Enable and Disable JSSE-Based SSL for WebLogic Server from the Administration Console Enable and Disable the JSSE-Based SSL Implementation for WebLogic Server Programmatically Enable and Disable the JSSE-Based SSL Implementation for a Standalone Client

12-14 Securing Oracle WebLogic Server Follow the steps described in this section to use the JSSE-based SSL implementation. The section describes the following topics: ■ Section 12.12.1, Enabling and Disabling the JSSE-Based SSL Implementation ■ Section 12.12.2, System Property Differences Between the JSSE-Based and Certicom SSL Implementations ■ Section 12.12.3, Supported Cipher Suites ■ Section 12.12.4, Using Debugging with JSSE SSL

12.12.1 Enabling and Disabling the JSSE-Based SSL Implementation

You can enable and disable the JSSE-based SSL implementation for WebLogic Server in the following ways: ■ From the WebLogic Server Administration Console ■ From the system property ■ Programmatically You can also enable and disable the JSSE-based SSL implementation for the standalone client from the system property. These options are described in the sections that follow.

12.12.1.1 Enable and Disable JSSE-Based SSL for WebLogic Server from the Administration Console

You can enable the JSSE-based SSL implementation through the Administration Console, on the Environment Servers ServerName Configuration SSL Advanced page. This affects both outbound and inbound SSL connections. You then need to restart SSL on the Environment Servers ServerName Control StartStop page. 12.12.1.2 Enable or Disable the JSSE-Based SSL Implementation for WebLogic Server from the weblogic.ssl.JSSEEnabled System Property The following server-side system property enables or disables the JSSE-based SSL implementation by initializing the SSLMBean.JSSEEnabled attribute: -Dweblogic.ssl.JSSEEnabled=true|false For example, -Dweblogic.ssl.JSSEEnabled=true enables the JSSE-based SSL implementation. This property affects both outbound and inbound SSL connections.

12.12.1.3 Enable and Disable the JSSE-Based SSL Implementation for WebLogic Server Programmatically

The SSLMBean has the following pair of settergetter methods to enable and disable the JSSE-based SSL implementation and to determine whether it is already enabled. These methods affect both outbound and inbound SSL connections. Note: The Certicom SSL implementation is currently deprecated and will be replaced by the JSSE-based implementation in a future release. Configuring SSL 12-15 void setJSSEEnabledboolean enabled; boolean isJSSEEnabled; The change takes effect on the next server restart. See SSLMBean in the Oracle WebLogic Server MBean Reference for complete information on the SSLMBean.

12.12.1.4 Enable and Disable the JSSE-Based SSL Implementation for a Standalone Client

On standalone clients, use the weblogic.security.SSL.enableJSSE=true|false system property to enable and disable the JSSE-based SSL implementation. The default is false.

12.12.2 System Property Differences Between the JSSE-Based and Certicom SSL Implementations