SSL in the Oracle Fusion Middleware Architecture

Configuring SSL in Oracle Fusion Middleware 6-9

6.3 Configuring SSL for Configuration Tools

Several tools are available for Oracle Fusion Middleware configuration. This section describes how to configure SSL for these tools to enable them to connect to an SSL-enabled Oracle WebLogic Server. For a list of all the configuration tools, see Section 6.2.4, Tools for SSL Configuration. . This section contains these topics: ■ Oracle Enterprise Manager Fusion Middleware Control ■ Oracle WebLogic Server Administration Console ■ WLST Command-Line Tool

6.3.1 Oracle Enterprise Manager Fusion Middleware Control

Take these steps: ■ Ensure that the SSL port is enabled on the Oracle WebLogic Server instance on which Fusion Middleware Control is deployed, and that the browser from which you will launch Fusion Middleware Control trusts the server certificate. ■ Now launch Fusion Middleware Control using an SSL-based URL, in the format https:host:port.

6.3.2 Oracle WebLogic Server Administration Console

Ensure that the SSL port is enabled on the Oracle WebLogic Server instance. Now launch the administration console by providing the SSL port in the URL. You may get a warning that the certificate is not trusted; accept this certificate and continue.

6.3.3 WLST Command-Line Tool

For details about configuring SSL for WLST, take these steps: 1. Launch the WLST shell. 2. Execute the WLST command: helpconnect Follow the instructions described in the help text to set up the WLST shell in SSL mode.

6.4 Configuring SSL for the Web Tier

This section contains these topics: ■ Configuring Load Balancers ■ Enabling SSL for Oracle Web Cache Endpoints ■ Enabling SSL for Oracle HTTP Server Virtual Hosts

6.4.1 Configuring Load Balancers

Use the instructions specific to your load-balancing device to configure load balancers in your Oracle Fusion Middleware environment. 6-10 Oracle Fusion Middleware Administrators Guide

6.4.2 Enabling SSL for Oracle Web Cache Endpoints

This section explains how to enable SSL for Oracle Web Cache listening endpoints using Fusion Middleware Control and WLST.

6.4.2.1 Enable Inbound SSL for Oracle Web Cache Using Fusion Middleware Control

You can SSL-enable inbound traffic to Oracle Web Cache listening endpoints using these steps: 1. Select the Oracle Web Cache instance in the navigation pane on the left. 2. Create a wallet, if necessary, by navigating to Oracle Web Cache, then Security, then Wallets. For details about wallet creation and maintenance, see Chapter 8, Managing Keystores, Wallets, and Certificates . 3. Navigate to Oracle Web Cache, then Security, then SSL Configuration. The SSL Configuration page contains two sets of information: The top table shows the inbound settings for a list of listening endpoints. A check in the SSL Enabled column indicates that the endpoint is configured for SSL. The bottom portion of the page shows outbound SSL configuration. For more information about outbound SSL, see Section 6.4.2.3, Enable Outbound SSL for Oracle Web Cache Using Fusion Middleware Control. . 4. Select an endpoint, and click Edit. Note: This information applies only to inbound communication; for information about SSL-enabling outbound traffic from Oracle Web Cache to Oracle HTTP Server, see Section 6.4.2.3, Enable Outbound SSL for Oracle Web Cache Using Fusion Middleware Control .