Upgrading Security

keytool -import -trustcacerts -alias<some alias name> -file<the file that contains the trusted CA> -keystore <the trusted CA keystore> -storepass<your trusted CA Keystore password>

The trusted certificate authority shipped with WebLogic Server is located in

WL_HOME/server/lib/cacerts. Use the following command to add the trusted certificate authority that is shipped with WebLogic Server to a keystore:

keytool -import -trustcacerts -alias<some alias name> -file<the file that contains the trusted CA> -keystoreWL_HOME/server/lib/cacerts -storepasschangeit

For more information about keytool, see SUN's website at

http://java.sun.com/products/jdk/1.2/docs/tooldocs/solaris/keytool.html.

The trustedCAKeyStore command-line argument defaults to the JDK's jre/lib/security/cacerts keystore for clients. You can add your CAs to the JDK's trusted CA keystore and not specify the command-line argument, or you can create your own trusted CA keystore and point to it with the argument.

For two-way SSL or mutual authentication, in addition to performing the previous two steps on the client side, do either of the following steps on the server side:

„Add -Dweblogic.security.SSL.trustedCAKeyStore=absoluteFilename

to the server command line.

where absoluteFilename is the name of the trusted CA Keystore

OR

„Set the RootCAKeyStoreLocation attribute when configuring a Keystore provider.

If you do not load the trusted CA certificate into the trusted CA Keystore, you may have problems using the secure port.

Using CertAuthenticator in Compatibility Security

In WebLogic Server 7.0, the CertAuthenticator is called first, before any username/password authentication. Because this is a change in behavior from WebLogic Server 6.x, a CertAuthenticator written for WebLogic Server 6.x may need to change if clients used both two-way SSL and they supplied a username and password for security credentials.

BEA WebLogic Server 7.0 Upgrade Guide

1-13

Page 25
Image 25
BEA 7 manual Using CertAuthenticator in Compatibility Security

7 specifications

BEA 7, a significant product from BEA Systems, represents a cornerstone in enterprise application integration and service-oriented architecture. As a comprehensive solution for developing, deploying, and maintaining enterprise-level applications, it brings a host of features that cater to the needs of businesses seeking agility and reliability in their IT infrastructure.

One of the standout characteristics of BEA 7 is its robust support for service-oriented architecture (SOA). This enables businesses to create applications as loosely coupled services, facilitating easier integration and scalability. The platform's emphasis on middleware technologies allows organizations to streamline their IT operations, enhance interoperability, and reduce time to market for new applications.

BEA 7 includes a powerful application server that provides a reliable runtime environment for managing applications. Offering high availability and scalability, it can successfully handle the demands of high-volume transactions while ensuring optimal performance. The built-in clustering capability ensures that applications can remain operational even in the event of server failures, which is critical for mission-critical applications.

Another notable feature of BEA 7 is its capabilities for web services. With support for industry standards such as XML, SOAP, and WSDL, users can easily expose and consume services across diverse platforms. This allows businesses to take full advantage of an interconnected ecosystem and simplifies the process of integrating various applications and data sources.

Security is a paramount consideration in BEA 7, which includes strong authentication, authorization, and encryption mechanisms to protect sensitive data. The platform's comprehensive security features ensure compliance with regulatory requirements and protect against potential threats, which is particularly important for sectors handling sensitive information, such as finance and healthcare.

BEA 7 also embraces innovative technologies such as the Java EE platform, facilitating the development of cross-platform applications. The integrated development environment (IDE) offers numerous tools for developers, making it easier to design, debug, and deploy applications. Developers benefit from built-in support for commonly used frameworks and libraries, improving productivity and enabling rapid application development.

In summary, BEA 7 stands out as a powerful enterprise solution, distinguished by its support for SOA, robust application server capabilities, web services integration, strong security features, and a developer-friendly environment. These attributes make BEA 7 an essential tool for organizations aiming to enhance their operational efficiency and adapt to the increasingly dynamic business landscape.