Creating PKCS12 Certificates and Keyst

4-82 Oracle Fusion Middleware Users Guide for Technology Adapters 1. Export the vsftpd.pem from Step 11 of Section 4.4.3.2.2, Installing and Configuring vsftpd into PKCS12 format: openssl pkcs12 -export -out vsfptd.p12 -in vsfptd.pem -inkey vsftpd.pem

4.4.3.2.4 Setting Up the Oracle FTP Adapter

Perform the following tasks to set up the Oracle FTP Adapter: 1. On your Solaris or Linux host, run the following commands: mkdir varftpinDir mkdir varftpoutDir chmod 777 varftpinDir varftpoutDir 2. Specify the FTP connection parameters in the Oracle FTP Adapter deployment descriptor from the Oracle WebLogic Server Administration Console. You have now installed and configured secure FTP and are ready to use this feature with the Oracle FTP Adapter.

4.4.3.3 Installing and Configuring FTP Over SSL on Windows

The FTPS feature is certified on FileZilla FTP server with OpenSSL. You must follow the procedure in the following subsections for installing and configuring OpenSSL for FileZilla on Windows: ■ Section 4.4.3.3.1, Installing OpenSSL ■ Section 4.4.3.3.2, Generating OpenSSL Server Key and Certificate ■ Section 4.4.3.3.3, Importing the Server Key and Certificate Into FileZilla Server ■ Section 4.4.3.3.4, Converting the Server Key From PEM to PKCS12 Format Where... Is... useFtps Set to True. This setting is required to use FTP over SSL. The default is False. walletLocation The location of the PKCS12 file created in Section 4.4.3.2.3, Creating PKCS12 Certificates and Keyst. walletPassword The password of the PKCS12 file. channelMask The type of channel: control channel or data channel. Possible values are both, control, data, or none. The default is both. securePort The port for FTP over SSL. The default is 990. keyStoreProvid erName The keystore provider class. The default is sun.security.provider.Sun. keystoreType The keystore type. The default is PKCS12. keystoreAlgori thm The keystore algorithm. The default is PKCS12 enableCipherSu its List of comma separated cipher suites. The default is blank, in which case the default list of cipher suites are used. For most cases, you are not required to change this. pkiProvider Set to blank. jsseProvider Set to blank. Oracle JCA Adapter for FilesFTP 4-83 ■ Section 4.4.3.3.5, Configuring Oracle FTP Adapter Deployment Descriptor to Use the New Key

4.4.3.3.1 Installing OpenSSL

OpenSSL is an open source implementation of the SSL protocol. OpenSSL implements basic cryptographic functions and provides utility functions. Perform the following steps to install and configure OpenSSL on the Windows host to be used as the FTP server. 1. Go to the following URL: http:www.slproweb.comproductsWin32OpenSSL.html 2. Download and install Visual C++ 2008 Redistributables. 3. Download and install Win32 OpenSSL v0.9.8k Light.

4.4.3.3.2 Generating OpenSSL Server Key and Certificate

To create the server key and certificate files, you must perform the following steps: 1. Open the command prompt and browse to the OpenSSL\bin directory. 2. Run the following command: openssl req -new -x509 -keyout mykey.pem -out mycert.pem -days 365 A sample command output is as follows: C:\OpenSSL\binopenssl req -new -x509 -keyout mykey.pem -out mycert.pem -days 365 Loading screen into random state - done Generating a 1024 bit RSA private key ..........++++++ .......++++++ writing new private key to mykey.pem Enter PEM pass phrase: Verifying - Enter PEM pass phrase: ----- You are about to be asked to enter information that will be incorporated into your certificate request. What you are about to enter is what is called a Distinguished Name or a DN. There are quite a few fields but you can leave some blank For some fields there will be a default value, If you enter ., the field will be left blank. ----- Country Name 2 letter code [AU]:US State or Province Name full name [Some-State]:CA Locality Name eg, city []:Belmont Organization Name eg, company [Internet Widgits Pty Ltd]:Test Organizational Unit Name eg, section []:Test Common Name eg, YOUR name []:Test test Email Address []:testtest.com 3. Enter a PEM pass phrase when prompted. 4. Re-enter PEM pass phrase entered in step 3 for verification. 5. Enter the requested details. The server key mykey.pem and certificate mycert.pem are generated in the OpenSSL\bin directory.