Posts

Showing posts from February 11, 2018

Weblogic Server as Server:(Two Way SSL Communications:)-1

Weblogic Server as Server: Mozilla Firefox as the Client: 1: Weblogic Server is configured for SSL: 2: Certificate used by Weblogic Server is: ServerCert 3: Private Key used by Weblogic Server is: ServerKey 4: Trust Store used by Weblogic Server is: DemoTrust. Two Way SSL Communications: 1: Client initiates a SSL connection with the Server. 2: Server Sends its Identity Certificate to Client. 3: Client will Trust this Identity Certificate from the Server. 4: Server will ask for the Identity Certificate from the Client. 5: Client will send its own Identity certificate to the Server. 6: Server will trust the Certificate send by the Client. 7: Client will ask for a Cipher negotiation from the Server. 8: Server will confirm over a common cipher presented by the Client. 9: Handshake is successful and encrypted data will start flowing over the network. So From the above process we have to following requirements for configuring two way SSL on Weblogic Server. ...

Two Way SSL- Client verifies server certificate and server verifies client certificates.

Image
client needs to authenticate to server resources by providing its certificate, it depends on how strong the server requirement is to verify the clients certificate, Here Client verifies server certificate and server verifies client certificates. Example : WebServer Connecting to WebLogic Server and exchanging certificates for their communication to establish. How the client and server go through the initial communication when they are setup in 2 Way SSL ? As above picture is self explanatory, I do not see space to explain the whole process, we will proceed to the practicals directly. Create the Identity and Trust Key Store for the WebLogic Server. Identity Key Store is required to define identity of the WebLogic Server, so that clients can use to Trust the server And Trust Keystore is required to store the Root Certificates of the clients so that it can trust or Identity the incoming requests from the clients. Create A Server Identity Keystore with your Public Key and Private Key  ...