Configuration the Two Way SSL Communications:

To configure the Two Way SSL.
On the Admin Server

Select  SSL tab: Advanced options
Two Way Client Cert Behaviour should be Client Cert Requested and Enforced.
Save it.
Now if you will can try to access the Admin Console over SSL then you will throw some SSL Handshake exception. 

Because of this process  two way SSL, Client is also requested to submit the certificate and we have not configured any certificate for our client 
So, we need to configure the certificate for the Client and for that again we need the Certificates for the Client.
We will be using the same CertGen utility of Weblogic Server to create the certificate.

java utils.CertGen <-certfile >ClientCert <-keyfile>ClientKey <-keyfilepass> keypass
Again it will create four certificates for the client.
To convert the client certificate into the PKCS12 format because the browsers generally accept PKSC12 keystore format for storing certificates.

Go to the OpenSSL bin directory and run the openssl.exe file then it will open up the OpenSSL command window where we can run the OpenSSL command.

 On this OpenSSL command use run the following command:
pkcs12 -export -in C:ServerCertClientCert.pem -inkey C:ServerCertClientKey.pem -out C:ServerCertclient-pkcs-12-cert

This will ask for a ClientKey.pem password: <xxxx>

Enter the Export Password: <xxx>

Confirm the Export Pass:<xxx>

This will create the client-pkcs-12-cert.

Now configuring the above certificate into the Browser:

Open Mozilla Firefox >>> Tools >>> Options >>> Encryption >>> View Certificates:

Certificates Tab >>> click on import >>>

Select the client-pkcs-12-cert created above.

Enter the Key password: <xxx>

This will import the Client certificate into the Browser.

Now Restart the required Browser.

Try accessing the Admin Console through the Bowser.

Now the Browser will be able to access the Admin Console.

Comments

  1. Hi Lakshmi..
    I am trying to install .war and .ear files to weblogic server(Nodes) using ansible playbook, but i understood that simple copying the .war file from control to manage server will not work, is there any other way possible to install(I dont want to use Wlst). - My requirement is -
    Connect to the serve
    Take the backup of existing war
    Undeploy the war (existing war)
    Check the space in the server
    Deploy the new war
    shutdown the server
    temp and cache need to be taken and store to some location
    restart the server

    Can you please help me with the playbook

    ReplyDelete

Post a Comment

Popular posts from this blog

Interview question for File and FTP Adapter

What is boot.properties file and how to create

SSL Exceptions in Admin Server and Node Manager.