Configuring Oracle UCM for Two-Way SSL Communication

5-6 Oracle Fusion Middleware System Administrators Guide for Oracle Content Server

5.2.2 Configuring Oracle UCM to Use SSL

You can configure Oracle Fusion Middleware to secure communications with Oracle UCM using SSL, which is an industry standard for securing communications. Oracle Fusion Middleware supports SSL version 3, as well as TLS version 1. This section covers the following topics: ■ Section 5.2.2.1, Configuring Oracle UCM for Two-Way SSL Communication ■ Section 5.2.2.2, Invoking References in One-Way SSL Environments in Oracle JDeveloper ■ Section 5.2.2.3, Configuring Oracle ECM Suite, Oracle HTTP Server for SSL Communication ■ Section 5.2.2.4, Switching from Non-SSL to SSL Configurations for Oracle UCM ■ Section 5.2.2.5, Configuring SSL Between Oracle UCM Instances and Oracle WebCache ■ Section 5.2.2.6, Using a Custom Trust Store for One-Way SSL During Design Time ■ Section 5.2.2.7, Enabling an Asynchronous Process to Invoke An Asynchronous Process ■ Section 5.2.2.8, Configuring RIDC SSL for Valid Certificate Path For additional information, see Configuring SSL in Oracle Fusion Middleware Securing Oracle WebLogic Server Guide. For information on Web Tier configuration, see SSL Configuration in Oracle Fusion Middleware in Oracle Fusion Middleware Administrators Guide.

5.2.2.1 Configuring Oracle UCM for Two-Way SSL Communication

Oracle ECM Suite uses both the Oracle WebLogic Server and Sun secure socket layer SSL stacks for two-way SSL configurations. ■ For the inbound Web service bindings, Oracle ECM Suite uses the Oracle WebLogic Server infrastructure and, therefore, the Oracle WebLogic Server libraries for SSL. ■ For the outbound Web service bindings, Oracle ECM Suite uses JRF HttpClient and, therefore, the Sun JDK libraries for SSL. Due to this difference, start Oracle WebLogic Server with the following JVM option. 1. Open the following file: ■ On UNIX operating systems, open MIDDLEWARE_HOMEuser_ projectsdomainsdomain_namebinsetDomainEnv.sh. ■ On Window operating systems, open MIDDLEWARE_HOME\user_ projects\domains\domain_name\bin\setDomainEnv.bat. 2. Add the following lines in the JAVA_OPTIONS section, if the server is enabled for one-way SSL server authorization only: -Djavax.net.ssl.trustStore=your_truststore_location For two-way SSL, the keystore information location and password is not required. In addition, perform the following steps to enable two-way SSL for Oracle UCM to invoke another application. Managing Security and User Access 5-7 1. On the client side, provide the keystore location.

a. From the SOA Infrastructure menu, select SOA Administration then