Servers-->Configuration-->Keystores and SSL
Overview
Use this page to configure attributes for the identity (private keys) and trust (trusted certificate authorities) keystores for WebLogic Server and attribute for SSL.
WebLogic Server is configured with a default identity keystore (DemoIdentity.jks) and a default trust keystore (DemoTrust.jks). In addition, WebLogic Server trusts the certificate authorities in the cacerts file the JDK. This keystore configuration is appropriate for testing and development purposes. However, these keystores should not be used in a production environment. Click Change in the Keystore Configuration pane to modify the keystore configuration for WebLogic Server.
After you configure identity and trust keystores for WebLogic Server, you need to configure attributes for SSL. These attributes include information about the identity and trust location for a particular server instances. Click Change in the SSL pane to specify this information. If you are not using keystores for the purpose of SSL (for example, if the keystores are used for digitial signing purposes), you do not need to define these attributes.
For purposes of backward compatibility, WebLogic Server allows you to store private keys and trusted certificates authorities in files or in the WebLogic Keystore provider. If you use either of these mechanisms for identity and trust, choose the Files or Keystore providers option.
Note: When using the WebLogic Keystore provider digital certificates are stored in files.
Click Show in the Advanced Options pane to set additional attributes in the following cases: you are using the Node Manager; a WebLogic Server instance is acting as a client; the administration port is enabled and you have Managed Servers; application code is using SSL; or an external LDAP server is running over SSL.
Tasks
Related Topics
Introduction to WebLogic Security
Developing Security Providers for WebLogic Server
Securing a Production Environment
The Security topics in the WebLogic Server 8.1 Upgrade Guide
The Security page in the WebLogic Server documentation
|
|
|