1. Administering Oracle SOA Cloud Service
  2. Secure an Oracle SOA Cloud Service Instance
  3. Configure Network Security
  4. Configure SSL for an Oracle SOA Cloud Service Instance
  5. Set Up Oracle SOA Cloud Service to Use CA-Verified SSL Certificates (with OTD)
  6. Associate the SSL Certificate With the Load Balancer

Associate the SSL Certificate With the Load Balancer

After installing a CA-issued or self-signed SSL certificate to the load balancer, you must associate it with the HTTPS listeners in the load balancer’s configuration. After the association is made, the load balancer will present the SSL certificate while processing any new HTTPS requests.

  1. In the Oracle SOA Cloud Service Console, click menu icon for the desired service instance and select Open Load Balancer Console. Log in to Console using the credentials defined when provisioning your service instance.

    If you created your service instance using the Oracle SOA Cloud Service console, the user name and password default to the Oracle WebLogic Server Administration Console user name and password.

  2. Access the load balancer configuration (opc-config):

    1. Once logged in to the OTD console, click Target Navigation icon.

    2. Expand the Traffic Director folder.

    3. Click on the load balancer configuration (opc-config).

  3. Click Traffic Director Configuration and select Administration, then Listeners to navigate to the listeners in this configuration.
  4. Click https-listener-1.
  5. In the SSL/TLS Settings section, select the default certificate (opc-config) in the RSA Certificate field.
  6. Click OK to activate your changes.
  7. Repeat from step 4 to update the certificate of any additional HTTPS listeners in this configuration.

    This will propagate new certificates into the required wallets.

  8. Click https-listener-1.
  9. In the SSL/TLS Settings section, select your new certificate in the RSA Certificate field.
  10. Click OK to activate your changes.
  11. Repeat from step 8 to update the certificate of any additional HTTPS listeners in this configuration.
  12. Optionally, click Restart Instances to restart the listeners.

Note:

Alternatively, you can configure SSL/TLS Settings for an entire Virtual Server in the load balancer configuration.

After modifying a listener’s certificate you must also restart the load balancer node(s) in your service instance for the change to take effect. See Stop, Start, or Restart Managed Server and Load Balancer VMs.

For more information about the SSL settings of the load balancer, see "Configuring SSL/TLS Between Oracle Traffic Director and Clients" in Administering Oracle Traffic Director (12.2.1.4 | 12.2.1.3 | 12.2.1.2).