8.2.2 Enable one-way SSL

This topic explains systematic instructions to enable one-way SSL.

1. Generate a custom keystore identity.jks for Weblogic Server containing a certificate.
2. In the Settings for AdminServer screen, set the Keystore details under the Keystore tab.

   Table 8-1 Keystore- Field Description

   Field	Description
   Custom Identity Keystore	Specify the identity.jks file location
   Custom Identity Keystore Type	Specify Keystore type as JKS.
   Custom Identity Keystore Passphrase	Specify the passphrase used to create the Keystore.
   Confirm Custom Identity Keystore Passphrase	Confirm the passphrase used to create the Keystore.

   Figure 8-10 Keystore

3. Copy the certificate to Oracle HTTP Server and import the new certificate into the OHS wallet as a trusted certificate.
4. Add the following new directive in mod_wl_ohs.conf to point to the wallet location.
   WlSSLWallet ${ORACLE_INSTANCE}/config/OHS/{COMPONENT_NAME}/keystores/default
5. Change the port in the mod_wl_ohs.conf file to point to the SSL port of the Weblogic server.

   Figure 8-11 mod_wl_ohs file

6. Restart both Weblogic Server and Oracle HTTP Server.