Oracle Weblogic Server importing SSL keys

-
SSL Import
In this post I'll share about commands that can be used to check/list/delete SSL certificates on your Weblogic Server.

List All SSL Keys
[ Syntax- keytool -list -keystore <PATH_CERTS> ]

 For JRE Location
[root@eissdev01 oracle]# keytool -list -keystore /usr/java/jdk1.8.0_181-amd64/jre/lib/security/cacerts

For ORACLE_HOME> cacerts Location
[root@eissdev01 oracle]# keytool -list -keystore /u01/oracle/products/OIG_HOME/wlserver/server/lib/cacerts

For ORACLE_HOME >> DemoTrust.jks Location
[root@eissdev01 oracle]# keytool -list -keystore 
/u01/oracle/products/OIG_HOME/wlserver/server/lib/DemoTrust.jks

Importing SSL Keys
[ Syntax- keytool -import -alias <ALIAS_NAME> -keystore <CACERTS_PATH> -file <*.CER CERTIFICATE_PATH> ]
[root@eissdev01 oracle]# keytool -import -alias mpowerGEOTRUST -keystore /usr/java/jdk1.8.0_181-amd64/jre/lib/security/cacerts -file /home/oracle/Desktop/sslKeys/geotrust.cer

Deleting SSL Keys
[ Syntax- keytool -delete -alias <ALIAS_NAME> -keystore <CACERTS_PATH>]
[root@eissdev01 oracle]# keytool -delete -alias mpowerGEOTRUST -keystore /usr/java/jdk1.8.0_181-amd64/jre/lib/security/cacerts

Default Values for KeyStore(s)

 CACERTS
Property
Value
Keystore location
MW_HOME/wlserver_x.x/ server/lib/cacerts                  
Keystore password
changeit

DemoTrust.jks & DemoIdentity.jks
Property
Value
Truststore location
MW_HOME/wlserver_x.x/ server/lib/DemoTrust.jks
Truststore password
DemoTrustKeyStorePassPhrase
Keystore location
MW_HOME/wlserver_x.x/ server/lib/DemoIdentity.jks
Keystore password
DemoIdentityKeyStorePassPhrase
Private key password
DemoIdentityPassPhrase




Comments

Post a Comment

Popular posts from this blog

Oracle SOA Suite- Implementing Email Notification

-
Image
In this post, I am going to show how to implement email notifications in Oracle SOA Suite using BPEL process. So let's get started- Implementing email notification in Oracle SOA Suite consists of below steps: Environment- IDE- Oracle jDeveloper 11g Weblogic Server 12c Oracle SOA Suite 12c High Level Steps Keep ready email server settings. Configure & enable usermessagingdriver-email for target SOA servers via console. Setting up Email driver (usermessagingdriver-email )with email server settings via enterprise manager. Enable notifications for SOA workflows(make sure either All or EMail option is selected).. Create SOA composite application Deploy it on SOA server. Testing & done. 1. Keep ready email server settings. Keep ready your below email server settings: Outgoing Mail Server          : smtp.domain.com Outgoing Mail Server Port   : xxx Default From Address         : username@doamin...
Read more

Oracle SOA Suite 12c- PKIX path building failed & unable to find valid certification path to requested target

-
Image
Hi Everyone, in this blog I'll be writing one of the strange issue that has been encountered while working with a Oracle SOA composite running in Oracle IDAM environment and trying to invoke a SSL based remote service where SSL certification based exception has been thrown during the service invocation. Environment Oracle SOA Suite 12c  (HA Mode) Oracle IDAM 12c (HA Mode) Oracle Linux 7 External Web Service (SOAP Service) Problem Below is the exception thrown when trying to invoke an external webservice (SSL Based) via BPEL process- <bpelFault><faultType>0</faultType><remoteFault xmlns="http://schemas.oracle.com/bpel/extension"><part name="summary"><summary>oracle.fabric.common.FabricInvocationException: Unable to invoke endpoint URI "https://idam.uppclonline.com/soa-infra/services/default/DefaultOperationalApproval!5.12*soa_69e4734b-d8fe-4edf-b44e-e287f61c2ddf/SMSNotification%23ApprovalProcess/SMSNotification" succe...
Read more

Migration of Oracle SOA Suite Composite from 11g to 12c

-
Image
Recently I have came across a scenario where I have a business requirement of  migration of Oracle SOA Suite 11g(11.1.1.7.0) to 12c(12.1.3.0). Below are the different mechanisms I have tried to do, few of them failed and one succeeded. Working in Oracle SOA Suite 11g is completely different from 12c. In 11g, we need to install the jDeveloper(11.1.1.7) then SOA extension separately to be installed either via offline file  (download available at  https://www.oracle.com/ocom/groups/public/@otn/documents/webcontent/156082.xml ) or through jDeveloper top menu >>  Help >> Check for Updates >> SOA Extension.  While working with 12c doesn't involves such tedious job. Only single installer is required for jDeveloper/SOA/Weblogic and is available as QuickStart Installer(download available at https://www.oracle.com/technetwork/middleware/soasuite/downloads/index.html). Approach 1- Compress(Zip) SOA composite ...
Read more