Enable SSL Oracle E-Business Suite Release 12

Enable SSL Oracle Application R12 (Apps R12)

The most significant change for Secure Sockets Layer (SSL) support in E-Business Suite Release 12 is the use of the mod_ossl module for the Oracle HTTP Server. Like mod_ssl, the mod_ossl plug-in enables strong cryptography for Oracle HTTP Server. In contrast to the OpenSSL module, mod_ossl is based on the Oracle implementation of SSL, which supports SSL 3, and is based on Certicom and RSA Security technology.

Secure Sockets Layer (SSL)
SSL is a technology that defines the essential functions of mutual authentication, data encryption, and data integrity for secure transactions. Exchange of data between the client and server in such secure transactions is said to use the Secure Sockets Layer (SSL).

SSL uses 2 types of Certificates:
User certificates
These are Certificates issued to servers or users to prove their identity in a public key/private key exchange.

Trusted certificates
These are Certificates representing entities whom you trust - such as certificate authorities who sign the user certificates they issue.


The main steps for setting up SSL on the Middle Tier are:

Method 1

Set Your Environment.
Create a wallet.
Create a Certificate Request.
Submit the Certificate Request to a Certifying Authority
Import your Server Certificate to the Wallet.
Update the JDK Cacerts File
Update the Context File.
Run Autoconfig.
Restart the middle tier services.


Method 2

User Create or Converting Existing Certificates

$INST_TOP/ora/10.1.3/.env

cd $INST_TOP/certs/Apache

Backup the existing wallet files

Creating user Certificates

Pls See the Post Creating User Certificates.

(OR)

Copy server.key, server.crt, and ca.crt to the $INST_TOP/certs/Apache directory.(Converting Existing Certificates)


$ORACLE_HOME/Apache/Apache/bin/ssl2ossl -cert ./server.crt -key ./server.key -cafile ./ca.crt -wallet . -ssowallet yes

cat ca.crt >> $ORACLE_HOME/sysman/config/b64InternetCertificate.txt

cd $OA_JRE_TOP/lib/security directory
Backup the existing cacerts file.
Copy your ca.crt file to this directory
Add your Apache ca.crt to cacerts:
keytool -import -alias ApacheRootCA -file ca.crt -trustcacerts -v -keystore cacerts

Change the Context File.

$echo $CONTEXT_FILE
/apps/oracle/VIS/inst/apps/VIS_sys33/appl/admin/VIS_sys33.xml

Run adautocfg.sh script in the Middle Tier $ADMIN_SCRIPTS_HOME directory

Restart Middle Tier .

Note:376700.1 Enabling SSL in Release 12