Enable Inbound SSL on an Oracle Internet Directory Listener Using Fusion Middleware Control

Configuring SSL in Oracle Fusion Middleware 6-27

6.6.2 Enabling SSL on Oracle Virtual Directory Listeners

This section explains how to enable SSL for an instance of Oracle Virtual Directory. The Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory provides additional information on these topics: ■ Configuring SSL for Listeners Using Fusion Middleware Control ■ Configuring SSL for Listeners Using WLST ■ Configuring a Mutual Authentication SSL Connection Between Oracle Virtual Directory and Oracle Internet Directory

6.6.2.1 Enable SSL for Oracle Virtual Directory Using Fusion Middleware Control

The steps to enable SSL are as follows the example illustrates the server-auth mode: 1. Select the Oracle Virtual Directory instance in the navigation pane on the left. 2. Select a keystore to use for the operation by navigating to Oracle Virtual Directory , then Security, then Keystores Choose from the list of keystores that appears. If you need to generate a new keystore, see Section 8.3.3.1, Creating a Keystore Using Fusion Middleware Control for details. 3. To SSL-enable the listener, navigate to Oracle Virtual Directory, then Administration , then Listeners. 4. Select the LDAP SSL Endpoint listener, and click Edit. The Edit Listener page appears: 5. Click Change SSL Settings. 6. On the SSL Settings dialog: 6-28 Oracle Fusion Middleware Administrators Guide ■ Select Enable SSL. ■ For Server Keystore Name, select the keystore you created in step 3, for example, OVDtestJks. ■ For Server Keystore Password, type the keystore password you specified in step 3. ■ For Server Truststore Name, select the keystore you created in step 3, for example, OVDtestJks. ■ For Server Truststore Password, type the keystore password you specified in step 3. ■ Expand Advanced SSL Settings. ■ For SSL authentication, select Server Authentication. This is the default setting. ■ For Cipher Suite, select the applicable cipher suite, in this example All. ■ Click OK. 7. Stop and start the Oracle Virtual Directory instance by navigating to Oracle Virtual Directory , then Control, then Stop and Start. 8. To verify that the instance is correctly SSL-enabled, execute an ldapbind command of the form: ldapbind -D cn=orcladmin -U 2 -h host -p SSL_port -W file: DIRECTORY_SSL_WALLET