SSL Certificate for WebLogic CA Singed


 SSL Certificate for WebLogic

CA Singed Cert:

Create a key store database:

[root@localhost]# /opt/java/bin/keytool -genkey -alias lac -keystore key_weblogic.jks -storetype jks -keypass changeit -storepass changeit

What is your first and last name?

 [Unknown]: www.vijayarathinam.com

What is the name of your organizational unit?

 [Unknown]: IT

What is the name of your organization?

 [Unknown]: ITO

What is the name of your City or Locality?

 [Unknown]: Chennai

What is the name of your State or Province?

 [Unknown]: TN

What is the two-letter country code for this unit?

 [Unknown]: IN

Is CN=www.vijayarathinam.com, OU=IT, O=ITO, L=Bengaluru, ST=KA, C=IN correct?

 [no]: yes

 

To create a Certificate Signing Request:

[root@localhost]# /opt/java/bin/keytool -certreq -alias vijay -keystore key_weblogic.jks -file lac_certreq.csr

Enter keystore password: 

[root@localhost]# ls vijay_certreq.csr

lac_certreq.csr

[root@localhost]


Email this to your third party CA:

Once you get a reply back from the CA, you need to use this below command and import them to your key store. 


Import a root or intermediate CA certificate to an existing Java keystore

keytool -import -trustcacerts -alias root -file vijayroot.crt -keystore key_weblogic.jks


Import a signed primary certificate to an existing Java keystore

keytool -import -trustcacerts -alias lac -file vijay.crt -keystore key_weblogic.jks


Overall Information on the keytool:

CSR -> Certificate signing request.

CRT -> Certificate.


To view a keystore file which you have created:

[root@localhost utils]# /opt/java/bin/keytool -list -v -keystore key_weblogic.jks 

Enter keystore password: 

Keystore type: JKS

Keystore provider: SUN

Your keystore contains 1 entry

Alias name: vijay

Creation date: Oct 11, 2024

Entry type: PrivateKeyEntry

Certificate chain length: 1

Certificate[1]:

Owner: CN=www.vijayarathinam.com, OU=IT, O=ITO, L=Bengaluru, ST=KA, C=IN

Issuer: CN=www.vijayarathinam.com, OU=IT, O=ITO, L=Bengaluru, ST=KA, C=IN

Serial number: 54396f7a

Valid from: Sat Oct 11 23:27:14 IST 2024 until: Fri Jan 09 23:27:14 IST 2025

Certificate fingerprints:

 MD5: D4:B7:DC:1A:61:B5:F6:C4:D4:1A:0D:23:55:58:F1:E2

 SHA1: F4:2E:47:07:97:0F:41:A4:CE:E9:2B:73:3A:2A:1D:4B:46:F7:A1:5B

 Signature algorithm name: SHA1withDSA

 Version: 3

*******************************************

*******************************************



Deleting a key from the key store (use the alias name):

/opt/java/bin/keytool -delete -alias vijay -keystore key_weblogic.jks 


Exporting a Public Certificate from a keystore:

/opt/java/bin/keytool -export -alias vijay -file vijay.crt -keystore key_weblogic.jks


Changing the keystore password:

/opt/java/bin/keytool -storepasswd -new new_storepass -keystore key_weblogic.jks


Working with Trust store:

List Trusted CA Certs

/opt/java/bin/keytool -list -keystore /opt/Oracle/Middleware/Oracle_Home/wlserver/server/lib/cacerts


Import New CA into Trusted Certs

keytool -import -trustcacerts -file /path/to/ca/ca.pem -alias CA_ALIAS -keystore /opt/Oracle/Middleware/wlserver_12/server/lib/cacerts




Comments

Post a Comment

Popular posts from this blog

SSL certificate in WebSphere Application Server

  Here are the step-by-step instructions for renewing an SSL certificate in WebSphere Application Server: 1. Generate a Certificate Signing Request (CSR): * Locate your existing private key and note its location. * Open a command prompt or terminal and navigate to the WebSphere Application Server installation directory. * Run the following command to generate a new CSR: php Copy code keytool -certreq -keyalg RSA -alias < alias_name > -file < csr_file_path > -keystore < keystore_file_path > Replace <alias_name> with the alias of the private key entry, <csr_file_path> with the path where you want to save the CSR file, and <keystore_file_path> with the path to your keystore file. 2. Submit the CSR to a Certificate Authority (CA): * Go to your chosen CA's website or portal and navigate to the certificate renewal section. * Follow the CA's instructions for submitting a CSR and complete any required validation steps. * Submit the CSR fil...
Read more

Enabling WebSphere Global Security using DMGR Console

Image
  How To Enable WebSphere Global security? 1. Login to DMGR console -> Go to Security -> Global security -> Security Configuration Wizard -> Specify extent of protection -> Select user repository >Configure federated repository ->Summary -> Review -> save Step:1 Login to DMGR console. Step:2 Click the Security Button and Under Security Click on the Global Security and   Follow  Blow Step Step:3 Click The Security Configuration Wizard and Click Next Button Step:4 Click check box to Enable to Application Security and Click Next Button Under User Repository there are four types.  1. Federated repositories 2. Standalone LDAP registry 3. Local operating system 4. Standalone custom registry Step:5 Select user repository to enable Federated repositories and Click Next Button Step:6 Provide User name and password respective Check box And Click Next Button Step:7 On Summary verify and the given details are as per requirement and then click Fini...
Read more

Automating JBoss Installation on AWS EC2 Instance with User Data Script

  This script automates the installation and configuration of JBoss EAP on an AWS EC2 instance, ensuring that all necessary components are installed, configured, and managed as a service. By using this script as user data when launching an EC2 instance, you can streamline the deployment of JBoss EAP in your environment The Script Here's the complete script: #!/bin/bash # Create directory for JBoss packages sudo mkdir -p /opt/jboss/package # Sync JBoss package from S3 aws s3 sync s3://jboss-package /opt/jboss/package # Ensure that your Yum repository metadata is up to date sudo yum clean all sudo yum makecache # Install JAVA 1.8 (Amazon Corretto) sudo yum -y install java-1.8.0-amazon-corretto.x86_64 # Update the system sudo yum -y update # Change to the JBoss package directory cd /opt/jboss/package # Verify that the installer and XML configuration files exist if [ -f "/opt/jboss/package/jboss-eap-7.4.0-installer.jar" ] && [ -f "/opt/jboss/package/auto.xml...
Read more