Upload
t-prasad
View
226
Download
0
Embed Size (px)
Citation preview
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
1/47
Generate SSL Certificate Using the Keytool for Weblogic
SSL Configuration
Keytool is utility provided by the Java software
1) Create a folder (cert- anywhere). Here we are creating cert folder under
C:\cert
2) Set the WLST Environment using C:\bea\weblogic91\server\bin\ setWLenv cmd
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
2/47
Goto C:\cert directory and run the bellow cmd to generate the keystore
keytool -genkey -alias one -keyalg RSA -keystore sample.jks
Note : Dont give space while entering first name and last name
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
3/47
Next run the following cmd to generate the CSR
keytool -certreq -keyalg RSA -alias one -file certreq.csr -keystore sample.jks
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
4/47
Goto google.com and type SSL Certigicate and open Verising site
Click on Free 30 day SSL Trial
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
5/47
Click on Verisign @ SSL Test Ceritificate
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
6/47
Click on Continue
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
7/47
Enter the Technical contact & click on Continue
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
8/47
Select Server not listed on dropdown list
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
9/47
Give the server name (here we need give to which server provide security) as
weblogic 9.1
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
10/47
Open C:\cert\ certreq.csr file and copy the content as specified in the below screen
and submit the certreq.csr
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
11/47
Accept the Agreement & click on submit
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
12/47
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
13/47
You will get the Mail to your mail box as shown below
Verisign will send you the Certificate file in the mail
1. Root CA
2. Intermediate CA
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
14/47
Click on first link as shown in the below mail to download
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
15/47
Click the link
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
16/47
Click on the link
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
17/47
Click on Select All button and copy in to one text file in C:\cert and named it as CA.pem
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
18/47
Goto second link which received the mail.
Do the same for intermediate certificate as well
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
19/47
Click on select all button and copy in to one text file in C:\cert and named it asIntermediateCA.pem
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
20/47
Copy the content
Bellow the two links and
saved as public.pem
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
21/47
To understand these pem files to Keytool, We need to follow below steps
keytool -import -alias verisignCA -file CA.pem -keystore sample.jks -trustcacerts
Total 3 files
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
22/47
Next run the bellow cmd
keytool -import -alias verisignIntermediateCA -file IntermediateCA.pem -keystore
sample.jks -trustcacerts
Next run the following cmd
keytool -import -alias one -file public.pem -keystore sample.jks -trustcacerts
Note : While saving dont include any spaces in public.pem file
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
23/47
By using below command check all the reports are successfully imported or not
keytool list keystore sample.jks -v
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
24/47
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
25/47
Go to weblogic console and enable SSL port
(domain -> adminserver->configuration -> general)
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
26/47
Go to keystore tab.
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
27/47
For SSL Tab add the following changes
Give the keytool
password
(Eg: weblogic)
Alias name
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
28/47
Restart the Weblogic admin server ,
In admin server console it will show the following information
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
29/47
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
30/47
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
31/47
Next open console with https://localhost:7004/console
(Mozilla firefox)
Click on I understand the risks
https://localhost:7004/consolehttps://localhost:7004/console7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
32/47
Click on Add Exception
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
33/47
Right click on the console any where select view page Info
Click on details button
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
34/47
Click on view certificate here we can identify certificate information
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
35/47
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
36/47
Next open console with https://localhost:7004/console
(Internet Explorer)
There is no Root CA Certificate in your Browser , install RootCA certificate in yourbrowser
Click on view certificate
https://localhost:7004/consolehttps://localhost:7004/console7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
37/47
Click on Install certificate
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
38/47
Click on next button
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
39/47
Click on next button
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
40/47
Click on finish
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
41/47
Click on ok
Click on yes button
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
42/47
Login here
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
43/47
Right click on the console any where goto properties
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
44/47
Click on certificate
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
45/47
Here we can identify Certifificate Information
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
46/47
Click on details to know the other details
7/27/2019 Creation and Installation of SSL Certificate for Key Tool New
47/47
Click on certification path to know where it is located