Setting Up SSL for Oracle Internet Directory (OID)

To set up SSL for OID:

  1. Create certificate request in the wallet.

  2. Create a new configuration set for SSL in Oracle Directory Manager.

  3. Configure OID with the newly created configuration set.

Creating the Certificate Request in the Wallet

To create the certificate request:

  1. Open Oracle Wallet Manager and select Operations, Add Certificate Request.

  2. Fill in the fields and click the OK button.

  3. Select Wallet, Save. (By default, it is stored in C:\Wallets.)

Creating a New Configuration Set for SSL in Oracle Directory Manager

To create a new configuration set for SSL in Oracle Directory Manager:

  1. Open the Oracle Directory Manager and log in as an admin.

  2. From the Server management section on the left pane, select the Default Configuration Set.

    The Default Configuration Set properties appear in the right pane.

  3. From the tool bar, click the Create Like icon.

    A new configuration set will be created.

  4. In this new configuration set, change these properties:

    Number of Child Processes = 4

    Non SSL Port = <Any number other than 389>. For example, 399.

  5. Click the SSL Settings tab and enter the following values:

    SSL Authentication = SSL Server Authentication.

    SSL Enable = Both SSL and Non SSL.

    SSL Wallet = <path of the Wallet>. For example, file:C:\wallets.

    SSL Port = <any number other than 636>. For example, 646.

Note:

The port numbers for both SSL and non-SSL can be changed to any values other than the default configuration set port values.

Configuring OID with the Newly Created Configuration Set

To configure OID with the newly created configuration set:

  1. Restart the oidldapd server by navigating to <Oracle_Home>\ldap\admin and running the following commands in the command prompt:

    oidctl connect=<database SID> server=<OID server type value> instance=<instance⇒
 number value> stop

    Example: oidctl connect=orcl server=oidldapd instance=1 stop

  2. Start the OID with the new configuration set (configset=1). The default configuration set is demoted (configset=0).

    oidctl connect=<database SID> server=<OID server type value> instance=<instance⇒
 number value> configset=<new configset value> start

    Example: oidctl connect=orcl server=oidldapd instance=1 configset=1 start

  3. Close the Oracle Directory Manager and log in through SSL.

    Enter the wallet path and the wallet password in the login dialog.

    Note:

    If the SSL is incorrectly configured, you will not be able to log in.

    The wallet path should be given as file:C:\wallets. The path of the wallet is sufficient; the wallet name is unnecessary.