Keystores and Oracle Wallets

6-10 Oracle Fusion Middleware Administrators Guide

6.4.2 Enabling SSL for Oracle Web Cache Endpoints

This section explains how to enable SSL for Oracle Web Cache listening endpoints using Fusion Middleware Control and WLST.

6.4.2.1 Enable Inbound SSL for Oracle Web Cache Using Fusion Middleware Control

You can SSL-enable inbound traffic to Oracle Web Cache listening endpoints using these steps: 1. Select the Oracle Web Cache instance in the navigation pane on the left. 2. Create a wallet, if necessary, by navigating to Oracle Web Cache, then Security, then Wallets. For details about wallet creation and maintenance, see Chapter 8, Managing Keystores, Wallets, and Certificates . 3. Navigate to Oracle Web Cache, then Security, then SSL Configuration. The SSL Configuration page contains two sets of information: The top table shows the inbound settings for a list of listening endpoints. A check in the SSL Enabled column indicates that the endpoint is configured for SSL. The bottom portion of the page shows outbound SSL configuration. For more information about outbound SSL, see Section 6.4.2.3, Enable Outbound SSL for Oracle Web Cache Using Fusion Middleware Control. . 4. Select an endpoint, and click Edit. Note: This information applies only to inbound communication; for information about SSL-enabling outbound traffic from Oracle Web Cache to Oracle HTTP Server, see Section 6.4.2.3, Enable Outbound SSL for Oracle Web Cache Using Fusion Middleware Control . Configuring SSL in Oracle Fusion Middleware 6-11 The Edit Port page appears. This page contains two sections—a top portion with general details like port and IP address, and a bottom section that configures SSL parameters. 5. To disable SSL, uncheck Enable SSL; restart the component instance by navigating to Oracle Web Cache, then Control, then Restart. 6. To enable SSL for this endpoint, check Enable SSL. Next, enter SSL configuration parameters: ■ Select an Oracle wallet from the drop-down list. ■ Select the type of SSL authentication. ■ Select the protocol version the available options are determined by your choice of authentication. 7. Click OK. 8. On Windows platforms only, open Windows Explorer and navigate to your cwallet.sso file. Under properties, security, add SYSTEM in group or user names. 9. Restart the Oracle Web Cache instance by navigating to Oracle Web Cache, then Control , then Restart.

6.4.2.2 Enable Inbound SSL for Oracle Web Cache Using WLST

You can enable SSL for inbound traffic to Oracle Web Cache using the WLST command-line tool. SSL-Enable Oracle Web Cache Inbound in server-auth Mode Using WLST Take these steps: 1. Determine the listening endpoints for this Oracle Web Cache instance by running the following command: listListenersinst1,wc1 Note: Ensure that the wallet contains the server certificate and its corresponding CA certificate. See Also: Section 8.4.1.3, Sharing Wallets Across Instances