Using HTTPS with the Forms Listener Servlet Using an Authenticating Proxy to Run Oracle Forms Applications Oracle Forms Services and SSL

Using Oracle Forms Services with the HTTP Listener and Oracle WebLogic Server 5-19 Figure 5–5 Multiple Oracle HTTP Listeners on different hosts with multiple Oracle WebLogic Servers on one host For more information about tuning and optimizing Forms Services with the HTTP Listener and Oracle WebLogic Server, see Oracle Fusion Middleware Performance Guide, available on Oracle Technology Network OTN at http:www.oracle.comtechnologydocumentationindex.html .

5.5 Using HTTPS with the Forms Listener Servlet

Using HTTPS with Oracle Forms is no different than using HTTPS with any other Web-based application. HTTPS requires the use of digital certificates for example, VeriSign. Because Forms Services servlets are accessed via your Web server, you do not need to purchase special certificates for communications between the Oracle Forms client and the server. You only need to purchase a certificate for your Web server from a recognized certificate authority.

5.6 Using an Authenticating Proxy to Run Oracle Forms Applications

The default configuration as set up by the Oracle Fusion Middleware installation process supports authenticating proxies. An authenticating proxy is one that requires the user to supply a username and password in order to access the destination server where the application is running. Typically, authenticating proxies set a cookie to Host 3 Oracle HTTP Listener Host 2 Host 1 Oracle HTTP Listener Forms Server Runtime Forms Server Runtime Oracle WebLogic Managed Server Oracle WebLogic Managed Server 5-20 Forms Services Deployment Guide detect whether the user has logged on or been authenticated. The cookie is sent in all subsequent network requests to avoid further logon prompts. The codebase and server URL values that are set up by the Oracle WebLogic Server installation process include ORACLE_HOMEformsjava and formslservlet. As these are under the document base of the page ORACLE_HOMEforms, authenticating proxies will work.

5.7 Oracle Forms Services and SSL

To run Oracle Forms Services applications in SSL mode: ■ Create a Wallet to manage certificates. ■ Enable the HTTPS port in Oracle HTTP Server. By default, Oracle HTTP Server has one SSL Port enabled 8890. ■ Enable Web Cache to accept HTTPS connections from Oracle HTTP Server. For more information on the above topics, see the section SSL Configuration in Oracle Fusion Middleware in the Oracle Fusion Middleware Administrators Guide.

5.8 Enabling SSL with a Load Balancing Router