Configuring SSL with Oracle HTTP Server

Set ths following environment varibles

export SCRIPT_TOP=$COMMON_TOP/admin/scripts/sar_sys45

export APACHE_TOP=/oracle/app/apps/sarora/iAS/Apache

export OPENSSL_TOP=/oracle/app/apps/sarora/iAS/Apache/open_ssl

export OPENSSL_CONF=$OPENSSL_TOP/bin

==============================

Edit in XML file ===> APPL_TOP/admin

set the %s_url_protocol variable to https
set the %s_local_url_protocol variable to https
set the %s_webentryurlprotocol variable to https
set the %s_frmConnectMode variable to https
set the %s_webssl_port variable to the Apache SSL port required
set the %s_active_webport variable to the same value as that for the %s_webssl_port variable
set the %s_webport variable to the same value as that for the %s_webssl_port variable

set the %s_web_ssl_directory variable to point to the full directory path of the directory that is to contain the .crt and

.key files that you are using for Apache eg <$COMMON_TOP>/admin/certs/apache

set %s_apps_portal_url variable to https

=============================
Using self signed certificate with Applications genereted by OpenSSL for WebSever


$APACHE_TOP/open_ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout cakey.pem -out cacert.pem -days 10000 -config openssl.cnf

$APACHE_TOP/open_ssl/bin/openssl req -nodes -new -x509 -keyout apache.key -out apache_request.pem -days 3650 -config openssl.cnf

$APACHE_TOP/open_ssl/bin/openssl x509 -x509toreq -in apache_request.pem -signkey apache.key -out apache.csr

$APACHE_TOP/open_ssl/bin/openssl ca -config openssl.cnf -policy policy_anything -out apache.crt -infiles apache.csr


cp apache.crt $COMMON_TOP/admin/certs/apache/ssl.crt/server.crt
cp apache.key $COMMON_TOP/admin/certs/apache/ssl.key/server.key
cp cacert.pem $COMMON_TOP/admin/certs/apache/ssl.crt/ca.crt
cp $APACHE_TOP/Apache/conf/ssl.crt/ca-bundle.crt $COMMON_TOP/admin/certs/apache/ssl.crt


openssl s_client -connect sys45.doyen.in:443



===========================

FRM-92050 Failed to connect to the server

If you got above forms error, please run the below syntax


txkrun.pl -script=SetAdvCfg -appsuser=apps -appspass=apps -enable=FormsLsnrServlet


[applmgr@sys43 TEST_sys43]$ txkrun.pl -script=SetAdvCfg -appsuser=apps -appspass=apps -enable=FormsLsnrServlet



++++ Configuration has completed successfully!

For additional information, review the following output file:

/oracle/app/apps/testcomn/admin/out/TEST_sys43/txkSetAdvCfg.xml


Then after sucessfully completed txkrun.pl, run the autoconfig.


[applmgr@sys43 TEST_sys43]$ adautocfg.sh

==============================


After complete the autoconfig, bounce the apps server.
Now start the apps server and start this appache scripts from root user (adapcctl.sh start)


[root@sys43 ~]# sh /oracle/app/apps/testcomn/admin/scripts/TEST_sys43/adapcctl.sh start

adapcctl.sh version 115.54

Apache Web Server Listener is not running.
Starting Apache Web Server Listener (dedicated HTTP) ...
Apache Web Server Listener (PLSQL) is not running.
Starting Apache Web Server Listener (dedicated PLSQL) ...

adapcctl.sh: exiting with status 0
=============================

https://.
=============================

System: Connection reset by peer (errno: 104)
Comment SSLCertificateChainFile in httpd.conf.


=============================

Reference Documents ID

http://forums.oracle.com/forums/thread.jspa?messageID=2307995


Running Configuration Wizards from the Command Line in Oracle Applications 11i

Metalik id : 277574.1

Subject: Troubleshooting SSL with Oracle Applications 11i
Doc ID: Note:300969.1

================================

2 comments:

Microsoft Office 2007 said...

NEVERTHELESS, THE CIVIL LAW is and must be neutral about who has a more noble or rewarding faith. The breakaway parishes ought to win every Office 2010facet of the lawsuit not becauseMicrosoft Office 2010 their beliefs or their politics are better, Microsoft wordbut because both lawOffice 2007and equity, along with common sense, are on Microsoft Officetheir side.Microsoft Office 2007 Not only does Virginia state law (the Division Statute)Office 2007 keyexplicitly apply to just such a Office 2007 downloadsituation as now exists, but the history Office 2007 Professionalespecially of The Falls Church argues against the claims of Outlook 2010the Virginia Diocese with which theyMicrosoft outlookhave disassociated.Microsoft outlook 2010First, The Falls Church wasWindows 7 founded, formed, and developed long before the diocese, or the national Episcopal Church, even existed.

Sridevi Koduru said...

Regards
Sridevi Koduru (Senior Oracle Apps Trainer Oracleappstechnical.com)
LinkedIn profile - https://in.linkedin.com/in/sridevi-koduru-9b876a8b
Please Contact for One to One Online Training on Oracle Apps Technical, Financials, SCM, Oracle Manufacturing, OAF, ADF, SQL, PL/SQL, D2K at sridevikoduru@oracleappstechnical.com | +91 - 9581017828.