This MBean is used to manage a domain's Domain Keystores.
| Since | 14.1.2.0.0 | ||
| Fully Qualified Interface Name | If you use the getMBeanInfo operation in MBeanTypeServiceMBean, supply the following value as this MBean's fully qualified interface name:
weblogic.management.runtime.DomainKeystoresDomainRuntimeMBean
|
||
| Factory Methods | No factory methods. Instances of this MBean are created automatically. | ||
| Access Points |
You can access this MBean from the following MBean attributes:
|
||
| Access Points Inherited from RuntimeMBean |
Because this MBean extends or implements RuntimeMBean, you can also access this MBean by retrieving RuntimeMBeans. The following attributes contain RuntimeMBeans and its subtypes:
|
This section describes the following attributes:
Private property that disables caching in proxies.
| Privileges | Read only |
| Type | boolean |
Returns the MBean info for this MBean.
Deprecated.
| Privileges | Read only |
| Type | javax.management.MBeanInfo |
The name of this configuration. WebLogic Server uses an MBean to implement and persist the configuration.
| Privileges | Read only |
| Type | java.lang.String |
Returns the ObjectName under which this MBean is registered in the MBean server.
Deprecated.
| Privileges | Read only |
| Type | weblogic.management.WebLogicObjectName |
Return the immediate parent for this MBean
| Privileges | Read/Write |
| Type |
Returns false if the MBean represented by this object has been unregistered.
Deprecated.
| Privileges | Read only |
| Type | boolean |
Returns the type of the MBean.
| Privileges | Read only |
| Type | java.lang.String |
This section describes the following operations:
Add a provisioned identity certificate to the domain. JKS and PKCS12 inputs use {@code fromAlias} and {@code fromAliasPassphrase}. A PEM input contains one PKCS#8 private key, the matching leaf certificate, and an optional certificate chain; {@code fromAlias} and {@code fromAliasPassphrase} are ignored for PEM input and {@code fromFilePassphrase} decrypts an encrypted PKCS#8 key.
Remote callers must use an encrypted management transport such as T3S or HTTPS.
| Operation Name | "addProvisionedIdentityCertificate" |
| Parameters | Object [] { toAlias, fromFileName, fromFileType, fromFilePassphrase, fromAlias, fromAliasPassphrase }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Add a provisioned identity certificate and PKCS#8 private key from separate files. Supported combinations are PEM certificate chain with a PEM private key, DER leaf certificate with a DER private key, and PEM certificate chain with a DER private key. The private key may be unencrypted or encrypted.
Remote callers must use an encrypted management transport such as T3S or HTTPS.
| Operation Name | "addProvisionedIdentityCertificateAndKey" |
| Parameters | Object [] { toAlias, certificateFileName, certificateFileType, privateKeyFileName, privateKeyFileType, privateKeyPassphrase }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Add one provisioned trust anchor to the domain. For PEM input, only the first certificate is imported when the file contains additional certificates. Use addProvisionedTrustCertificates(String, String, String) to import every certificate in a PEM bundle. DER input contains one X.509 certificate.
Remote callers must use an encrypted management transport such as T3S or HTTPS.
| Operation Name | "addProvisionedTrustCertificate" |
| Parameters | Object [] { toAlias, fromFileName, fromFileType, fromFilePassphrase, fromAlias }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Add every X.509 certificate in a PEM bundle to the Provisioned Trust keystore. The complete bundle is validated before it is persisted. Generated aliases are {@code provisioned-<base>-1}, {@code provisioned-<base>-2}, and so on in file order. Duplicate aliases or certificates cause the entire operation to fail.
| Operation Name | "addProvisionedTrustCertificates" |
| Parameters | Object [] { aliasBase, fromFileName, fromFileType }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Export only the Domain Trust keystore. Supported output types are PEM, JKS, and PKCS12. DER export is not supported.
Remote callers must use an encrypted management transport such as T3S or HTTPS.
| Operation Name | "exportDomainTrustCertificates" |
| Parameters | Object [] { toFileName, toFileType, toFilePassphrase }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Export only the Provisioned Trust keystore. Supported output types are PEM, JKS, and PKCS12. DER export is not supported.
Remote callers must use an encrypted management transport such as T3S or HTTPS.
| Operation Name | "exportProvisionedTrustCertificates" |
| Parameters | Object [] { toFileName, toFileType, toFilePassphrase }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Export the certificates trusted by the domain; that is, the contents of the "Domain Trust" keystore combined with the contents of the "Provisioned Trust" keystore.
| Operation Name | "exportTrustedCertificates" |
| Parameters | Object [] { toFileName, toFileType, toFilePassphrase }
where:
|
| Signature | String [] {
"java.lang.String",
"java.lang.String",
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
List the domain certificate authority's keystore.
| Operation Name | "listDomainCaKeystore" |
| Parameters | null |
| Signature | null |
| Returns |
class |
| Exceptions |
|
| Security roles |
Only the following roles can invoke this operation:
|
List the domain certificate authority certificates trusted by the domain.
| Operation Name | "listDomainTrustKeystore" |
| Parameters | null |
| Signature | null |
| Returns |
class |
| Exceptions |
|
| Security roles |
Only the following roles can invoke this operation:
|
List the provisioned identity certificates for the domain.
| Operation Name | "listProvisionedIdentityKeystore" |
| Parameters | null |
| Signature | null |
| Returns |
class |
| Exceptions |
|
| Security roles |
Only the following roles can invoke this operation:
|
List the provisioned trust anchors for the domain.
| Operation Name | "listProvisionedTrustKeystore" |
| Parameters | null |
| Signature | null |
| Returns |
class |
| Exceptions |
|
| Security roles |
Only the following roles can invoke this operation:
|
Remove a provisioned identity certificate from the domain.
| Operation Name | "removeProvisionedIdentityCertificate" |
| Parameters | Object [] { alias }
where:
|
| Signature | String [] {
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|
Remove a provisioned trust anchor from the domain.
| Operation Name | "removeProvisionedTrustCertificate" |
| Parameters | Object [] { alias }
where:
|
| Signature | String [] {
"java.lang.String" } |
| Returns |
void
|
| Exceptions |
|