Configure SSL for Oracle Traffic Director
You can update the Oracle Traffic Director load balancer in Oracle Java Cloud Service to use a generated, self-signed certificate, or a certificate that has been issued by a CA.
Before you begin, ensure that you have enabled Oracle Traffic Director in your service instance, and also registered your custom domain name, as described in Configure a Vanity Domain Name for a Service Instance.
By default, if you created your service instance in an Oracle Cloud Infrastructure Classic region, external access to the load balancer console is disabled for security purposes. If you did not enable console access while provisioning your service instance, see Enabling Console Access in an Oracle Java Cloud Service Instance.
Create a Self-Signed SSL Certificate in Oracle Traffic Director
If you are not using a CA-issued certificate, then create a self-signed certificate by using the Load Balancer Console.
Import a CA-Issued SSL Certificate to Oracle Traffic Director
Use the Load Balancer Console to create a Certificate Signing Request (CSR). After receiving the CA-issued certificate, import it into the load balancer configuration.
For more information about managing load balancer certificates, see:
-
Managing Certificates in Administering Oracle Traffic Director (12.2.1)
-
Managing Certificates in Oracle Traffic Director Administrator's Guide (11.1.1.7)
Associate the SSL Certificate with Oracle Traffic Director
After installing a CA-issued or self-signed SSL certificate to the load balancer, you must associate it with the HTTPS listeners in the load balancer’s configuration. After the association is made, the load balancer will present the SSL certificate while processing any new HTTPS requests.
For more information about the SSL settings of the load balancer, see:
-
Configuring SSL/TLS Between Oracle Traffic Director and Clients in Administering Oracle Traffic Director (12.2.1)
-
Configuring SSL/TLS Between Oracle Traffic Director and Clients in Oracle Traffic Director Administrator's Guide (11.1.1.7)