2010-12-12 49 views
2

欢迎。SSL和Oracle HTTP服务器(OHS)

对于Linux x86,有centos 5.5,oracle 11g release 1,Oracle Application Server 10g第3版(10.1.3.2.0)。

通过owm和openssl创建一个钱包...终于准备好使用钱包了。

更感兴趣的是什么设置改变配置OHS使其工作?

改变方式的ssl.conf取代默认的路径设置到下一个文件夹,其中位于钱包 启动opmnctl - 在我看到错误日志不起作用

[周四16年12月9日: 22:45 2010] [错误]服务器virt11gr1:443:无法打开加密的 钱包文件:/ opt/app/oracle/product/11.1.0/ohs/ohs/conf/ssl.wlt/mywallet when opm n是usingPlease启用它作为SSO钱包

在opmn.xml中也发现钱包串规定的道路有? - 将无法启动...( 家伙,告诉我,我错了

回答

1

通过OWM打开你的钱包,并设置复选框自动登录

2

如果我们通过ORAPKI使用,则:

# Create root wallet (for example, CA wallet) 
./orapki wallet create -wallet ./root -auto_login_only 

# Add a self-signed certificate (CA certificate) to the root wallet 
./orapki wallet add -wallet ./root -dn 'CN=your-host.com,C=IN' -keysize 1024 -self_signed -validity 3650 -auto_login_only 

# Export self-signed certificate from the wallet 
./orapki wallet export -wallet ./root -dn 'CN=your-host.com,C=IN' -cert ./root/b64certificate.txt 

# Create a user wallet (for example, a customer wallet) 
./orapki wallet create -wallet ./user -auto_login_only 

# Add a certificate request 
./orapki wallet add -wallet ./user -dn 'CN=your-host.com,C=IN' -keysize 1024 -auto_login_only 

# Export the certificate request 
./orapki wallet export -wallet ./user -dn 'CN=your-host.com,C=IN' -request ./user/creq.txt 

# Create a certificate (issued by CA) 
./orapki cert create -wallet ./root -request ./user/creq.txt -cert ./user/cert.txt -validity 3650 

# Add a trusted certificate (CA certificate) to the wallet 
./orapki wallet add -wallet ./user -trusted_cert -cert ./root/b64certificate.txt -auto_login_only 

# Add a user certificate 
./orapki wallet add -wallet ./user -user_cert -cert ./user/cert.txt -auto_login_only 

# Display contents of wallet 
./orapki wallet display -wallet ./root