Configuring SSL for Oracle Directory Services Manager

6-24 Oracle Fusion Middleware Administrators Guide

6.5.6 Client-Side SSL for Applications

For information on how to write SSL-enabled applications, see Using SSL Authentication in Java Clients in Oracle Fusion Middleware Programming Security for Oracle WebLogic Server. For best practices, refer to Section 6.8.2, Best Practices for Application Developers.

6.6 Configuring SSL for the Data Tier

This section contains these topics: ■ Enabling SSL on Oracle Internet Directory Listeners ■ Enabling SSL on Oracle Virtual Directory Listeners ■ Configuring SSL for the Database

6.6.1 Enabling SSL on Oracle Internet Directory Listeners

Out of the box, Oracle Internet Directory nodes are SSL-enabled in no-auth mode. This section explains how to SSL-enable Oracle Internet Directory listeners using Fusion Middleware Control and the WLST command-line tool.

6.6.1.1 Enable Inbound SSL on an Oracle Internet Directory Listener Using Fusion Middleware Control

In this example, the following steps enable SSL in no-auth mode for an instance of Oracle Internet Directory using Fusion Middleware Control: 1. Select the Oracle Internet Directory instance in the navigation pane on the left. 2. Navigate to Oracle Internet Directory, then Administration, then Server Properties . 3. Click Change SSL Settings. 4. On the SSL Settings dialog: Configuring SSL in Oracle Fusion Middleware 6-25 ■ Select Enable SSL. ■ Set SSL Authentication to No Authentication. ■ Set Cipher Suite to All. ■ Set SSL protocol version to v3. ■ Click OK. 5. Restart the Oracle Internet Directory instance by navigating to Oracle Internet Directory , then Control, then Restart. 6. To verify that the instance is correctly SSL-enabled, execute an ldapbind command of the form: ldapbind -D cn=orcladmin -U 1 -h host -p SSL_port SSL Enabling in Other Authentication Modes The steps for SSL-enabling in other authentication modes are the same, except that in the SSL Settings dialog, you would set the appropriate authentication type.

6.6.1.2 Enabling Inbound SSL on an Oracle Internet Directory Listener Using WLST

Configure the listener with SSL properties in no-auth mode as follows: configureSSLinst1, oid1, oid, sslport1 Notes: -U 1 represents the no-auth mode. Note: Other authentication types need an Oracle wallet. Note: The Oracle Internet Directory port name is always sslport1.