How to configure Https access in WebLogic
This article will explain in detail how to configure Https access in WebLogic. The content of the article is of high quality, so the editor shares it for you as a reference. I hope you will have some understanding of the relevant knowledge after reading this article.
1. WebLogic enables SSL port
2. Manual production of identity.jks and trust.jks
1. Go to the home directory of weblogic and create a folder jksHL
[weblogic@app ~] $cd
[weblogic@app ~] $pwd
/ home/weblogic
[weblogic@app ~] $mkdir jksHL
[weblogic@app ~] $cd jksHL/
two。 Generate identity identity.jks KeyStore
[weblogic@app jksHL] $keytool-genkey-alias weblogicHL-keyalg RSA-keypass keypass123-storepass storepass123-keystore identity.jks-validity 3650-dname "CN=172.18.100.90,OU=NONE,O=NONE,L=chansha,ST=hunan,C=CN"
WeblogicHL-"SSL- private key alias"
Keypass123-"SSL- private key passphrase"
Storepass123-"key-identity (identity)-Custom identity KeyStore passphrase"
Storepass123-"KeyStore-trust-Custom identity KeyStore passphrase"
3650-customize the validity period of the certificate in days
3. Export the cer file of the public key certificate (password is storepass123)
[weblogic@app jksHL] $keytool-export-alias weblogicHL-file root.cer-keystore identity.jks
Enter keystore password:
4. Generate a trusted trust.jks KeyStore (password is storepass123)
[weblogic@app jksHL] $keytool-import-alias weblogicHL-trustcacerts-file root.cer-keystore trust.jks Enter keystore password: Re-enter new password: Owner: CN=172.18.100.90, OU=NONE, O=NONE, L=chansha, ST=hunan, C=CNIssuer: CN=172.18.100.90, OU=NONE, O=NONE, L=chansha, ST=hunan C=CNSerial number: 842a842Valid from: 2-12-19 11:38 AM until: 2-9-29 11:38 AMCertificate fingerprints: MD5: 92:DC:A7:ED:11:44:05:72:7F:59:44:52:73:06:0A:2F SHA1: 6F:42:A4:93:3C:A3:E3:92:0B:97:1B:15:E6:B0:A5:2A:4B:4F:FB:E3 SHA256: EE:C6 : 11:B0:42:44:8F:D3:C1:02:3A:4F:D7:C1:F4:EB:2E:0E:8D:CC:D8:6A:77:81:51:89:D1:35:54:56:D3:82 Signature algorithm name: SHA256withRSA Version: 3Extensions: # 1: ObjectId: 2.5.29.14 Criticality=falseSubjectKeyIdentifier [KeyIdentifier [0000: 2d 47 8e ad a2 e8 4f 45 ef 20 18 d0 7d 1f 51 4f .G....OE .QO0010: f8 0b f9 17....]] Trust this certificate? [no]: yesCertificate was added to keystore
So far, the production of identity.jks and trust.jks is complete!
Configure the new KeyStore and SSL
Click "Save"; restart Server, and the one-way SSL configuration is complete!
IV. SSL protocol testing
Browser enter https://IP:PORT/ project name
5. Block access to http
After setting up, restart Weblogic, which can be accessed through the https://ip:port/ project name / method, but the original http://ip:port/ project name / can still be accessed
The following configuration needs to be added under web.xml, so that when accessing http, it will automatically jump to https.
SSL / * CONFIDENTIAL is here to share how to configure Https access in WebLogic. I hope the above content can be of some help and learn more knowledge. If you think the article is good, you can share it for more people to see.
