Select Configuration, and then the SSL page, and choose the location of identity

10-28 Oracle Fusion Middleware Security and Administrators Guide for Web Services Make sure that the certificate’s key usage allows both encryption and digital signatures. Oracle requires a key length of 1024 bits or larger. 3. Make sure that the following properties are set in the clients JVM: ■ javax.net.ssl.trustStore -- The name of the file that contains the trust store. ■ javax.net.ssl.trustStoreType -- The type of KeyStore object that you want the default TrustManager to use. ■ javax.net.ssl.trustStorePassword -- The password for the KeyStore object that you want the default TrustManager to use. Configuring Two-Way SSL for a Web Service Client You must ensure that WebLogic Server is able to validate the X.509 certificate that the client uses to digitally sign its request, and that WebLogic Server in turn uses to encrypt its responses to the client. Do one of the following:

1. Ensure that the client application obtains a digital certificate that WebLogic Server

automatically trusts, because it has been issued by a trusted certificate authority.

2. Create a certificate registry that lists all the individual certificates trusted by

WebLogic Server, and then ensure that the client uses one of these registered certificates. To configure SSL for a Web service client:

1. Create a keystore used by the client application. Oracle recommends that you

create one client keystore per application user. You can use the keytool utility to perform this step. For development purposes, the keytool utility is the easiest way to get started.

2. Create a private key and digital certificate pair, and load it into the client keystore.

Make sure that the certificate’s key usage allows both encryption and digital signatures. Oracle requires a key length of 1024 bits or larger.

3. Make sure that the following properties are set in the clients JVM:

■ javax.net.ssl.trustStore -- The name of the file that contains the trust store. ■ javax.net.ssl.trustStoreType -- The type of KeyStore object that you want the default TrustManager to use. ■ javax.net.ssl.trustStorePassword -- The password for the KeyStore object that you want the default TrustManager to use. ■ javax.net.ssl.keyStore -- The name of the file that contains the KeyStore object. ■ javax.net.ssl.keyStoreType -- The type of KeyStore object. ■ javax.net.ssl.keyStorePassword -- The password for the KeyStore. Note: See Configuring SOA Composite Applications for Two-Way SSL Communication in Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle Business Process Management Suite for specific configuration steps when a SOA application is the Web service client over two-way SSL.