Wallet and Cert location with OHS in front of B2B

Hi,
I am trying to figure out how many and what types of Certs are needed as well as where the wallet should reside in the following scenario. We have a stand alone OHS in a public DMZ which is forwarding our inbound trading partner messages to the MidTier server which contains B2B. We have also configured B2B to use the public DMZ OHS as a proxy when sending outbound messages to the trading partners. The RosettaNet PIPs that we will be implementing require signing (non-repudiation), encryption and SSL.
I assume that SSL must be enabled on the public DMZ OHS, but does it have to be enabled on the MidTier server as well? I believe that if we had to enable it on both servers, then different certs would be required for the different servers, but I am not sure.
Also, we have to configure the outbound messages from our B2B with all of this (signing, encryption and SSL). Does this require a cert and wallet on the B2B server or on the OHS or both? I know that when configuring the trading partner within B2B, the cert must be accessed, but I am completely confused on if this is the cert that we use on OHS or something different.
Thanks so much for any help you can provide!
Darrin

Hi Darrin,
Certificates will be used at both OHS and Midtier. At OHS you are receiving incoming traffic so your server certificate should be there (in PKCS 12 format). From midtier, you are sending messages to your TP's (your Outbound), so your client certificate should be at Midtier at following location-
Oracle_Home/Apache/Apache/conf/ssl.wlt/default
At above location three files should be there-
1. cwallet.sso
2. ewallet.p12 (Your Client cert with all trading partners server cert public key in base 64 format including CA's cert as well)
3 ewallet.txt (export of whole ewallet.p12 in ".txt" format)
Give path of ewallet.txt in your tip.properties file.
SSL would be enabled at both midtier and OHS, but if OHS is sending messages to midtier at HTTP port then do not enable transport security in your host tp's delivery channel.
You have to upload certificates which will be used for siging and encryption at resepective tp's delivery channel.
Wallets are used for client and server authentication and signing and encryption in outbound where as certs uploaded at tp's delivery channel are used for decrypting the incoming message as well as verifying the tp's signature in message.
Regards,
Anuj
Edited by: Anuj Dwivedi on Feb 11, 2009 12:28 PM

Similar Messages

Trying to sample a sensor voltage and record location (with delay)

Hi all,
Wondering if someone could help me here, i'm still quite a Labview novice... Basically I have a sub vi which I created that is feeding in analogue sensor values into my main vi in parallel with another sub vi, which is feeding in gps location in a combined latitude and longitude string. What I am looking to do is to record the locations in a visible array on the front panel when the acceleration is over a set amount (1g).
The issue I have is that I only wish to take down one location string for each time the acceleration is exceeded, so I would like to implement some sort of delay so that when the acceleration increases beyond 1g, the location is recorded and then the program waits for a given time before taking the next location (I only want one location recorded per event). But I cannot work out how to do this. The only way I can think of achieving it will give me several position values each time the acceleration passes the limit.
Any help would be greatly appreciated.
Thanks
Solved!
Go to Solution.

Ok, sorry about that. I have attached the vi and hopefully you will understand what is going on. Essentially the while loop to the right hand side is what I have been given and the part I have worked on is in the left hand while loop. So I have the latitude and longitude string which is called "concatenated string" and my accelerometer readings come from the sub vi called Accelerometer. I currently have boolean greater than set for if>1.
The really hard part that I am struggling with is getting the latitude and longitude string to write accross to the array on the right hand while loop called "Marker location array" as a new indexed value and to do this only when the acceleration is above my set value.
Thanks again for any help and hopefully I have uploaded it properly!
Attachments:
acceleration_gps.vi ‏416 KB

BizTalkServer 2010 SFTP Adapter from CodePlex - Configuring send and receive locations with SSH public and private keys

Hi there,
I am looking for step by step instrcutions on how to configure SFTP Codeplex adapter for both receive and send ports.
Out business partner with whom we push/poll the files from wants us to use SSH encryption/decryption etc.
Just wondering if the following functionality is supported in Codeplex SFTP adatper without having to write any code.
Appreciate if there is manaul to do this for SFTP. BTW I do have all the our public and private keys and business partners Public key for configuring.
For Send port: 1. we would need to encrypt the file with our business partners public key
                      2. sign the file with our private key.
                      3. Send the file through to SSH client which eventually transfers to Remote server.
Receive port:   1. Connect to SSH Server with SSH-2 key and receive the file
                      2. Verify the file's digital signature agaisnt the Business partners PGP public key
                      3. Decrypt the file using our PGP Public key
Thanks in advance

Yes it is supported.
You can find its documentation in this link
You can find section X.509 Certificate Identity Keys
You can set public and private key in property SSH Identity thumbprint of send and receive port
I prefer to test it using client tool like
FileZilla or WinSCP then test it using sftp adapter
When you see answers and helpful posts, please click Vote As Helpful, Propose As Answer, and/or Mark As Answer

List of changes in Equipment and Functional Location

Dear Colleagues?
Is there an easy way to get a list of all Functional Location and Equipments changed in the last week?
Thanks and Regards

Dear Davison,
You can use transaction /N/ISDFPS/IL21 , it will give you detailed history of equipments and functional locations with usage change. It''s a DFPS transaction, hope its available in your system, or else you can goto Usage List in extras menu and customize the layout by adding the colums required to get the information you want in case of equipments or goto Usage Period in case of functional location in structure menu.
Thanks & Regards
Niraj Visnoi
Edited by: Niraj Visnoi on Aug 30, 2010 9:14 PM

Installing OIF11g with OHS as proxy webserver in front

Hi all,
I want to deploy OIF 11g with OHS as a web-proxy in front. So, I followed this link: http://download.oracle.com/docs/cd/E14571_01/oim.1111/e13400/deployment.htm#DAFEDIEA
This link says:
<snip>
When installing the IdM suite, select Oracle HTTP Server in the Select Components screen. This will install Oracle HTTP Server.
After installation, issue the following command-line instruction to create the instance:
$AS_INST/bin/opmnctl createcomponent -componentType OHS -componentName $OHS_NAME
</snip>
This is confusing me. Because after I install / configure the OIF with selected Oracle HTTP server, I see a OHS instance ohs1 already created and the same comes up in the EM console as well. Still, do we have to create another OHS component?

Hi.
You could try sending a cookie with the authentication info.
Try posting this question in weblogic.developer.interest.security - this newsgroup is
mostly for installation questions.
Thanks,
Michael
siva wrote:
Hi
My application requirement is something like this.
I have an application running in one computer domain(external to my machine from
where i am accessing). If i am accessing the application from the outside domain,
i am giving username and password in my url itself and the application works.
If the username and password are not provided, then a box pops up asking the two.
Now the requirement is to avoid the username and password hardcoding in the URL.
So what should i do to achieve this from weblogic server standpoint? I use weblogic
server 5.1 version.
Setting up the weblogic server as the HTTP Proxy , does it help? If so , how it
should be for this requirement?
Any pointers, Any inputs will be highly appreciated. Please help.
with regds
siva--
Developer Relations Engineer
BEA Support

I tried using the Voice Memos iPhone app and ended up with a red banner on top of the screen that flashes "recording 00.00" but I can't locate what I thought I was recording. can you help me?

I tried using the Voice Memos iPhone app and ended up with a red banner on top of the screen that flashes "recording 00.00" but I can't locate what I thought I was recording. can you help me?
jacknil

I found an answer to this on another page (I was having the same problem) This worked for me:
Double-click the Home button.
Swipe left or right until you have located the app you wish to close.
Swipe the app up to close it.
more here: https://discussions.apple.com/thread/5596831

Sales order stock and storage location stock on past date with value

Hi everyone.
I m looking for a report which can give sales order stock with value as it is shown in mb5b and storage location stock with value as in mc.5 is there any report which can give the combination of both the things on past date with values.

can you tell me what shall be the fields and table for special stock on past date with value and sloc stock on past date with value

Firefox plays video, but no sound. when I type about:plugins in location bar, it shows the firefox default plugin is not enabled. When I look at my plugins, it says it is enabled. I have uninstalled 3.6 and re-installed with the same result.

firefox plays video, but no sound. when I type about:plugins in location bar, it shows the firefox default plugin is not enabled. When I look at my plugins, it says it is enabled. I have uninstalled 3.6 and re-installed with the same result. Why do I have no sound. Computer plays I-tunes and all other sounds, just no web browser sounds.

Glad you seem to have sorted things out.
The warning about the warranty is light hearted, I think at one stage it warned "here be dragons" but also intended to make us think as it warns that making changes may produce problems.

My kid just got an iPod 5th gen (today from Santa) and it won't power up or charge. The only response is when I connect the USB and press the power button or front button the Battery appears with red line and lightning symbol. No other response at all.

Sorry about the long title.....its my first post.
My kid just got a brand new iPod 5th generation (today from Santa) and it won't power up or charge. The only response is when I connect the USB and press the power button or front button the Battery appears with red line on left and lightning symbol below. There is no other response at all no matter what I do, including holding both buttons down for extended period. My other kid got one and it works perfectly.....I have interchanged usb cables ports etc. but still no response....I would really appreciate any help.

Try:
- Reset the iOS device. Nothing will be lost
Reset iOS device: Hold down the On/Off button and the Home button at the same time for at
least ten seconds, until the Apple logo appears.
- Make an appointment at the Genius Bar of an Apple store since you have a hardware problem with the iPod. This is because as you said the same cable works with another iPod.
Apple Retail Store - Genius Bar

I've set up email on my iPad (talk mails when connected to my home router and ISP. When connected to a router at another location with a different ISP I can receive mail but not send it. Is there any way round this

I've set up email on my iPad (talktalk.net) and can send and receive mails when connected to my home router and ISP. When connected to a router at another location with a different ISP I can receive mail but not send it. Is there any way round this?

I've set up email on my iPad (talktalk.net) and can send and receive mails when connected to my home router and ISP. When connected to a router at another location with a different ISP I can receive mail but not send it. Is there any way round this?

I have two location one is Delhi(IP-192.168.100.*) and another is Mumbai(IP-192.168.1.*) and both are connected by MPLS line and ping with each other. We have one DC in Delhi location and domain name is CAPLDC and Delhi location all PC is member of this

I have two location one is Delhi(IP-192.168.100.*) and another is Mumbai(IP-192.168.1.*) and both are connected by MPLS line and ping with each other.
We have one DC in Delhi location and domain name is CAPLDC and Delhi location all PC is member of this domain and working properly.
now i am trying join the Mumbai location PC with my Domain(CAPLDC) but they are not join with my DC and generate the error.
I have chek the DNS and nslookup all are correct but this is generate error.
Is this possible Mumbai location join with this Domain(CAPLDC)???
One more thing when i have created another DC with this name (papldc.com) then Mumbai location is joined properly.
Pls find the error message below and also find the attachment.
Note: This information is intended for a network administrator. If you are not your network's administrator, notify the administrator that you received this information, which has been recorded in the file C:\Windows\debug\dcdiag.txt.
The domain name "capldc" might be a NetBIOS domain name. If this is the case, verify that the domain name is properly registered with WINS.
If you are certain that the name is not a NetBIOS domain name, then the following information can help you troubleshoot your DNS configuration.
DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "capldc":
The query was for the SRV record for _ldap._tcp.dc._msdcs.capldc
The following domain controllers were identified by the query:
capldcserver.capldc
win-dyfq2poc88q.capldc
However no domain controllers could be contacted.
Common causes of this error include:
- Host (A) or (AAAA) records that map the names of the domain controllers to their IP addresses are missing or contain incorrect addresses.
- Domain controllers registered in DNS are not connected to the network or are not running.
Pankaj Kumar

Why are you using a single labeled domain? I would recommend renaming the domain name to be something like domain.com.
Please refer to the articles below to fix your current issue:
http://www.wincert.net/tips/networking/1614-cant-join-pc-to-a-domain-with-single-label.html
http://www.itgeared.com/articles/1128-using-single-label-dns-names-for-active/
This posting is provided AS IS with no warranties or guarantees , and confers no rights.
Ahmed MALEK
My Website Link
My Linkedin Profile
My MVP Profile

Uploaded music to iCloud and it broke up my albums, I now have the same albums in different location with 2 or 3 songs on each one, can I make them whole albums again and how do I keep it from happening again?

uploaded music to iCloud and it broke up my albums, I now have the same albums in different location with 2 or 3 songs on each one, can I make them whole albums again and how do I keep it from happening again?

The iTunes Match forum is here: https://discussions.apple.com/community/itunes/itunes_match

I'm Having trouble with OWA and Certs after the Rollup 7 for SP3 installation. any idea? update 2961522-

Hi, everyone.
I'm Having trouble with OWA and Certs after the Rollup 7 for SP3 installation. any idea? update 2961522-
after running get-OWAVirtualDirectory or test-OWAConnectivity i'm getting a message that says "OWA it's Orphan, No Metadata information can be found."
I only have the OWA users impacted.- anywhere users, and ActiveSync are working well.-
Thanks,
Fabian Alberto Campo
MCT-MCSA 2012-MCITP365-MCTS
Fabián A. Campo H. Consultor tecnico @ IXO Ltda. MCT MCP MCTS MCSA HP-APS Cra. 67 No. 167 – 61 of 303 Bogotá, Colombia

Hi Fabian,
Is there any error code when user access their mailbox on OWA. Please confirm if there is no results returned in EMS when you run Get-OWAVirtualDirectory cmdlet. Also check whether there is any Event Logs related to OWA in Exchange.
In IIS manager, make sure the OWA virtual directory is listed in the Default Web Site. In EMC, we can navigate to Server Configuration > Client Access, select server and turn to Outlook Web App tab. Then we can click Reset Virtual Directory in the right
Actions pane to reset OWA virtual directory.
Additionally, please restart IIS service by running iisreset /noforce from a Command Prompt window.
Regards,
Winnie Liang
TechNet Community Support

How to export All computer list with operating system from AD and all attributes like disable or enable and OU location also?

how to export All computer list with operating system from AD and all attributes like disable or enable and OU location also?
I have tried with dsquery below but status is not showing there.
dsquery * -filter "(objectCategory=computer)" -attr name operatingSystem

last logon user name - not really stored (or lined) with computer object. However, you can get this info during the logon process or from the computer. Here is method:
http://portal.sivarajan.com/2010/07/user-profile-and-os-info-powershell.html
Santhosh Sivarajan | Houston, TX | www.sivarajan.com
ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA
Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012
Blogs: Blogs
Twitter: Twitter
LinkedIn: LinkedIn
Facebook: Facebook
Microsoft Virtual Academy:
Microsoft Virtual Academy
This posting is provided AS IS with no warranties, and confers no rights.

I have a problem with my iPad 1 st. the problem is that I unable to locate even when connected to a WiFi network and the location is activated and restore and same thing happens .. may be I need help! Thank you ...!

I have a problem with my iPad 1 st. the problem is that I unable to locate even when connected to a WiFi network and the location is activated and restore and same thing happens .. may be I need help!
Thank you ...!

Hi there beni_m,
You may find the troubleshooting steps in the articles below helpful.
iOS: Not responding or does not turn on
http://support.apple.com/kb/ts3281
iOS: Device not recognized in iTunes for Mac OS X
http://support.apple.com/kb/ts1591
iOS: Device not recognized in iTunes for Windows
http://support.apple.com/kb/ts1538
-Griff W.

Wallet and Cert location with OHS in front of B2B

Similar Messages

Maybe you are looking for