You will receive an email
from EBIZID with the certificate pasted in the email (yourdomainname.crt).
When viewed in a text editor, your certificate will look something like the
following: -----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
When
you receive your certificates you need to store them in the "mydomain" directory.
| If you obtain a private
key file from a source other than the Certificate Request
Generator servlet, verify that the private key file is
in PKCS#5/PKCS#8 PEM format. |
To
use a certificate chain, append the additional PEM-encoded
digital certificates to the digital certificate that EBIZID
CA issued for the WebLogic Server. This is the intermediate
CA. The last digital certificate in the file chain will be
the GTECybertrust digital certificate that is self-signed (that
is, the rootCA certificate).
Configure WebLogic Server to use the SSL protocol, you need
to enter the following information on the SSL tab in the Server
Configuration window:
In the Server Certificate File Name field, enter the full directory location
and name of the digital certificate for WebLogic Server.
In the Trusted CA File Name field, enter the full directory location and name
of the digital certificate for EBIZID who signed the digital certificate of
WebLogic Server. In the Server Key File Name field, enter the full directory
location and name of the private key file for WebLogic Server.
Use the following command-line option to start WebLogic Server
. -Dweblogic.management.pkpassword=password
where password is the password defined when requesting the digital certificate.
Storing Private Keys and Digital Certificates
Once you have a private key and digital certificate, copy the private key file
generated by the Certificate Request Generator servlet and the digital certificate
you received into the mydomain directory. Private Key files and digital certificates
are generated in either PEM or Definite Encoding Rules (DER) format. The
filename extension identifies the format of the digital certificate file.
A PEM (.pem) format private key file begins and ends with the following lines,
respectively:
-----BEGIN ENCRYPTED PRIVATE KEY-----
-----END ENCRYPTED PRIVATE KEY-----
A PEM (.pem) format digital certificate begins and ends with the following
lines, respectively:
-----BEGIN CERTIFICATE-----
-----END CERTIFICATE-----
| Typically, the digital certificate
file for a WebLogic Server is in one file, with either
a .pem or .der extension, and the WebLogic Server certificate
chain is in another file. Two files are used because
different WebLogic Servers may share the same certificate
chain. |
| The first digital certificate in the certificate authority
file is the first digital certificate in the WebLogic Server's
certificate chain. The next certificates in the file are
the next digital certificates in the certificate chain.
The last certificate in the file is a self-signed digital
certificate that ends the certificate chain. A DER (.der)
format file contains binary data. WebLogic Server requires
that the file extension match the contents of the certificate
file. |
| If you are creating a file with
the digital certificates of multiple certificate authorities
or a file that contains a certificate chain, you must
use PEM format. WebLogic Server provides a tool for converting
DER format files to PEM format, and visa versa. |
Save your configuration
and restart the server. |
|
