SSL certificate installation on Weblogic server

Here we are going to discuss step by step  installing for ssl certificate on weblogic server:

step 1)  Need to create keystore along with private ,public key.

keytool -genkey -alias keytooltest -keyalg RSA -keystore keystore.jks

keytooltest (here you need to mention public/private key alias name)

keystore.jks (keystore name)

After you hit the above command, you will get one interactive options will obtain, you need to answer that
questions(related the organization info and location info).

After execution of this command you will get the keystore.jks file (here iam not mentioned full path of the keystore file so it will same in jvm bin location.)


Step2) Need to generate CSR (certificate request) using keystore as well as aliases of pubilc/private key

keytool -certreq -alias keytooltest -keystore keystore.jks -file testssl.csr

step3) We need to submit CSR to SSL certificate issuers vendors (like verisign, thwathe etc.,)

step4) After you submit the CSR to ssl vendors, they will provide you intermidiate certificate and main ssl certificate as well as root certificate.

step5) On weblogic server end, we need to do following steps:

i)

first select ssl listen port is enabled and mention the ssl listening port.

ii)
Under server-> configuration->keystores we need to configure.,

Here first we need to select as

Keystores:

Custom Identity and Java Standard Trust

 next mention the keystore complete path (keystore.jks) and type of keystore as jks.
as well as passprase (default is changeit)

for Trust store here we are using java standard store (cacerts)

Save the above sttings.

step iii)

Now we need to configure ssl parameters

Identity and Trust Locations:	Keystores	Indicates where SSL should find the server's identity (certificate and private key) as well as the server's trust (trusted CAs).More Info...
Identity
Private Key Location:	from Custom Identity Keystore	The keystore attribute that defines the location of the private key file.More Info...
Private Key Alias:		The keystore attribute that defines the string alias used to store and retrieve the server's private key.More Info...
Private Key Passphrase:		The keystore attribute that defines the passphrase used to retrieve the server's private key.More Info...
Confirm Private Key Passphrase:
Certificate Location:	from Custom Identity Keystore	The keystore attribute that defines the location of the trusted certificate.More Info...
Trust
Trusted Certificate Authorities:	from Java Standard Trust Keystore	The keystore attribute that defines the location of the certificate authorities.More Info...
Advanced

 

Here we need to mention the private key alias, what we created at the time keystore creation.
here private key is keytooltest.

save the configurations and restart ssl

Showing 1 to 1 of 1   PreviousNext

	Server	Machine	State	Status of Last Action
	AdminServer(admin)		RUNNING	None

from servers->control->

select the server and click on restart SSL.

Now ssl installation completed. Now check with browser.






If you have any questions please post here.