What is SSL and How to Configure SSL, Keystores and Certificates in Oracle Weblogic Server

[@one.people]

Tech tutorials don't get any better than this one. This is one of the best Oracle Tech videos on the internet. Thanks Prassad for all the work you put into delivering clear, easy to understand SSL concepts and procedures as it relates to the WebLogic Server.

[@PrasadDomala]

+peeps33 Thanks.

[@sameerray250]

Best Tutorial a rare exception a gem from India..Salute your preciseness, to the point and your knowledge and knowledge sharing abilities. I was literally tired of hours of long videos with virtually no knowledge from our other Indian bros

[@zarys76]

Thank You very much! Also for not putting any music in the background! This helps a lot.

[@vikrantverma231]

Loved the details and explanation. Great tutorial. Only after so many years, now I am confident about SSL.

[@karthik999kk7]

Except you Till now no one can show SSL install and configuration.thanks very much.

[@manishnsachdev]

Very nice step by step explanation

[@ick6698]

Such a wonderful video ...God bless u

[@MukeshSahu-mn2ps]

Super video and nicely explained.i was running these commands from many years and does not even knows it functionality

[@Govardhan52]

Thank You so much for i get valuable information from the video Keep update the video's and share your best Knowledge to all ....Tq

[@praveenbgowda4307]

Hi Prasad.. is it do the video for JMS and EDJB and also for httpd?

[@zarys76]

Bardzo pomocny film :) dziękuję!!!

[@pacogalvez75]

Awesome. Clear concepts and presentation. Thanks

[@TheLakshmihari]

the concept is crisp and clear. Thank you for a wonderful demo.

[@PrasadDomala]

Thank You

[@rajeshbhatia1470]

You presentation is fluent and excellent.. thank you so much Prasad..

[@Govardhan52]

Its really helpful to Fewember please Update your info.. We waiting for This Conpect *** How to Create a Wallet via ORAPKI in Fusion Middleware 12c (12.1.x)...?

[@lauteckhuat1958]

Hi Prasad, thank you so much for this video. Need some advice from you, is there any guide for Oracle weblogic application server 10.3 to support domain with SSL ? Appreciate that your supprt.

[@Kensoftinfotech]

Hi Prasad, thanks for putting this tutorial together! Will this enable fusion middleware console also to be accessed with SSL in admin console URL? Will enabling this with admin server work on both forms and reports services as well? for URLs with OHS ports

[@anbarasan9842]

thanks for the great explanation. can you explain the encryption and description using the certificate?

[@venkat306]

Hi Prasad ,thanks for great video and please do one video how to OBBRN registered to in ureka

[@tanyamadaan4933]

That was an awesome explanation... The best explanation of SSL..

[@harshmaheshwari9295]

Hi Prasad, Can you tell how to import Private Key in Weblogic. Getting below error : Cannot retrieve identity certificate and private key on server AdminServer, because the keystore entry alias is not specified

[@solomongeorge4279]

Thanks for this great presentation Prasad. I am new to Weblogic & SSL. Generate Keypair, suggests that there are two keys created yet there is only one entry. I followed the CSR process but received one certificate back from our CA. I imported this certificate successfully into Weblogic keystore/keypair alias. It is still a bit confusing where the identity and trust certificates would be at the end of these steps. Whether importing the certificate from CSR process into a separate keystore would serve as a trusted certificate. Isn't there a step to change the port number on which HHTPS traffic listener will be? Thank you, Jayanth

[@daxelai]

How do the same in Tomcat? Please blogs or videos on it

[@j.r.fernandez2453]

Thanks, Prasad! Excellent video!

[@shekharg8465]

Nice & simple explaination. Keep it up.

[@shilparamakrishna]

Awesome one....understood concept very clearly :) Thanks sharing...you have very clearly explained... This is the best video i have come across.

[@PrasadDomala]

Thanks Shilpa.

[@darakhmao]

I hope someone could answer my question. Most of the applications are inside the companies domain. No one outside the dmz could access them. Why do need a trusted CA like VeriSign to sign the certificate? Any work around? Thanks.

[@meenakshisundaram3231]

I have a problem: My app is running in weblogic 12c. I have property file inside a path and application works fine normally. When I do start and stop the application in Deployments page after making some configuration changes in property file, changes usually get reflected properly when I use in my data center oracle cluster. But, we migrated to AWS weblogic server which is provisioned thru their aws marketplace. Here, after making config change in property file and make a application restart from Deployments page, changes are not working. Could you please guide if you are getting any possible solution for this issue?

[@soumyabratadash977]

Great Sir......cleared my concepts...

[@shekharg8465]

Awesone Prasad. Very clear . Thanks.

[@amanidevulapalli803]

Hi Prasad the way of ur presentation is very good and its useful And i have a question from my oin development side we r getting ssl. Handshake exception even the ssl certificate was imported in a right way Can u please suggest what i need to do resolve that error

[@shanuhbk789]

Do you have a tutorial for Oracle Wallet configuration in Oracle HTTP server

[@37232]

hi prasad, Can you please tell , how to make ssl connection using wlst after enabling SSL on admin. I am getting no available route exception.

[@pradeepmodukuri]

Thanks Prasad, for the Information...i am using oracle soa suite 12c , i am trying to create identity.jks and trust.jks , created mycompany.jks and now in 'trust' section in console do i need to create one more .jks and load it or i can upload mycompany.jks..?

[@ahmedsamir9596]

Hi prasad i am facing a problem with Webdav i am using webcenter content 12.2.1 and using the webdav component to open a document and edit it my problem is that when i am trying to open the link of the document using webdav inside word or acrobat reader there is a popup appears asking me for putting the credentials !! always asking me about user credentials if you have experiance with such kind behaviour or webdav please lemme know thanks

[@jefflucas_life]

Hey, Prasad, this was very informative about keytool from command line, thank you.

[@sujansonly007ify]

is there a way, i can create the kss based keystore using wlst or keytool, i would want to automate creating and changing the keystore in my domain using wlst.

[@PrasadDomala]

you can use createkeyStore WLST command. createKeyStore(appStripe='stripe', name='keystore', password='password',permission=true|false)

[@TonNioIv]

Where I can download that version? I was going to test primavera teams, I am having a problem with the ssl

[@leoneilbatulan408]

Can you help me configure Oracle HTTP Server to use SSL/TLS as Proxy/Load Balancer for Clustered WebLogic server?

[@arulkumaran6445]

Thanks for this excellent video, to understand the basics. I have case. SSL certificates are getting expired, we have received the new certificate and key file. How to update .jks file using the new key and certificate file. Can you please share the steps. Thanks in Advance...

[@shivangigupta5937]

Hi Prasad, Could you please let me know where could I find location of EM -> weblogic domain -> security -> system -> trust to access the trust store using terminal.

[@oracledba3208]

Thanks for sharing information. It's really useful for beginner

[@krishnaelitestar9289]

Great Prasad, Nice explanation, That's "Telugu's spirit" Thanks

[@saratdevs]

hi, I am using certificate issued to me by company to secure the weblogic server. Is this right. Basically what i wish to achieve is .. when someone tries to access the url , it should prompt for for certificate , upon inserting pki card it should ask for pin and hence authenticate the user

[@trvelayuthan]

can u help me for the same with connect to MS sql server.

[@robelfesshaye424]

Great explanation!

[@kiranmanne5806]

Hi Prasad, even after installing the certificates when i am loading web-logic console page with ssl port i am getting not secure icon ,kindly suggest pls

[@rajug596]

Brilliant. That's awesome. So much helpful. We expect more and more informative videos from you. Thanks a lot..

[@PrasadDomala]

+RAJU G Thanks Raju. Yes please subscribe and stay tuned. More videos to come :)

[@aliekamara1044]

why your blog look different? i can not find the step by step instruction for this video.

[@PrasadDomala]

Hi recently updated my blog. Old post are not yet migrated. Will be done soon.

[@priyanka7840]

this video is really helpful. what is the command to generate .crt file?

[@arpitac9481]

Can u plz help me as i have forgotten the password of oracle em login ...do i have any other alternative

[@sathiskumare5034]

Great!! Thanks for the detailed explanation

[@ВладимирБобко-ь5в]

Hi, how I can disable sslv3 in weblogic server?

[@uskppl8042]

dear how we can configure all these at Window 2012 server .

[@vysakhviswan1948]

Excellent demonstration. Helped to understand the concept :)

[@suryareddy6355]

Thank you sir.. I subscribed to your channel.!! I just love your way teaching :)

[@ozgurg8853]

Hi Prasad - Thanks for this great video. Q: Would you please shed some light on following scenario? If internal company CA (signer) root and issuing/intermediate certificates are used with identity and trust keystores, in order to see the certificate chain properly. What do we need to do? At the beginning of the video you mentioned any third party signer certificates should go to trust (key)store, do we need to import them as $>keytool -importcert or $>keytool -import -trustcacerts into truststore? In addition to that, do we need to import CA's root and issuing certificates into the (identity) keystore before importing signed certificate from (internal) CA. Put it simply I can't figure out why my certificate chain is not visible in my (identify) keystore? A: I've used iKeyMan GUI tool to manage keys and also put the internal signer certificates into cacert of JAVA_HOME---> JRE -->lib---> security--> cacerts and I was able to see the certificate chain $>keytool -list -v Thanks in advance,

[@ghoolam]

Really nice learning video.thank you for sharing.

[@sweetmemoriesSR]

Link not opening: Page not found. Please share

[@anilmishra2099]

Hello sir can you please help me I'm unable to configure ssl because giving error pkcs12

[@nianetic5165]

Hi sir, i have imported the certificates and weblogic keystore and ssl portion also complete. The link is opening using ss but the certificate is showing invalid. And the from and to authorities are showing the same.

[@Vone_WorldClass]

I install weblogic server 10.3.6.0 on Solaris. so can I follow this step?

[@rammohanvallamkonda6805]

Can some tell me how to Import the root , sub and server/digital cert after the CSR is generated

[@anu6205006]

Hi Prasad, Very Good Video . . Hope you remember me . . We had shared work space before 5 years .. Really great initiative to share knowledge . . Videos was awesome Thanks Anwar

[@PrasadDomala]

+Anwar Hussain Hi Anwar. How r u. I do remember you man. Hope you are doing well.

[@vijay8358]

Good one enjoyed it

[@SoPheap44]

I want to know how to install oracle enterprise manager fusion middleware control 12c

[@subrahmanyamv8927]

Nice explanation thanks prasad

[@mtnguyen1696]

does weblogic support wildcard certificates?

[@mubashartariq8076]

Blog link does not work

[@good_life_videos]

I believe the description about integrity of SSL/ Digital Ceritificate is a bit wrong when you said client hashes the message and sends it to the server. I believe that server uses its public key as the plain text and creates the message digest/ Hash-value using the hash function (generally SHA*). Now server appends the hash function used to create this message digest in the message digest, and finally appends it with the plain public key and encrypt the whole data with its private key and send it in the Digital certificate. When this encrypted data comes to the client, it fetches the public key decrypts the encrpyted message digest with the help of server's public key and fetches the hashing algoritm (ie. SHA). Now client hashes the public key with this algorithm and gets a hash value or a message digest. Now if the message digest came from server and message digest generated at client side matches then only client authenticate the Digital Certificate's authenticity/integrity. Please correct me if my understanding is not correct here. Thanks!

[@teehee3728]

Thank you Prasad Domala :) . very helpful , and great explanation

[@myagmarsurennatsagdorj256]

Баярлалаа :)

[@kbop28]

Thank you for this video. It is very helpful and well done !

[@dancewithprachi1108]

Perfect Demo.. Thank you!

[@rama8897]

Excellent. Can you post a video on how to manage central Security Management System. As we are running multiple domains of weblogic, OSB, SOA

[@mohieyshalaby6084]

awesome Video

[@patrickroyce3956]

very helpful 👌👀

[@mohamedocp2008]

hi the link not open

[@HatakeKakashi245]

Nice explanation.. My question is.. do we need to select "Grant permission" for Production environment? can explain bit more on that .. thank you

[@thirupathireddy5425]

Thanks Prasad.

[@humzahalkindi]

Thanks. Very informative and clear. Keep up the good work brother :)

[@MrSachingoy]

Thanks for the nice explanation. it really helped me a lot.

[@99shorts7]

great tutorial, thank u so much

[@Venkat18228]

Nice demao.Thanks Prasad

[@JamesJ30t]

@Prasad ---- You did not create a truststore at 26:00 - You selected a custom truststore. Since you did not create a custom truststore won't WebLogic complain. Should you have just picked the Java default in this case.

[@PrasadDomala]

+JamesJ30t it should pick up the default trust store. I will check my VM and confirm that soon.

[@PrasadDomala]

+JamesJ30t it should pick up the default trust store. I will check my VM and confirm that soon.

[@JamesJ30t]

Good video on this topic. Is there anyway you can do a video connecting to a Web application in WebLogic with HTTPS using a Java application client?

[@PrasadDomala]

+JamesJ30t Thanks James. I will put it on my list. Thanks for your suggestion.

[@timmybabs5479]

This is good and quite helpful as always

[@uskppl8042]

Really appreciated ur effort

[@shubhamdeshmukh4619]

Thanks For the video Prasad, very informative. Learned a lot from this video.. I have one doubt though. How to self sign the certificate?

[@vahoranakil7500]

How to install ssl certificate on jboss 5.1.0 GA

[@juanespinoza7208]

Do you know Oracle Wallet?

[@jeevankaranth5598]

Hi Prasad, The video and the tutorial is really good. There is lot of things that can be done using the admin console, but same operation of associating the certificate to the managed server possible through CLI or any API call? Are you aware of any such mechanism? -Jeevan

[@eshuv2044]

How to disable ssl from weblogic??

[@shivaverla]

Many thx for sharing your knowledge...

[@nallurikamalkiran7094]

Very informative, thank you very much

[@PrasadDomala]

+Nalluri Kamal Kiran Thanks Kamal

[@madhiraramesh5076]

Really very informative !!!. Please upload more :)

[@arjunjangam5740]

Really good one.

[@PrasadDomala]

+arjun jangam Thanks Arjun.

[@arjunjangam5740]

can I have the video , how to connect weblogic n apache i n a clear as How the SSL videos is , I need it urgently

[@PrasadDomala]

+arjun jangam What do you mean connect Weblogic & Apache. Please elaborate.

[@arjunjangam5740]

Prasad I mean to say , how to connect the Weblogic n webserver , show me the modules n plugin between the Apache n Weblogic servers

[@PrasadDomala]

+arjun jangam OK. I can do that but not urgently :). I can only do it after I finish my current video project. I will try to do it asap.

[@allagaddasudheer]

Thanks alot perfect explanation

[@coldthrn]

Excellent!

[@jkmbox]

Thank you, although I'm on 11g. This was VERY helpful. I used the java keytool and was able to get the Admin server to accept SSL. However I need to enable it for the WLS_FORMS and WLS_Reports cluster. For the forms server, I enabled the SSL listen port assigned port :6002. Entered the same Keystore and SSL info as the Admin server, but it seems as if the port is not even opened or listening. any help or perhaps another video tutorial to enable these would be greatly appreciated. Thanks JamesK

[@anilyadavm3820]

wt is keystore and wt it contains