Previous Next JavaScript must be enabled to correctly display this content

## 2.3 Configuring SSL

One way SSL between the presentation tier and the application on WebLogic server is supported. The detailed configuration is explained below:

Note:

Procure an external CA signed certificate before proceeding further. Follow the instructions below to install the certificate once the certificate is available.

1. Import the Certificate into a Java Trust Keystore.

   Execute the following command:

       keytool -import -trustcacerts -alias sampletrustself -keystore SampleTrust.jks
       -file SampleSelfCA.cer.der -keyalg RSAkeytool -import -alias `hostname -f` -file
       `hostname -f`.cer -keystore <JAVA_HOME>/jre/lib/security/cacerts -storepass changeit -noprompt

2. Configure Application Domain’s WebLogic with Custom Identity and Trust Keystores.
   1. Open the WebLogic admin console and navigate to

      Home → Edit tree à Environment àservers → <Server_Name>.

   2. Click the Security → Keystores tab.
      Description of the illustration security11.png

- Click the Dropdown button.
- Select Custom Identity and Java Standard Trust option from the list.
- Click the Save button.
- Enter the following details in the Identity and Trust sections:

  Details in the Identity and Trust sections

  Field | Value
  --- | ---
  Custom Identity Keystore | Absolute path of the custom keystore
  Custom Identity Keystore Type | JCEKS
  Custom Identity Keystore Passphrase | <Passphrase>
  Confirm Custom Identity KeyStore Passphrase | <Re-enter the same Passphrase>

Enter the passphrases that were used while creating the custom Identity Keystore and certificate.

1. Click the Save button.
2. Click the SSL Tab.
   Description of the illustration security2.png

   Enter the following details in the Identity section:

   Field | Value
   --- | ---
   Private Key Alias | <Alias>
   Private Key Passphrase | <Passphrase>
   Confirm Private Key Passphrase | <Re-enter passphrase>

   1. Enter the passphrases that were used while creating the certificate.
   2. Click the Save button.
   3. Click the Advanced link.
   4. Ensure that Two Way Client Cert Behavior is set to Client Certs Not Requested.
3. Click the General tab.
4. Select the SSL Listen Port Enabled check box.
   Description of the illustration security2-1.png
5. Click the Save button.

Parent topic: Secure Installation and Configuration