1 - Jamie's Blog



How to setup SSL for LDAP with Oracle Wallet Manager

This Document Assumes that you have already setup the Oracle Client and the PeopleSoft Directory Connectivity test is working on non-SSL port. If this is not the case, please refer to the GSC Resolution 201034509

1. Launch you Orale Wallet Manager.

[pic]

2. Create a new wallet.

[pic]

3. Set the password for the wallet. For instance, set it to peoplesoft1.

[pic]

4. Click No when prompted for requesting certificate. We are going to import the CA cert and LDAP Server cert.

[pic]

5. Clean up existing certificates

[pic]

6. Import the CA certificate that you created for your LDAP server. Go to Operations > Import Trusted Certificate

[pic]

7. Click OK to select a file

[pic]

8. Select the file for CA certificate and click open

[pic]

9. Now, you will see a new entry for your root CA certicate

[pic]

12. Save the Wallet

[pic]

13. You will be prompted for the location to save the wallet, let us put it under c:\wallet for this demostration.

[pic]

14. You can see a file called ewallet.p12 file under c:\wallet. We will need this file for the SSL connection in PeopleSoft.

[pic]

15. Test the connectivity using secured port with LDAPSEARCH provided by Oracle Client installation. You can find it under $ORACLE_HOME\BIN (eg. c:\oracle\product\10.2.0\Client_1\BIN)

ldapsearch -h CWONG4060503 -p 636 -W "file:c:\wallet" -P peoplesoft1 -U 2 -D "cn=Directory Manager" -w password -b "dc=peoplesoft,dc=com" "uid=CWONG"

[pic]

16. Migrate the ewallet.p12 to your PeopleSoft Applicate Server. We will put this under Application Server Domain. Then launch the Application Designer and Open LDAP_BIND and LDAP_SEARCH. Go to setting tabs and update SSL_DB and SSL_DBPW. In our demonstration, SSL_DBPW is peoplesoft1.

[pic]

[pic]

................
................

In order to avoid copyright disputes, this page is only a partial summary.

Google Online Preview   Download