Configuring SSL with Oracle HTTP Server

Set ths following environment varibles

export SCRIPT_TOP=$COMMON_TOP/admin/scripts/sar_sys45

export APACHE_TOP=/oracle/app/apps/sarora/iAS/Apache

export OPENSSL_TOP=/oracle/app/apps/sarora/iAS/Apache/open_ssl

export OPENSSL_CONF=$OPENSSL_TOP/bin

==============================

Edit in XML file ===> APPL_TOP/admin

set the %s_url_protocol variable to https
set the %s_local_url_protocol variable to https
set the %s_webentryurlprotocol variable to https
set the %s_frmConnectMode variable to https
set the %s_webssl_port variable to the Apache SSL port required
set the %s_active_webport variable to the same value as that for the %s_webssl_port variable
set the %s_webport variable to the same value as that for the %s_webssl_port variable

set the %s_web_ssl_directory variable to point to the full directory path of the directory that is to contain the .crt and

.key files that you are using for Apache eg <$COMMON_TOP>/admin/certs/apache

set %s_apps_portal_url variable to https

=============================
Using self signed certificate with Applications genereted by OpenSSL for WebSever


$APACHE_TOP/open_ssl/bin/openssl req -x509 -newkey rsa:1024 -keyout cakey.pem -out cacert.pem -days 10000 -config openssl.cnf

$APACHE_TOP/open_ssl/bin/openssl req -nodes -new -x509 -keyout apache.key -out apache_request.pem -days 3650 -config openssl.cnf

$APACHE_TOP/open_ssl/bin/openssl x509 -x509toreq -in apache_request.pem -signkey apache.key -out apache.csr

$APACHE_TOP/open_ssl/bin/openssl ca -config openssl.cnf -policy policy_anything -out apache.crt -infiles apache.csr


cp apache.crt $COMMON_TOP/admin/certs/apache/ssl.crt/server.crt
cp apache.key $COMMON_TOP/admin/certs/apache/ssl.key/server.key
cp cacert.pem $COMMON_TOP/admin/certs/apache/ssl.crt/ca.crt
cp $APACHE_TOP/Apache/conf/ssl.crt/ca-bundle.crt $COMMON_TOP/admin/certs/apache/ssl.crt


openssl s_client -connect sys45.doyen.in:443



===========================

FRM-92050 Failed to connect to the server

If you got above forms error, please run the below syntax


txkrun.pl -script=SetAdvCfg -appsuser=apps -appspass=apps -enable=FormsLsnrServlet


[applmgr@sys43 TEST_sys43]$ txkrun.pl -script=SetAdvCfg -appsuser=apps -appspass=apps -enable=FormsLsnrServlet



++++ Configuration has completed successfully!

For additional information, review the following output file:

/oracle/app/apps/testcomn/admin/out/TEST_sys43/txkSetAdvCfg.xml


Then after sucessfully completed txkrun.pl, run the autoconfig.


[applmgr@sys43 TEST_sys43]$ adautocfg.sh

==============================


After complete the autoconfig, bounce the apps server.
Now start the apps server and start this appache scripts from root user (adapcctl.sh start)


[root@sys43 ~]# sh /oracle/app/apps/testcomn/admin/scripts/TEST_sys43/adapcctl.sh start

adapcctl.sh version 115.54

Apache Web Server Listener is not running.
Starting Apache Web Server Listener (dedicated HTTP) ...
Apache Web Server Listener (PLSQL) is not running.
Starting Apache Web Server Listener (dedicated PLSQL) ...

adapcctl.sh: exiting with status 0
=============================

https://.
=============================

System: Connection reset by peer (errno: 104)
Comment SSLCertificateChainFile in httpd.conf.

=============================

Reference Documents ID

http://forums.oracle.com/forums/thread.jspa?messageID=2307995


Running Configuration Wizards from the Command Line in Oracle Applications 11i

Metalik id : 277574.1

Subject: Troubleshooting SSL with Oracle Applications 11i
Doc ID: Note:300969.1

================================