Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>Found the problem. I've imported the StartSSL certificate incorrectly in our keystore. Also, I've specified "weblogic" as alias in the Weblogic console which is not the certificate but the public/private key pair. I'm using <a href="http://portecle.sourceforge.net/" rel="nofollow">Portecle</a> to edit the keystore.</p> <p>When I've noticed that I was probably using the wrong alias I've changed it to the alias of the certificate. This resulted in a Weblogic error:</p> <pre><code>Inconsistent security configuration, weblogic.management.configuration.ConfigurationException: No identity key/certificate entry was found under alias startssl-hostname in keystore keystore_StartSSL on server servername </code></pre> <p>In the end I've followed these steps to pack the certificate and private key in one PKCS#12 keystore. I've then imported that keystore into our java keystore using Portecle:</p> <ol> <li>Export the "weblogic" public/private key using Portecle as a PKCS#12 keystore.</li> <li><p>Extract the private key from this keystore using openssl:</p> <p>openssl pkcs12 -in weblogic.p12 -nocerts -out privatekey.pem</p></li> <li><p>Package the certificate and private key as a PKCS#12 keystore (<code>cert.p12</code>) using openssl:</p> <p>openssl pkcs12 -export -in cert.cer -inkey privatekey.pem -out cert.p12 -name cert -CAfile ca.pem -caname root</p></li> <li><p>Import <code>cert.p12</code> file into our java keystore using Portecle using "cert" as alias.</p></li> <li><p>Changed the Weblogic configuration to use the "cert" alias with the correct passphrase.</p></li> </ol> <p>And it worked!</p> <p>PS: I've added the <a href="http://www.oracle.com/technetwork/java/javasebusiness/downloads/java-archive-downloads-java-plat-419418.html" rel="nofollow">JCE unlimited strength policy</a> along the way since Portecle complained about this at one point.</p>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload