Set up the Keystore and Truststore

This section describes how to set up the Keystore and Truststore for TLS communication.

XCA Gateway requires certificates to be loaded into the Keystore and Truststore of WebLogic Sever or Managed WebLogic Server for TLS communication with Web Service client.

To set up the Keystore and Truststore for TLS communication:

1. For configuring the Identity and Trust for WebLogic Server or Managed WebLogic Server, follow the steps provided in http://docs.oracle.com/middleware/1212/wls/SECMG/identity_trust.htm#i1196575.
2. Enable SSL to secure communication between client and XCA Gateway application. For configuring the SSL, follow the steps provided in http://docs.oracle.com/middleware/1212/wls/SECMG/ssl.htm#i1194343.
3. Under Advanced section of SSL configuration:
   • Set Hostname Verification to None
   • Enable Use Server Certs
   • Set the Two Way Client Cert Behavior option to Client Certs Requested and Enforced
4. Restart the WebLogic Server or Managed WebLogic Server after configuring the Keystore and Truststore values.