Extending a Domain in an SSL Environment
If your Oracle WebLogic Server domain connects to a database through an SSL port, you need to back up your data source and SSL parameters and remove the SSL configuration from the data source before running Fusion Middleware Configuration Wizard to extend the domain. After you have success fully extended the domain, you can restore the SSL configuration to your data source.
To extend a domain in an SSL environment with Fusion Middleware Configuration Wizard:
1.In the Oracle WebLogic Server Administration Console, select your data source,and save a backup of all SSL parameters.
Back up the URL, javax.net.ssl.trustStorePassword , javax.net.ssl.trustStore , javax.net.ssl.trustStoreType , and any other SSL parameters that have been configured for the data source.
2. Temporarily replace the SSL configuration for the data source with a non-SSL configuration.
Use a non-SSL URL and remove all SSL properties. You should end with something like this configuration:
*URL: : jdbc:oracle:thin:@myhost.example.com:1521:db11107
* Properties:
– user=MAR20SSL_OCS
– oracle.net.CONNECT_TIMEOUT=10000
– sendStreamAsBlob=true
3. After successfully extending the domain, restore the SSL configuration to your data source. You should end with something like this configuration:
*URL:
jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS_LIST=(ADDRESS=(PROTOCOL=TCPS)(HOST=myhost.example.com)(PORT=2490)))(CONNECT_DATA=SERVICE_NAME=db11107.example.com))(SECURITY=SSL_SERVER_CERT_DN= »CN=myhost.example.com,OU=QA,O=ECM,L=RedwoodShores,ST=California,C=US »))
)
*Properties:
–javax.net.ssl.trustStorePassword= DemoTrustKeyStorePassPhrase
– user=MAR20SSL_OCS
–javax.net.ssl.trustStore=/mw_home/wlserver_10.3/server/lib/DemoTrust.jks
–oracle.net.CONNECT_TIMEOUT=10000
–javax.net.ssl.trustStoreType=JKS
–javax.net.ssl.trustStoreType=JKS
–sendStreamAsBlob=true
4. If during step 3 you updated your domain with a new product that creates its own
data source, you may need to add SSL configuration to it as well.
Sanae BEKKAR - My Blog - 
Laisser un commentaire