Configuring HTTPS for Oracle BAM Adapter

22-28 Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle BPM Suite

22.9.6 Calling Secure Web Services

Currently, the Oracle BAM Alerts Call a Web Service action supports invoking web services protected by one-way SSL. In one-way SSL, the web service to be invoked presents a digital certificate to its client the Oracle BAM Alert action client in this case, and the client verifies whether certificate presented to it can be trusted. If the client trusts the server certificate, then further communication between client and server continues over a secure SSL channel. To accomplish one-way SSL, the Alert web service client must be pointed to a trust store in which it can perform a lookup, to determine if the certificate presented to it exists in it or not. This can be done by adding the following properties in BAMCommonConfig.xml. SSL.TrustStore.Locationwls.homelibDemoTrust.jksSSL.TrustStore.Location SSL.TrustStore.TypeJKSSSL.TrustStore.Type SSL.TrustStore.PasswordpasswordSSL.TrustStore.Password SSL.TrustStore.ProviderSUNSSL.TrustStore.Provider By default, if these properties are not specified in the configuration file, the values mentioned above are used with the exception of password, in which no value is used. You can provide different values to these properties to override the default trust store configuration. Currently you must edit the configuration files to set these properties, as they are not exposed in Oracle Enterprise Manager Fusion Middleware Control. The default trust store is Java Key Store JKS, which is file based. Certificates can be added and deleted using the Java keytool command-line utility. See Call a Web Service in Oracle Fusion Middleware Developers Guide for Oracle SOA Suite for information about configuring the Call a Web Service alert action.

22.9.6.1 Protecting Oracle BAM Web Services, An Example

The following is an example illustrating how to invoke SSL protected Oracle BAM web services. It is specific to the Call a Web Service alert action calling the Oracle BAM ManualRuleFire web service. The steps in this section do not need to be done if you are invoking external one-way SSL-protected non-BAM web services. To configure properties for calling secure web services:

1. Open Oracle WebLogic Server Administration Console and go to Domain

Structure Environment Servers BAM_Server General. 2. Check SSL Listen Port checkbox and specify the SSL Listen Port number to use. 3. Modify the Oracle BAM configuration properties. a. These properties must be modified in BAMCommonConfig.xml: Communication_Protocolt3sCommunication_Protocol ListenPortSSLListenPortListenPort ApplicationURLhttp:SSL_HOST:SSL_PORTApplicationURL b. This property must be modified in BAMWebConfig.xml: ServerPortSSL_PORTServerPort Note: After this configuration the entire Oracle BAM application will be behind the SSL layer and must be accessed using the SSL port number and HTTPS protocol. Configuring Oracle Business Activity Monitoring 22-29 4. Restart Oracle WebLogic Server.

5. Open Oracle BAM Active Studio or Oracle BAM Architect, and go to Alerts.

6. Create an alert with the Call a Web Service action using a secure web service,

such as https:host_name:SSL_port_numberOracleBAMWSWebServicesManualRuleFire?wsdl as the WSDL URL for the action. 7. Map the parameters and save the alert.

22.10 Configuring Advanced Properties

Oracle BAM provides many advanced properties not available for configuration using the BAM Web Properties and BAM Server Properties pages in Fusion Middleware Control. These advanced properties are configured using the System MBean Browser. See Section 22.11, Oracle BAM Configuration Property Reference for a listing of all properties available for Oracle BAM configuration. To configure the advanced properties using the System MBean Browser:

1. Select System MBean Browser in the menu on the OracleBAMWeb or

OracleBAMServer page. 2. Select the path to the appropriate Application Defined MBeans page: ■ For properties common to all Oracle BAM components select Application Defined MBeans oracle.bam.common Server: bam_server1 Application: oracle-bam Config BAMCommonConfig see Figure 22–1 . ■ For Oracle BAM Server-specific properties select Application Defined MBeans oracle.bam.server Server: bam_server1 Application: oracle-bam Config BAMServerConfig. ■ For Oracle BAM web applications-specific properties select Application Defined MBeans oracle.bam.web Server: bam_server1 Application: oracle-bam Config BAMWebConfig. 22-30 Oracle Fusion Middleware Administrators Guide for Oracle SOA Suite and Oracle BPM Suite Figure 22–1 System MBean Browser Navigation Tree The associated configuration properties are displayed in the System MBean Browser.

3. Edit property values in the Values column, and click Apply.

4. Oracle BAM must be restarted after any changes to Oracle BAM properties. See Section 24.2, Managing Oracle BAM Availability for information about restarting Oracle BAM.