This discussion is archived
1 Reply Latest reply: Feb 11, 2013 8:51 AM by 968707 RSS

Oracle Wallet SSL Certification???

968707 Newbie
Currently Being Moderated
I tried these steps for SSL certification. I may be wrong on this.
If anyone has done this on correct way on middleware 11g,
please forward me with command and all the steps to complete this.

Thanks
John

bash-3.2# openssl genrsa -out server.key 2048
Generating RSA private key, 2048 bit long modulus
...+++
.........................................................+++
e is 65537 (0x10001)


Create server cert request:

bash-3.2# openssl req -new -key server.key -out server.csr
You are about to be asked to enter information that will be incorporated
into your certificate request.
What you are about to enter is what is called a Distinguished Name or a DN.
There are quite a few fields but you can leave some blank
For some fields there will be a default value,
If you enter '.', the field will be left blank.
-----
Country Name (2 letter code) [GB]:US
State or Province Name (full name) [Berkshire]:xxxxx
Locality Name (eg, city) [Newbury]:xxxxx
Organization Name (eg, company) [My Company Ltd]:xxxxxx
Organizational Unit Name (eg, section) []:ITS
Common Name (eg, your name or your server's hostname) []:xxxxx.yyyy.edu
Email Address []:xxx@yaaa.ecu

Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password []:xxxxxx
An optional company name []:xxxxx




Create a file named CACerts.crt and paste intermediate and root certificates in it. CACerts.crt will look like this:

openssl pkcs12 -export -out ewallet.p12 -inkey private.key -in dev-banner01.crt -certfile CACerts.crt

Legend

  • Correct Answers - 10 points
  • Helpful Answers - 5 points