Create a keystore if one does not already exist by selecting Security and then

Creating and Managing Oracle Virtual Directory Listeners 11-23 To configure the Listener for SSL No-Authentication Mode, select No Authentication . To configure the Listener for SSL Server Authentication Mode, select Server Authentication . To configure the Listener for SSL Mutual Authentication mode between the Oracle Virtual Directory server and the client, select Mutual Authentication.

k. Select the appropriate option from the Cipher Suite field. You can select All, or

a combination of individual options. l. Select the appropriate option from the SSL Protocol Version field.

m. Click the OK button.

4. Stop Oracle Virtual Directory if it is running by referring to

Stopping the Oracle Virtual Directory Server Using Fusion Middleware Control on page 8-15. After it stops, start Oracle Virtual Directory by referring to Starting the Oracle Virtual Directory Server Using Fusion Middleware Control on page 8-15.

11.6.2 Configuring SSL for Listeners Using WLST

To configure SSL for Oracle Virtual Directory using the WLST command line tool: Note: The Optional Client Authentication mode is not supported for Oracle Virtual Directory Listeners. Note: If you are configuring the Listener for SSL No-Auth mode, you must select at least one DH_anon cipher. For all other SSL modes, you must select at least one RSA cipher. Note: The v2Hello option is not supported by itself. That is, you cannot select the v2Hello option alone—you must select it in combination with at least one additional SSL Protocol Versions from the list. Note: You must explicitly stop and start Oracle Virtual Directory—not Restart—to load the Listener configuration to the Oracle Virtual Directory server. See Also: ■ The WLST Reference for SSL information in the Oracle Fusion Middleware Administrators Guide. ■ Oracle Fusion Middleware Oracle WebLogic Scripting Tool for information on how to use the WLST command line tool. ■ Oracle Fusion Middleware WebLogic Scripting Tool Command Reference for information WLST command tool syntax. 11-24 Oracle Fusion Middleware Administrators Guide for Oracle Virtual Directory 1. Launch the WLST command line tool shell. 2. Go to the custom tree using the following command: custom 3. Navigate to the root Oracle Virtual Directory mBean using the following commands: cdoracle.as.management.mbeans.register cdoracle.as.management.mbeans.register:type=component,name=COMPONENT_ NAME ,instance=INSTANCE_NAME 4. Initialize the Oracle Virtual Directory configuration from the remote Oracle Virtual Directory server into the WebLogic server using the following command: invokeload,jarray.array[],java.lang.Object,jarray.array[], java.lang.String 5. Identify the Listeners for this Oracle Virtual Directory component by executing the following command: listListenersinstName, compName For example: listListenersinstance1,ovd1 The command lists all the Listeners for the component named ovd1. In the list of Listeners returned, identify the Listener you want to secure using SSL. For example, imagine you want to secure the Listener named LDAP SSL Endpoint. 6. Display the existing SSL configuration for the Listener you want secure LDAP SSL Endpoint in this example using the following command: getSSLinstance1,ovd1,ovd,LDAP SSL Endpoint 7. Display the existing keystores using the following command: listKeyStoresinstance1,ovd1,ovd 8. If necessary, create a new keystore and a self-signed certificate using the following commands. To create the new keystore, execute the following command: createKeyStoreinstance1,ovd1,ovd,NEW_KEYSTORE_NAME,PASSWORD_FOR_NEW_ KEYSTORE To create a self-signed certificate in the new keystore, execute the following command: generateKey instance1,ovd1,ovd,NEW_KEYSTORE_NAME,PASSWORD_FOR_NEW_ KEYSTORE , DN, keySize, alias 9. Identify the name of the SSL MBean for the Oracle Virtual Directory Listener by executing the following command: getSSLMBeanNameinstance1,ovd1,ovd,LDAP SSL Endpoint 10. Set the passwords for the keystore and truststore in the MBean by executing the following commands: cd SSL_MBEAN_NAME