2013年11月11日 星期一

How to configure Oracle Weblogic 10.3 to consume web service over HTTPS/SSL


   If your system runs on Oracle Webloigc and like to consume external web service over HTTPS, you may have handshake exception problem. To resolve the issue, you may follow the following steps

1) Export certificate from the web service endpoint provider by browser. 
   1a) click the key icon, select Certificate Information.


   1b) Select Base-64 encoding X.509(.CER) format and export the certificate to xxx.cer




2) Create key store and move the keystore file under domain folder:
2.a) keytool -importcert -keystore xxx.jks -trustcacerts -file xxx.cer -storepass p@ssw0rd
2.b) cp xxx.jks $(domain)/jks


3) Add some java options in setDomainEnv.sh
JAVA_PROPERTIES="-Dplatform.home=${WL_HOME} -Dwls.home=${WLS_HOME} -Dweblogic.home=${WLS_HOME} -Dweblogic.nodemanager.sslHostNameVerificationEnabled=false -Dweblogic.security.SSL.allowSmallRSAExponent=true -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol -Dssl.SocketFactory.provider=com.sun.net.ssl.internal.SSLSocketFactoryImpl -DUseSunHttpHandler=true -Dweblogic.wsee.client.ssl.usejdk=true"

4) Configure keystores in admin console 


5) Restart Weblogic

沒有留言: