Understanding SSL Encryption with WebLogic
To use SSL encryption with WebLogic and the current PeopleTools release, the WebLogic keystore must contain the following appropriately configured encryption keys:
-
The web server's private key.
-
The web server's public key, digitally signed by a trusted certificate authority (CA).
-
The digitally signed public key of the same CA that signed the web server's key.
A public key is transferred and stored as a data element in a digital certificate or a certificate signing request (CSR). You can obtain public keys from a variety of sources in several different formats.
When setting up SSL, you need to:
-
ensure that the encryption keys are correctly formatted.
-
install them in the keystore.
-
configure them using the WebLogic Remote Console.
Note:
If you've already installed and configured a set of encryption keys for use with WebLogic in a previous PeopleTools release, you must migrate them as external files to the keystore within the current WebLogic version.