Friday, January 7, 2011

WebLogic - Enable JSSE SSL

Older WebLogic versions (10.3.2 and before) use "Certicom SSL" implementation, which does not trust certificates stronger that 128-bit. There is a known issue with WebLogic not being able to trust stronger signature certificates and you can find more details at http://webadm1n.blogspot.com/2010/04/oracle-jrockit-jdk-recent-cacerts.html

With WebLogic 10.3.3, we have "JSSE SSL" implementation, which trusts more stronger certificates. To enable JSSE SSL, please follow the below steps for all your managed servers.

1. Login to your admin console

2. Click "Environment" -> "Servers" -> "ManagedServerName" -> "Configuration" -> "SSL" -> "Advanced"

3. Select "Use JSSE SSL"

4. Click "Save"

5. Restart the managed server(s)
Posted by at
Labels: , , , , , , , , , , , , ,

8 comments:

  1. allinoneJune 16, 2011 at 9:18 PM

    I am facing very wierd issue. When I select use jsse . it will not work but when i didn't use jssse. SSL will work. any updates???

    ReplyDelete
  2. sudhiAugust 8, 2011 at 4:44 AM

    we use 10.3.0 weblogic server and recently CA has moved to SHA256RSA. hence weblogic is not supporting the signed certificate. cant we enable the jsse in weblogic server in 10.3.0 version itself.

    ReplyDelete
    Replies
    1. UnknownApril 29, 2014 at 12:19 AM

      Sudhi, Did JSSE worked for you with weblogic 10.3.0? Or you upgraded your weblogic along with jdk?

      Delete
    2. RaviMay 6, 2014 at 11:28 AM

      JSSE is available as option from 10.3.3 and above

      Delete
  3. Sachin MoreAugust 15, 2011 at 2:29 PM

    ABSOLUTELY AMAZING WORK!!!

    I have been trying to figure the issue with this, I was not able to for last couple of days and your efforts saved at last.

    ReplyDelete
  4. UnknownOctober 28, 2015 at 7:30 AM

    You can use below java options in 10.X version where JSSE option is not there
    -Djava.protocol.handler.pkgs=com.sun.net.ssl.internal.www.protocol
    -Dssl.SocketFactory.provider=com.sun.net.ssl.internal.SSLSocketFactoryImpl
    -DUseSunHttpHandler=true
    -Dweblogic.wsee.client.ssl.usejdk=true

    ReplyDelete
  5. UnknownOctober 13, 2016 at 9:44 AM

    This comment has been removed by the author.

    ReplyDelete

Subscribe to: Post Comments (Atom)