Specifies the subject to use for the certificate.Ĭhange the value of the -dname argument so that it is suitable for your environment: Specifies the algorithm that should be used to generate the private key. The default name used by the server is server-cert. Specifies the name that should be used to refer to the certificate in the keystore. $ keytool -genkeypair -alias server-cert -keyalg rsa \ Generate a private key for the certificate, using the keytool command with the -genkeypair option. If this is not the case, the -port and -hostname options must be specified. The administration connector is listening on the default port (4444) and the dsconfig command is accessing the server running on the local host. The keytool utility is provided with the Java Runtime Environment (JRE). If it is not, either add it to your path or provide the complete path to it when invoking the commands. The Java keytool utility is in your path. Oracle Unified Directory is installed on the system on which you are working. Section 23.13, "Configuring Unlimited Strength Cryptography"Ģ3.1.1 To Accept SSL-Based Connections Using a Self-Signed Certificate Section 23.12, "Controlling Connection Access Using Allowed and Denied Rules"
Section 23.11, "Debugging SSL or TLS Using Java Debug Information" Section 23.10, "Debugging SSL Using OpenSSL s_client Test Utility"
Section 23.9, "Testing SSL, StartTLS, and SASL Authentication With ldapsearch" Section 23.8, "Configuring Kerberos and the Oracle Unified Directory Server for GSSAPI SASL Authentication" Section 23.7, "Configuring SASL Authentication" Section 23.6, "Using SASL Authentication" Section 23.5, "Configuring SSL and StartTLS for LDAP and JMX" Section 23.4, "Configuring Certificate Mappers" Section 23.3, "Configuring Trust Manager Providers" Section 23.2, "Configuring Key Manager Providers"
Section 23.1, "Getting SSL Up and Running Quickly" This chapter covers the following topics:
The topics in this section describe these mechanisms, and how to configure them.įor information about securing access to directory data, see Chapter 25, "Controlling Access To Data".įor information about configuring security between the proxy and the directory server or data source, see Chapter 24, "Configuring Security Between the Proxy and the Data Source". Oracle Unified Directory provides several mechanisms to secure traffic between the client and the server. 23 Configuring Security Between Clients and Servers
0 kommentar(er)
