JMS Listener and SSL

Question

Hi,
I want to configure the JMS Listener adapter to communicate with the JMS server via SSL. In the resource adapter configuration I don't see any setting to make use of SSL. Or is SSL supported at all?
Any pointers would be highly appreciated.
Thanks,
kIDMan.

Answer 1

I was able to get Rob's solution working. Here is the general overview.
Problem: We are running the apex listener with Tomcat 5.5 with no http server on the front end. We are attempting to get mutual authentication working. Information from the clients X509 certificate (the one installed in their browser and used for mutual authentication) is not showing in owa_util.print_cgi_env. We found if we manually put the certificate variables we are interested in, into the header of the request it will work.
Solution:
- Add a java filter (http://www.oracle.com/technetwork/java/filters-137243.html)
* The basic procedure configuration is in the web.xml of the apex listener
* The code is java. It gives you access to the request
* The idea is
1. Intercept the request before it makes it to oracle
2. Read the client x509 cert in the filter and add it to the header of the request (javax.servlet.request.X509Certificate )
At this point owa_util.print_cgi_env will have access to anything you put in the filter. Just a note to further complicate the issue. If you do have apache running as well as tomcat you can modify the headers in the httpd.conf without adding this filter.
Basically there is some syntax (don't quote this) but something like:
Header add MY_VARIABLE "%{APACHE_VAR}e"
Where MY_VARIABLE is whatever you want to call the variable(this is what will show up in owa_util.print_cgi_env. And APACHE_VAR is a list of apache variables that you have access to. There is a list of the available http://httpd.apache.org/docs/2.2/mod/mod_ssl.html. Listed in the available apache variables are client cert info. Hope this helps someone get a general idea of how they can approach the problem.