How to enable SSL in Oracle Weblogic

Here in this post, i will giving steps on how to enable SSL in weblogic which is installed on server “techserv01”

(1) First we need to create the keystore and create an certificate request

cd <JDK TOP>/bin
keytool -genkeypair -keyalg RSA -alias techserv01_key -keysize 2048 -keystore E:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01 -keypass jkstechserv01
keytool -certreq -alias techserv01_key -Keypass jkstechserv01 -keystore D:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01 -file D:\Oracle\WEB\techserv01.csr

Here techserv01_key is the private key alias

(2) Now we can take certificate request and get it signed from Certificate Provider.Once we receive the certificate, we can move ahead with the next steps

(3) Added the Certificate in the keystore

Add intermediate Certificate
keytool -importcert -alias CAInter -file D:\Oracle\WEB\interCA.cer -keystore D:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01
Add root Certificate
keytool -importcert -alias techserv01_key -file D:\Oracle\WEB\rootCA.cer -keystore D:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01
Add Server Certificate
keytool -importcert -alias techserv01_key -file D:\Oracle\WEB\techserv01.p7b -keystore D:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01 -keypass keytechserv01

(4) Creating custom trust store

keytool -import -file D:\Oracle\WEB\interCA.cer -alias CAInter -keystore D:\Oracle\WEB\myTrust.jks -storepass Oracle123
keytool -import -file D:\Oracle\WEB\rootCA.cer -alias root -keystore D:\Oracle\WEB\myTrust.jks -storepass Oracle123

(5) Verification

keytool -list -v -keystore D:\Oracle\WEB\WEBStore.jks -storepass jkstechserv01

java utils.ValidateCertChain -jks techserv01_key  D:\Oracle\WEB\WEBStore.jks

(6) Once keystore is prepared ,we can move to Oracle weblogic console to start the configuring SSL in weblogic

(a) Login to WebLogic Console

(b) click Lock and edit

Following screen will appear

(c) Click on Server to manage the properties of Manage server

(d) Select the server to be enabled for SSL and then click on SSL tab. Now Disable the HTTP port and Enable HTTPS port . The click Save

(e) Now go to keystore tab and And click on change

(f) Select Custom Identity and custom trust and then save

(g) Now below screen will appear

(h) Now fill the details and click Save

(h) Now following details needs to be filled

(i) Click on Advanced at the Bottom.
If you are using SHA256 certificate,  Click on JSSE SSL and Set hostname verification to None

(j) Now click save at the bottom and Then click on Replication tab and click on secure replication method

(k) Do final save.Now to finalize the server configuration by clicking release configuration

(7) And now you can restart the Managed server and check the SSL