SSL with virtual hosting in Weblogic Server 5.1(WLS5.1)

Hello,
I am tasked with implementing a virtual hosting situation that must
use SSL. It goes like this: https://www.aaa.com, https://www.bbb.com
and https://www.ccc.com all having separate IPs. These URLs must
forward the request to the same WebLogic Server instance. The problem
is each URL must have its own certificate while WLS 5.1 only uses one
certificate per instance.
I was thinking about using a proxy server such that all three Web
servers that would host the URLs would be sent to a proxy server which
would redirect to the WLS 5.1 instance.
My questions are, would this be feasible using WLS 5.1 as the Web
Server and again WLS as the App Server? How secure is this
arrangement? Is it preferable to use another vendor's software as the
WebServer(IPlanet, Apache)

Hi Andy,
I think a good approach for you would be to use a proxy server --
browser -> proxy that supports virtual hosting -> WebLogic
Use a proxy which supports virtual hosting, and which can have a separate
certificate bound to each virtual host.
That way you can do SSL between the browser and the proxy, and you can
have the proxy do cleartext to WebLogic.
This situation gets around WebLogic's limitation of allowing only one
certificate per instance of the server.
You could also use 5.1 as the proxy in the following manner:
Run 3 instances of Weblogic, each as a proxy server, each bound to a
different IP address and DNS name, having its own certificate --
one instance for aaa.com, another for bbb.com, and a third for ccc.com
Then have each of these three instances of WebLogic proxy to your "app
server" instance of WebLogic on the backend.
Hope this makes sense.
Joe Jerry
Andy Walker wrote:
Hello,
I am tasked with implementing a virtual hosting situation that must
use SSL. It goes like this: https://www.aaa.com, https://www.bbb.com
and https://www.ccc.com all having separate IPs. These URLs must
forward the request to the same WebLogic Server instance. The problem
is each URL must have its own certificate while WLS 5.1 only uses one
certificate per instance.
I was thinking about using a proxy server such that all three Web
servers that would host the URLs would be sent to a proxy server which
would redirect to the WLS 5.1 instance.
My questions are, would this be feasible using WLS 5.1 as the Web
Server and again WLS as the App Server? How secure is this
arrangement? Is it preferable to use another vendor's software as the
WebServer(IPlanet, Apache)

Similar Messages

Virtual Host on WebLogic Server 5.1

I need to configure my weblogic server 5.1 on windows 2000 server to make a virtual
host address.
How I can do it ????
Thanks a lot for any help.
Bye

Hi Andy,
I think a good approach for you would be to use a proxy server --
browser -> proxy that supports virtual hosting -> WebLogic
Use a proxy which supports virtual hosting, and which can have a separate
certificate bound to each virtual host.
That way you can do SSL between the browser and the proxy, and you can
have the proxy do cleartext to WebLogic.
This situation gets around WebLogic's limitation of allowing only one
certificate per instance of the server.
You could also use 5.1 as the proxy in the following manner:
Run 3 instances of Weblogic, each as a proxy server, each bound to a
different IP address and DNS name, having its own certificate --
one instance for aaa.com, another for bbb.com, and a third for ccc.com
Then have each of these three instances of WebLogic proxy to your "app
server" instance of WebLogic on the backend.
Hope this makes sense.
Joe Jerry
Andy Walker wrote:
Hello,
I am tasked with implementing a virtual hosting situation that must
use SSL. It goes like this: https://www.aaa.com, https://www.bbb.com
and https://www.ccc.com all having separate IPs. These URLs must
forward the request to the same WebLogic Server instance. The problem
is each URL must have its own certificate while WLS 5.1 only uses one
certificate per instance.
I was thinking about using a proxy server such that all three Web
servers that would host the URLs would be sent to a proxy server which
would redirect to the WLS 5.1 instance.
My questions are, would this be feasible using WLS 5.1 as the Web
Server and again WLS as the App Server? How secure is this
arrangement? Is it preferable to use another vendor's software as the
WebServer(IPlanet, Apache)

Configuring a virtual host in Weblogic

Hi,
I created a virtual host in Weblogic but it doesn't work. I followed all of the steps from the Weblogic website.
The default URL for my application works, http://localhost:7001/abc_application but when I try using the new virtual host I get an error,
http://xyz.com:7001/abc_application. I applied the virtual host to my Weblogic Managed Server and also to a deployed application. What else needs to be done outside of Weblogic for this to work?
Sorry for the cross-posting.
Thanks,
Annette

Hi Annette!
Have you modified the hosts file for your machine to add an entry for xyz.com to map back to 127.0.0.1?
What sort of errors are you getting when you try to access the virtual host? Can you post a snippet from your log file?
Apologies if your problem has been solved since posting this message...
<br>
Kevin Powe
http://www.integral-techsolutions.com

Virtual hosting on leopard server

Hello,
I have a leopard server on which I want to have two sites served from the same ip address port combination.
I am using the Server Admin tool bundled with OSX server to configure Apache.
I have created two sites in Sites tab. One has the name "mydomain.org" and the other has the name "machinename".
They are both configured to serve from the same local IP address.
The name "mydomain.org" is served by DNS and the name "machinename" is configured on the client's /etc/hosts file.
From what I know of virtual hosting, the web server receives a http header called 'Host' with the host name that was used on the browser, to select the files to serve. I have sniffed the http network packets from my client machine to the web server and seen this header set correctly to the hostname used on the browser.
The problem is that just one site is being served to both names. I want to select the site according to name.
What can I be doing wrong ?

Done it the hard way.
StuG

Configuring webclient with Virtual Host

i configure portal with a virtual host.
Portal it is ok. i can navigate and login with the virtual host server. But the collaboration portlets (Message portlet, calendar portlet) link to the original server.
what can i do to work also with virtual host?
my original server is the internal host name.
the virtual host is the public server name.
thanks in advance
Regards
giorgio

no problem from flex side.. need to escape crossdomain.xml
file in htacess for codeigniter i.e RewriteCond $1
!^(index\.php|images|application|uploads|robots\.txt|crossdomain\.xml)
in htaccess file.

Wf component container not starting with Virtual host

Hi,
We have setup fresh instance of R 12.1.1 on Solaris with Virtual host. Did installation with rapidwiz -servername virtual.
Now when we end setting up wfmailer setup it refused to start saying component services are not up. While looking at it, it is still looking for Physical host rather Virtual. Can anyone suggest how to resolve this.
Thanks

Post in 11i thread closing it

10.9 mail with virtual host

Anyone have experience in setting up mail server on OSX 10.9 with virtual domain (postfix to serve more than one domain)? Coz the old guide (https://support.apple.com/kb/HT3878) with workgroup manager should no longer apply, right?

What I would like to do is to setup the following:-
1. setup a MX Server for two domains (domaina.com and domainb.com)
2. setup some mailbox whereas some of them will be stored locally while some other will be forwarded to other server (e.g. [email protected] would be stored locally whereas [email protected] would be forwarded to [email protected] on some other server sitting in internal network)
3. setup POP3 access so that mail client can connect to this server to retrieve the mail remotely.
4. All email account should not have direct remote access to this mac mini server.
How can I achieve this?

Apache-weblogic bridge problems with virtual hosting

Hi,
Can we set apache-weblogic bridge where apache webserver is configured
as virtual hosts and each Virtual Host is mapped to a WebLogic server
instance running on separate port ?
Please provide doc or reference or your comments if you have solved this
problem
Thanks
Shriniwas

The above comments notwithstanding, there's one outstanding line in your post that seems crucial:
Also if I type on my browser the name of another secondary (or virtual) domain name in the form http://domain2.com it brings the website hosted under the primary domain which is domain1.com. In case I type http://www.domain2.com than it works as it should and displays the website hosted under this domain name.
As far as Apache is concerned, 'domain2.com' and 'www.domain2.com' are completely separate entities. They have to be otherwise if all domain2.com traffic went to this site you'd never be able to host different sites within the domain (e.g. blogs.domain2.com, wiki.domain2.com, blah.domain2.com, etc.). In other words, there is no automatic relationship between a hostname and sub-records of that hostname.
So what's happening here is Apache is seeing a request for 'domain2.com' which does not match any of its configured virtual hosts, so it handles the request via the default site. If you request www.domain2.com this matches your virtual host configuration so Apache serves the alternate content.
The fix is simple - trivial, even - you just need to tell Apache all the hostnames that match this site - in this case if you've configured the site's primary address as 'www.domain2.com' and you want it to also respond to requests to 'domain2.com' then add 'domain2.com' to the list of Server Aliases in Server Admin.

Accessing portal server with virtual host via web dispatcher

Hi,
I have portal installed at http://hostname.com:50000. A web dispatcher is installed in front of it which uses port number 80 and redirects to http://hosname.com:50000.
so when i say http://hostname, my web dispatcher redirects to http://hostname.com:50000/ from where i can access my portal.
now I want to create an alias for my hostname, say when user types http://mydev, it should redirect to http://hostname.company.com thru webdispatcher.
so i created virtual host for my portal server . how to use this in my virtual hosts in my webdispatcher.
I have already gone throug this..
http://help.sap.com/saphelp_erp2005/helpdata/en/fe/cda776f2f64d5287c614b2f715c25f/frameset.htm
would be great if some one can help me in this regard.
Thank you
P.S: I dont want to create a DNS alias with name mydev, then i think virtual host concept doesnt make sense, atleast in java engines..which has different concept in SAP systems.

HI Jacob,
Thank you for the reply.. I am little bit confused.could you please clarify the followint to me.
My requirement is when user types "http://epdev", it should redirect to http://hostname.company.com:50000
1. To do that, according to what you said, I will create a DNS alias epdev to the IP address where my portal is hosted. so when the user types http://epdev, I have set up a parameter in web dispatcher profile to redirect to http://hostname.company.com:50000/.. so my requirement is fulfilled now..I hope this the correct proc for what I intended to achieve. am I right?
2. As said above, I am using web dispatcher only for redirection to a fully qualified name, as portal requires as fully qualified domain name. Is there a possibility other than web dispatcher for redirection.
3. if the above procedure works, I got a question like..what is the use of "virtual hosts".
How is it different from creating for instance, creating as many DNS aliases to IP address.
Although, it was explained at http://help.sap.com/saphelp_erp2005/helpdata/en/0b/fbf5a47928f84e8d0beba8371508e6/frameset.htm
I didnt clearly understand it.
I would really appreciate, if you could clarify these to me.
Thank you

Need Help with Virtual Host

a quick Explaination of what I'm trying to do.
We have a DNS name, "our_intranet.com". This DNS points to a load balancer which routes the call to "our_weblogic_server:7015". When a request with this DNS comes in, we really want to go to our_weblogic_server:7015/portal/site/our_intranet. Can this be acheived using a Virtual Host? And if so, could give an example of creating a virtual host?
Thanks,
Tom.

Thank you James for your reply,
I do appreciate you taking a moment to respond and include some suggestions. At this point I feel 90% certain that the answer lies within WebLogic configuration somewhere.
Discoverer is a J2EE application as I understand it and based on that belief it is probably using the standard J2EE servlet API calls such as ServletRequest. getScheme() (the protocol portion of the URL such as http, https, ftp), ServletRequest.getHostname(), and ServletRequest.getPort(). Those API calls return values derived by the server either from the connection itself or from server configuration.
The URL's being returned by the web application are not static either. Although the protocol and the port never change (always http://...:80/) the server hostname does. If I add an entry to my host file for fred.somewhere.com and then hit the server using that server name then the URL's returned by the web application are http://fred.somewhere.com:80/, and if I use barney.somewhere.com I get a similar result. Now, the web application could be reading the "Host" HTTP header out of the request itself to derive that information but why go through all that trouble when the Servlet API gives you a standard way to do it.
For this reason I believe Discoverer (the web app causing our grief) is getting this information from WebLogic even though I cannot verify that with absolute certainty. I wish someone from the Disco area could verify that. I have had a support request open with Oracle for over a week but so far they haven't been able to tell me where they get that information from (which I'm sure is just because I'm not speaking with a developer). I may actually in fact pass on this question to the Discoverer forums you suggested. If someone can at least tell me if Discoverer is getting this information from the application server then I can at least pass that along as confirmation to WebLogic folks.
I have set up an Apache web server as a reverse proxy server for http and https in front of this particular server as an experiment and get similar results with the server name. Whether I hit Apache via http or https I always get back http://servername:80/ from the back-end WLS. The fact is WebLogic isn't even running on port 80 which makes it even more interesting why the URL's we get back should point at 80 instead of the port WLS is listenning on. Since there is no port or protocol information contained within the HTTP request sent by client browsers (only the Host header which just has the hostname) that may have something to do with why the server doesn't know how to provide correct values, but that doesn't explain why it would choose to tell the web application port 80 instead of the port it is actually listening on.
As far as tracking down how to configure this beast it might be complicated by the fact that I don't think this is just WebLogic Server. This is Fusion Middleware. I didn't think that included Apache HTTP Server, but actually I can see there is a directory for Apache on the server identified as ohs (stands for Oracle HTTP Server). Some of the help in Enterprise Manager (or maybe it was in the WebLogic administration web console) actually talks about Oracle HTTP Server which they say is based on Apache HTTP Server and in fact the configuration files are consistent with Apache. That doesn't mean I don't believe WebLogic folks like yourself that say Apache is not a part of WebLogic server (which seems like a pure Java application) but maybe it is a part of Oracle Fusion Middleware. They might just have it there for other stuff working together with WLS (such as Oracle Web Cache) or for load balancing as you mentioned. If it is there then it might either complicate things, or might provide a possible solution. If it really is running there in front of WLS and we can use some Apache configuration values to override URL information that the server passes on to the web applications maybe it could help. I did see some processes running on the same server with a name something like HTTPD.worker. My Apps DBA's (who are also learning as they go with WLS) said they did zero Apache configuration as part of the install however and I know zero about how (or if) Apache is working together with WLS.
I tried going down the path of setting up a custom Network Channel and Virtual Host because a) it seemed like a logical place to look and b) I had seen some references to them on the web but as I tried to step through the configuration I admit I never saw any settings that related to protocol overrides. I have seen host and port overrides somewhere along the way but never a protocol override.
I'm confused that this seems so complicated. I mean, aren't there a lot of people out there running their servers behind a hardware load balancer with SSL termination at the load balancer (it handles the https decryption and then forwards the requests unencrypted to the back-end servers)?
Your link to the "Corecoreserverserverprotocolshttptitle.html" looks like just the right place (almost). If it only had Frontend Port and Frontend Protocol as well as Frontend Host (and instead of Frontend HTTP Port and Frontend HTTPS Port). So frustrating to be so close but miss. I do appreciate the pointer though.
Funny that you should bring up the post on WebLogic Wonders because that is actually the example I tried to follow when I attempted to set up a network channel and virtual host. I aborted before the deploy because the deploy wasn't working quite how I expected and I had little confidence it was going to help me at that point (because I hadn't been presented with any setting that allowed me to override the protocol (http/https) value for a front-end system. I'm still not quite sure how the Network Channel works together with the server/domain/virtual host so perhaps I need to do a little more reading.
If anyone understands exactly what I am trying to achieve though and can give me some direction it would be much appreciated. It seems straight forward to me:
We have an F5 hardware load-balancer that runs here:
https://external-servername:443/....
It uses hardware SSL accelleration to decrypt the incoming request and if it sees /discoverer/ in the URL it then forwards the request unencrypted to a back-end WLS here:
http://internal-servername:8888/...
We would be happy if any connection that server recieved it always overrides the scheme (https instead of http), server (external instead of internal...it actually does this properly already), and port (443 instead of 80). In a perfect world it might behave differently if we connect internally directly to the server (in other words if we don't access it through the load balancer then it provides URL information to continue accessing it directly) but that is just icing on the cake which probably would require virtual host configuration to differentiate the two. We'd be ecstatic if we could simply override those values all the time for the entire server to some constant values that we set.
Thanks,
Eric R.

Virtual hosting in Weblogic 6.0

hi,
I have created a virtual host with the name MyVirtualHost and VirtualHost names
as mysite , in wl6.0 using the admin console.
I have cofigured DefaultWebApp_myserver as the default web application.I checked
the config.xml file and an entry has been made in it <VirtualHost
DefaultWebApp="DefaultWebApp_myserver"
Name="MyVirtual Host"
PostTimeoutSecs="20"
Targets="myserver"
VirtualHostNames="mysite"
/>
How do I access it?
I tried http://mysite and http://mysite:7001 but I get the default "page cannot
be displayed " page with IE.
Any Help?
Thanx
Sunil

Not quite sure what the question is, but the answer most likely rests in wl 6.0 docs under "virtual
          hosting".
          Gene
          "Virendar Rana" <[email protected]> wrote in message news:3a7202b7$[email protected]..
          > I have multiple high-level DNS domain for which I want to setup Virtual Hosting in a single
          Weblogic Server 6.0?

Associating Default Web Application with Virtual Host

Hi
We are trying to run several virtual hosts on the same managed server. However, each of those virtual hosts (e.g. bob.mydomain.com, john.mydomain.com) will need to have a different default web application (the rest of the deployed web applications will be the same between hosts). We tried to create default web applications with <context-root> in weblogic.xml set to / (also tried "") - however when attempting to deploy 2nd default web app an error message comes up:
Context path '/""' is already in use
So, it appears that we can't associate a default web application with a virtual host. Any ideas on how to solve it?
Our Environment:
Weblogic version: 10.3 TP, Windows
Many thanks
Jason

Is your webapp targetted to the correct virtual-host during deployment?It could be possible that your webapp is targetted to the default web-server instead of the virtual-host causing this error. Can you validate this from your config file?
You can also configure default webapps for virtual hosts by setting the default-web-app-context-root element of virtual-host element in your config file

Apache Virtual Hosts and Weblogic 5.1SP6

Running:
WebLogic Server 5.1.0 w/ Service Pack 6
Solaris 7
Hello, I've been reading through the newsgroups and saw alot of information on
setting up apache and weblogic to handle virtual hosts, but am still having problems
getting it to work.
I have 2 domains that will be served up by one instance of Apache using NameBased
virtual hosts and I would like to have our one instance of WebLogic 5.1SP6 handle
them as well.
Excerpt from my httpd.conf file:
NameVirtualHost 216.xx.x.xx:80
<VirtualHost vcstgws011:80>
ServerName vcstgws011.domain1.com
Port 80
DocumentRoot /opt/vci-10.8/webapps/www
DirectoryIndex index.jsp
<Directory "/opt/vci-10.8/webapps/www">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
<VirtualHost vcstgws011:80>
ServerName www.domain2.com
Port 80
DocumentRoot /opt/vci-10.8/webapps/www/dsl
DirectoryIndex index.jsp
<Directory "/opt/vci-10.8/webapps/www">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
Under my default server configuration I have the WebLogic stuff:
<IfDefine WL>
WebLogicCluster vcstgas011.domain1.com:7001
Debug on
DebugConfigInfo on
ConnectTimeoutSecs 60
HungServerRecoverSecs 300
Debug on
DebugConfigInfo on
<Files *.jsp>
SetHandler weblogic-handler
</Files>
<Location /weblogic>
SetHandler weblogic-handler
PathTrim /weblogic
</Location>
<Location /servlet>
SetHandler weblogic-handler
</Location>
<Location /Admin*>
SetHandler weblogic-handler
</Location>
<Location /j_security_check>
SetHandler weblogic-handler
</Location>
</IfDefine>
And here's an excerpt from my weblogic.properties file:
# HTTPD
weblogic.httpd.enable=true
# DocumentRoot configuration
weblogic.httpd.defaultWebApp=/opt/vci-10.8/webapps/www
weblogic.httpd.indexDirectories=true
Any help would be appreciated.
Thanks,
Mark

Anyone have success with Name-Based virtual hosts using same instance of WebLogic?
"Mark Mangano" <[email protected]> wrote:
>
Running:
WebLogic Server 5.1.0 w/ Service Pack 6
Solaris 7
Hello, I've been reading through the newsgroups and saw alot of information
on
setting up apache and weblogic to handle virtual hosts, but am still
having problems
getting it to work.
I have 2 domains that will be served up by one instance of Apache using
NameBased
virtual hosts and I would like to have our one instance of WebLogic 5.1SP6
handle
them as well.
Excerpt from my httpd.conf file:
NameVirtualHost 216.xx.x.xx:80
<VirtualHost vcstgws011:80>
ServerName vcstgws011.domain1.com
Port 80
DocumentRoot /opt/vci-10.8/webapps/www
DirectoryIndex index.jsp
<Directory "/opt/vci-10.8/webapps/www">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
<VirtualHost vcstgws011:80>
ServerName www.domain2.com
Port 80
DocumentRoot /opt/vci-10.8/webapps/www/dsl
DirectoryIndex index.jsp
<Directory "/opt/vci-10.8/webapps/www">
Options Indexes FollowSymLinks MultiViews
AllowOverride None
Order allow,deny
Allow from all
</Directory>
</VirtualHost>
Under my default server configuration I have the WebLogic stuff:
<IfDefine WL>
WebLogicCluster vcstgas011.domain1.com:7001
Debug on
DebugConfigInfo on
ConnectTimeoutSecs 60
HungServerRecoverSecs 300
Debug on
DebugConfigInfo on
<Files *.jsp>
SetHandler weblogic-handler
</Files>
<Location /weblogic>
SetHandler weblogic-handler
PathTrim /weblogic
</Location>
<Location /servlet>
SetHandler weblogic-handler
</Location>
<Location /Admin*>
SetHandler weblogic-handler
</Location>
<Location /j_security_check>
SetHandler weblogic-handler
</Location>
</IfDefine>
And here's an excerpt from my weblogic.properties file:
# HTTPD
weblogic.httpd.enable=true
# DocumentRoot configuration
weblogic.httpd.defaultWebApp=/opt/vci-10.8/webapps/www
weblogic.httpd.indexDirectories=true
Any help would be appreciated.
Thanks,
Mark

SSL with mutiple host name

I want to install Apache server with 2 differents Virtual host, based on Ip adress.Each server has his own certificat (
SSLWallet file: ../conf/ssl.wlt/server1 ,
SSLWallet file: ../conf/ssl.wlt/server2 ).
My problem is that when the server start, he use allway the first certificat and ignor the second.
My request is how can i do two use different Cetfificat to each Virtual host.
thanks.

Hi!
This is (as far as I know) not possible. Tried it a couple of times, but the SSL protocol needs to know the name of the host when initiating the connection. So with two or more VH it will not work.
I once read a doc on the Unternet that explained this with virtual IP addresses and several (Apache) wallets, but I believe that this is not possible in the Oracle Application Server.
cu
Andreas

Working with virtual host & hosts files on a local network

I'm setting up a small local web and production server here in my office running Leopard.
I'm setting up virtual hosts for users on the network to review and comment on websites in development. Ideally they'd access it as:
host1.webserver.local
host2.webserver.local
host3.webserver.local
Problem is, users on the network can see webserver.local just fine, but the subdomains need to be registered with hosts file on each computer.
Is there a way I can manage all computers hosts file easily? I was thinking of an SVN repository, but this still requires going to each computer to update the file.
Any suggestions here would be great.
Thanks
Rich

Hi jscher2000
Thank you for your interest.
I am using "manual prxoy configuration" option in firefox with port 8080. I have tried the option of "Use system proxy settings" but it doesn't help.

SSL with virtual hosting in Weblogic Server 5.1(WLS5.1)

Similar Messages

Maybe you are looking for