Verify host name verification is enabled

A host name verifier ensures the host name in the URL to which the client connects matches the host name in the digital certificate that the server sends back as part of the SSL connection. If the host name in the certificate matches the local machine’s host name, host name verification passes if the URL specifies localhost, 127.0.0.1, or the default IP address of the local machine.

A host name verifier is useful when an SSL client (or a WebLogic Server acting as an SSL client) connects to an application server on a remote host. Host name verification is performed only by an SSL client. By default, WebLogic Server has host name verification enabled.

Note: The following steps only apply when a WebLogic Server instance is acting as an SSL client. Stand alone SSL clients specify the use of host name verification via command-line arguments or the API.

To verify that host name verification is enabled:

In the left pane of the Console, expand Environment and select Servers.
Click the name of the server for which you want to configure host name verification.
At the bottom of the page, click Advanced.
Verify that the Hostname Verification field is set to BEA Hostname Verifier.
If you want anything other than the default behavior, either turn off host name verification or configure a custom host name verifier. Oracle recommends leaving host name verification on in production environments.

} } (document.images){ dcs_imgarray[dcs_ptr] = new Image; dcs_imgarray[dcs_ptr].src = dcs_src; WT[myMeta.name.substring(3)]=myMeta.content; } if DCSext[myMeta.name.substring(7)]=myMeta.content; } } } } for (N in DCS){P+=A( N, DCS[N]);} for (N in WT){P+=A( "WT."+N, WT[N]);} for (N in DCSext){P+=A( N, DCSext[N]);} //} aCrumb=aCookie[i].split("="); if (crumb==aCrumb[0]){ return aCrumb[1]; } } return null; } i=0;i