Certificates for Elastic SSL

Giri N

Will the Certificate generated from Internal Windows CA works or is it supposed to be from third party/external CA?

Tulip Antar -Oracle

Hello Giri,

Internal certificates do not necessarily adhere to market standards and that is why we do not advise you to use them. But you can certainly try, if they don't work, it is best for you to purchase a valid certificate from a valid Certificate Authority.

Regards,

Tulip

Gans-Oracle

Hello @Giri,

I see the following in the Peoplebooks

https://docs.oracle.com/cd/E92519_02/pt856pbr3/eng/pt/tsvt/task_ImplementingWebLogicSSLKeysandCertificates-c07fc5.html

1. Decide which trusted CA you want to sign your web server's public key.
2. You can use any CA that's compatible with Sun's Java JKS standard, such as Verisign.

Thanks

Bala P-Oracle

We generally don't recommend using internal signed certificates. This might or might not work. If its not working and if it has been identified to be an issue with the certificate, we will suggest using a third party certificate.

Balaji P.

Velu Angusamy

Hi - We use internal certs and it does work. as long as your CA server is up and running to validate the cert then you should be good. But i dont see any requirement to get the external CA unless you have an issue with CA server.

-Velu