Using Certauthenticator In Compatibility Security - BEA WebLogic Server 7 Upgrade Manual

keytool -import -trustcacerts -alias
file that contains the trusted CA>
-storepass
The trusted certificate authority shipped with WebLogic Server is located in
WL_HOME/server/lib/cacerts
certificate authority that is shipped with WebLogic Server to a keystore:
keytool -import -trustcacerts -alias
file that contains the trusted CA>
-storepass changeit
For more information about
http://java.sun.com/products/jdk/1.2/docs/tooldocs/solaris/keytool.html.
The
jre/lib/security/cacerts
JDK's trusted CA keystore and not specify the command-line argument, or you can
create your own trusted CA keystore and point to it with the argument.
For two-way SSL or mutual authentication, in addition to performing the previous two
steps on the client side, do either of the following steps on the server side:
Add
to the server command line.
where
OR
Set the
provider.
If you do not load the trusted CA certificate into the trusted CA Keystore, you may
have problems using the secure port.

Using CertAuthenticator in Compatibility Security

In WebLogic Server 7.0, the CertAuthenticator is called first, before any
username/password authentication. Because this is a change in behavior from
WebLogic Server 6.x, a CertAuthenticator written for WebLogic Server 6.x may need
to change if clients used both two-way SSL and they supplied a username and
password for security credentials.
<your trusted CA Keystore password>
trustedCAKeyStore
-Dweblogic.security.SSL.trustedCAKeyStore=absoluteFilename
absoluteFilename
RootCAKeyStoreLocation
-keystore <
. Use the following command to add the trusted
-keystore WL_HOME/server/lib/cacerts
, see SUN's website at
keytool
command-line argument defaults to the JDK's
keystore for clients. You can add your CAs to the
is the name of the trusted CA Keystore
attribute when configuring a Keystore
BEA WebLogic Server 7.0 Upgrade Guide
Upgrading Security
<some alias name>
-file <
the trusted CA keystore>
<some alias name>
-file <
the
the
1-13