How To Create Self Certificate In EBS R12 and Import Certificate in Wallet

How To Create Self Certificate In EBS R12 and Import Certificate in Wallet

================================

First -

1. Creating a Wallet

    Verify the location of the Web SSL Directory:
        grep s_web_ssl_directory $CONTEXT_FILE
    Navigate to this directory which will have Apache and opmn sub-directories.
    Change to the Apache sub-directory.
    Backup any existing wallets (demo certificates are included in Release 12).
    Create your new wallet:
    orapki wallet create -wallet . -auto_login -pwd <password>

    "-wallet ." tells orapki that you want to create the wallet in the current directory.
                        You can also specify the full path to any directory where you wish to
                         create a wallet.
      " -auto_login" tells orapki that you want to create cwallet.sso which is an obfuscated copy
                             of ewallet.p12
                             With auto login enabled - processes submitted by the OS user who created
                             the wallet will not need to supply the password to access the wallet.

You should now see two wallet files in your directory:
     cwallet.sso
     ewallet.p12

This is for test server only. if you dont want to secure you link

Section 8: Self-Signed Testing Certificates

    SELF-SIGNED CERTIFICATES ARE NOT SECURE!!!
THEY SHOULD NOT BE USED IN A PRODUCTION ENVIRONMENT!!!

If you wish to self-sign your certificates for use in a TESTING Environment enter the following command all on 1 line substituting the appropriate parameters (in bold) for your instance:

orapki wallet add -wallet . -dn "CN=server.us.oracle.com,OU=Unit,O=Org,L=Orlando,ST=Florida,C=US" -keysize 2048 -self_signed -validity 3650 -pwd welcome1

Your wallet is now ready for use in your testing environment - do not use this wallet in a production environment.
Section 9: Converting Existing Certificates

If you have existing un-expired certificates from a previous implementation of SSL they can be converted and imported into a Release 12 wallet using the tools:
     SSL2OSSL (Unix)
     SSLCONVERT (Windows NT/2000)

Copy your server.key, server.crt, and ca.crt to the wallet directory and issue the command:

    $ORACLE_HOME/Apache/Apache/bin/ssl2ossl -cert ./server.crt -key ./server.key -cafile ./ca.crt -wallet . -ssowallet yes

Section 10: Adding and Removing the Auto_Login Feature

To enable auto_login:

    navigate to the wallet directory and use the same command used in Section 1 to create the wallet:
         orapki wallet create -wallet . -auto_login -pwd <password>

To disable auto_login you must use the Oracle Wallet Manger GUI interface:

    Navigate to the wallet directory.
    Start the Oracle Wallet Manager as a background process:
         owm &
    Open your existing wallet.
    Select Wallet from the menu bar.
    Deselect Auto Login.
      A message at the bottom of the window indicates that auto login is disabled.