SSL and 10gAS Form/Reports Services standalone

Question

Successfully installed 10g Forms and Reports Services standalone (without Infrastructure). Successfully created a new Reports Service and it has been running OK (with some bugs crashing/restarting reports occasionally, inconsistent web-based information, inconsistent logs). Next step is to get certificate for this SSL working. Note 250532.1 does not help our environment since we don't use Infrastructure. Even tried to use the Command C:\OraHome1\jdk\bin\keytool to begin with certificate but it just does not work. Oracle tech support told me SSL is not yet for standalone FR Services.
I'd like to know if anyone has other suggestion/experience about configuring SSL on a standalone FR Services to make https working.
Thanks.

Answer 1

Here you go. Here is how to make a 9.0.4 Forms and Report Services only install SSL enabled.
1. Open Enterprise Manager.
2. Disable Web Cache component.
2a. optionally stop Enterprise Manager service to save resources.
3. Edit httpd.conf file.
3a. On line before ClearModuleList, add this:
LoadModule ossl_module modules/ApacheModuleOSSL.DLL
3b. Now after the last AddModule which is just before "<IfDefine SSL>", add this line:
AddModule mod_ossl.c
3c. Make sure you have these two lines:
Listen 80
Listen 443
If you have something else like Listen 7777, you can remove these.
3d. Now add these lines just before "SetEnv PERL5LIB":
<IfModule mod_ossl.c>
AddType application/x-x509-ca-cert .crt
AddType application/x-pkcs7-crl .crl
SSLPassPhraseDialog builtin
SSLSessionCache shmcb:logs\ssl_scache(512000)
SSLSessionCacheTimeout 300
SSLMutex sem
SSLLog logs\ssl_engine_log
SSLLogLevel warn
<VirtualHost default:443>
DocumentRoot C:\orahome1\Apache\Apache\htdocs
ServerName server.yourdomain.com
ServerAdmin [email protected]
ErrorLog logs/error_log
TransferLog "logs/access_log"
Port 443
SSLEngine on
SSLCipherSuite SSL_RSA_WITH_RC4_128_MD5:SSL_RSA_WITH_RC4_128_SHA:SSL_RSA_WITH_3DES_EDE_CBC_SHA:SSL_RSA_WITH_DES_CBC_SHA:SSL_RSA_EXPORT_WITH_RC4_40_MD5:SSL_RSA_EXPORT_WITH_DES40_CBC_SHA
SSLWallet file:C:\OraHome1\Apache\Apache\conf\ssl.wlt\default
<Files ~ "\.(cgi|shtml)$">
SSLOptions +StdEnvVars
</Files>
<Directory cgi-bin>
SSLOptions +StdEnvVars
</Directory>
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
CustomLog logs/ssl_request_log "%t %h %{SSL_PROTOCOL}x %{SSL_CIPHER}x \"%r\" %b"
</VirtualHost>
Listen 443
</IfModule>
As you can tell, this is on a Windows server so you'll need to change the location of the default wallet to the correct directory. On Windows, a default wallet with a cert is provided.
Save the httpd.conf file and restart the HTTP_Server. HTTP and HTTPS now works. HTTPS should prompt you that the cert doesn't match but it is listening.
Get your wallet configured now and install it. Restart HTTP_Server and you are done.
That SSL section was borrowed from a test install of 9.0.2.3 that had all of that included. I'm sure you could do the same by borrowing from a full install of 9.0.4.
Now you could use WebCache which is pretty straight forward. Look on Metalink if you don't want to turn off WebCache on how to configure a wallet with it. I prefer to use Apache SSL but that is just me. :)