Trust this certificate? [no]: yes
Certificate was added to keystore
Also modify the web-site on j2ee/home/config and server.xml appropritately to access the site on https.
secure-web-site shld be appended with : port=4443, protocol=http, secure="true"
server.xml shld be added with this secure-web-site to make the app work on SSL...