1 Reply Latest reply: Feb 11, 2013 10:51 AM by 968707 RSS

    Oracle Wallet SSL Certification???

    968707
      I tried these steps for SSL certification. I may be wrong on this.
      If anyone has done this on correct way on middleware 11g,
      please forward me with command and all the steps to complete this.

      Thanks
      John

      bash-3.2# openssl genrsa -out server.key 2048
      Generating RSA private key, 2048 bit long modulus
      ...+++
      .........................................................+++
      e is 65537 (0x10001)


      Create server cert request:

      bash-3.2# openssl req -new -key server.key -out server.csr
      You are about to be asked to enter information that will be incorporated
      into your certificate request.
      What you are about to enter is what is called a Distinguished Name or a DN.
      There are quite a few fields but you can leave some blank
      For some fields there will be a default value,
      If you enter '.', the field will be left blank.
      -----
      Country Name (2 letter code) [GB]:US
      State or Province Name (full name) [Berkshire]:xxxxx
      Locality Name (eg, city) [Newbury]:xxxxx
      Organization Name (eg, company) [My Company Ltd]:xxxxxx
      Organizational Unit Name (eg, section) []:ITS
      Common Name (eg, your name or your server's hostname) []:xxxxx.yyyy.edu
      Email Address []:xxx@yaaa.ecu

      Please enter the following 'extra' attributes
      to be sent with your certificate request
      A challenge password []:xxxxxx
      An optional company name []:xxxxx




      Create a file named CACerts.crt and paste intermediate and root certificates in it. CACerts.crt will look like this:

      openssl pkcs12 -export -out ewallet.p12 -inkey private.key -in dev-banner01.crt -certfile CACerts.crt