Oracle Unified Directory使用自签名证书接受 SSL 连接

java -version

which keytool

 

cd /u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/

 

 

 

keytool -genkeypair -alias host01-cert -keyalg rsa -dname "CN=host01.example.com,O=Example Company,C=GB" -keystore host01-keystore.jks -storetype JKS

 

keytool -selfcert -alias host01-cert -validity 1825 -keystore host01-keystore.jks -storetype JKS

 

 keytool -exportcert -alias host01-cert -file host01-cert.txt -rfc -keystore host01-keystore.jks -storetype JKS

 

keytool -importcert -alias host01-cert -file host01-cert.txt -keystore host01-truststore.jks -storetype JKS

 

 

./dsconfig -D "cn=Directory Manager" -j  /u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/keystore.pin -X -n set-key-manager-provider-prop \
> --provider-name JKS --set enabled:true --set "key-store-file:/u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/host01-keystore.jks" \
> --set "key-store-pin-file:/u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/keystore.pin"

 

./dsconfig -D "cn=Directory Manager" -j /u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/keystore.pin -X -n set-trust-manager-provider-prop \
> --provider-name JKS --set enabled:true --set trust-store-file:/u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/host01-keystore.jks

 

./dsconfig -D "cn=Directory Manager" -j /u03/app/oracle/config/domains/OUD_domain/asinst_1/OUD/config/key/keystore.pin -X -n set-connection-handler-prop \
> --handler-name "LDAPS Connection Handler" --set trust-manager-provider:JKS --set key-manager-provider:JKS \
> --set listen-port:1636 --set enabled:true