Connect to the WebLogic Admin Server. For example:

11-22 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory Enterprise Manager in the Oracle Fusion Middleware Administrators Guide for additional information. 3. Configure the Listener by performing the following steps:

a. Select Administration and then Listeners from the Oracle Virtual Directory

menu. The Listeners screen appears. b. Select the Listener you want to secure with SSL by clicking on it and then click the Edit button. The Edit Listener: Listener Name screen appears.

c. Click the Change SSL Settings link.

d. Click the Enable SSL option to enable SSL on the Listener. If you are

configuring the Listener for SSL No-Auth mode, skip to step i now. e. Select the keystore you want to use from the Server Keystore Name field. f. Enter the password for the keystore in the Server Keystore Password field. g. Select the truststore you want to use from the Server Truststore Name field. h. Enter the password for the truststore in the Server Truststore Name field.

i. Click and expand the Advanced SSL Setting option.

j. Select one of the following authentication modes for the Listener from the Client Authentication field. Note: If you select a different keystore or change the certificate in the keystore for the Admin Gateway Listener or the LDAP SSL Endpoint Listener, you must import the certificate into the Oracle Enterprise Manager Fusion Middleware Control Agent’s wallet. If you do not import the certificate, Oracle Enterprise Manager Fusion Middleware Control cannot connect to Oracle Virtual Directory to retrieve performance metrics. To import the certificate into the Oracle Enterprise Manager Fusion Middleware Control Agent’s wallet: 1. Export the Oracle Virtual Directory server certificate by executing the following command: ORACLE_HOME jdkjrebinkeytool -exportcert \ -keystore OVD_KEYSTORE_FILE -storepass PASSWORD \ -alias OVD_SERVER_CERT_ALIAS -rfc \ -file OVD_SERVER_CERT_FILE 2. Add the Oracle Virtual Directory server certificate to the Oracle Enterprise Manager Fusion Middleware Control Agent’s Wallet by executing the following command: ORACLE_COMMON_HOME binorapki wallet add -wallet \ ORACLE_INSTANCEEMAGENTEMAGENTsysmanconfigmonwallet \ -trusted_cert -cert OVD_SERVER_CERT_FILE -pwd WALLET_PASSWORD Note: The password for the keystore that is created during the Oracle Virtual Directory installation is the same as the password set for the Oracle Virtual Directory administrator during installation. Creating and Managing Oracle Virtual Directory Listeners 11-23 To configure the Listener for SSL No-Authentication Mode, select No Authentication . To configure the Listener for SSL Server Authentication Mode, select Server Authentication . To configure the Listener for SSL Mutual Authentication mode between the Oracle Virtual Directory server and the client, select Mutual Authentication.

k. Select the appropriate option from the Cipher Suite field. You can select All, or

a combination of individual options. l. Select the appropriate option from the SSL Protocol Version field.

m. Click the OK button.

4. Stop Oracle Virtual Directory if it is running by referring to

Stopping the Oracle Virtual Directory Server Using Fusion Middleware Control on page 8-15. After it stops, start Oracle Virtual Directory by referring to Starting the Oracle Virtual Directory Server Using Fusion Middleware Control on page 8-15.

11.6.2 Configuring SSL for Listeners Using WLST

To configure SSL for Oracle Virtual Directory using the WLST command line tool: Note: The Optional Client Authentication mode is not supported for Oracle Virtual Directory Listeners. Note: If you are configuring the Listener for SSL No-Auth mode, you must select at least one DH_anon cipher. For all other SSL modes, you must select at least one RSA cipher. Note: The v2Hello option is not supported by itself. That is, you cannot select the v2Hello option alone—you must select it in combination with at least one additional SSL Protocol Versions from the list. Note: You must explicitly stop and start Oracle Virtual Directory—not Restart—to load the Listener configuration to the Oracle Virtual Directory server. See Also: ■ The WLST Reference for SSL information in the Oracle Fusion Middleware Administrators Guide. ■ Oracle Fusion Middleware Oracle WebLogic Scripting Tool for information on how to use the WLST command line tool. ■ Oracle Fusion Middleware WebLogic Scripting Tool Command Reference for information WLST command tool syntax.