1 Reply Latest reply: Feb 11, 2013 10:51 AM by 968707 RSS

    Oracle Wallet SSL Certification???

      I tried these steps for SSL certification. I may be wrong on this.
      If anyone has done this on correct way on middleware 11g,
      please forward me with command and all the steps to complete this.


      bash-3.2# openssl genrsa -out server.key 2048
      Generating RSA private key, 2048 bit long modulus
      e is 65537 (0x10001)

      Create server cert request:

      bash-3.2# openssl req -new -key server.key -out server.csr
      You are about to be asked to enter information that will be incorporated
      into your certificate request.
      What you are about to enter is what is called a Distinguished Name or a DN.
      There are quite a few fields but you can leave some blank
      For some fields there will be a default value,
      If you enter '.', the field will be left blank.
      Country Name (2 letter code) [GB]:US
      State or Province Name (full name) [Berkshire]:xxxxx
      Locality Name (eg, city) [Newbury]:xxxxx
      Organization Name (eg, company) [My Company Ltd]:xxxxxx
      Organizational Unit Name (eg, section) []:ITS
      Common Name (eg, your name or your server's hostname) []:xxxxx.yyyy.edu
      Email Address []:xxx@yaaa.ecu

      Please enter the following 'extra' attributes
      to be sent with your certificate request
      A challenge password []:xxxxxx
      An optional company name []:xxxxx

      Create a file named CACerts.crt and paste intermediate and root certificates in it. CACerts.crt will look like this:

      openssl pkcs12 -export -out ewallet.p12 -inkey private.key -in dev-banner01.crt -certfile CACerts.crt