Configuring SSL Between the Apache HTTP Server Plug-In and WebLogic Server

Using SSL with Apache Plug-in

You can use the SSL protocol to protect the connection between the Apache HTTP Server Plug-In and WebLogic Server.

The SSL provides confidentially and integrity to the data passed between the Apache HTTP Server Plug-In and WebLogic Server.

The Apache HTTP Server Plug-In does not use the transport protocol (http or https) specified in the HTTP request (usually by the browser) to determine whether or not the SSL protocol is used to protect the connection between the Apache HTTP Server Plug-In and WebLogic Server.

Although two-way SSL can be used between the HTTP client and Apache HTTP server, note that one-way SSL is used between Apache HTTP Server and WebLogic Server.


Configuring SSL Between the Apache HTTP Server Plug-In and WebLogic Server

To use the SSL protocol between Apache HTTP Server Plug-In and WebLogic Server::

1. Configuring WebLogic Server for SSL.

2. Configure the WebLogic Server SSL listen port.

3. In the Apache Server, set the WebLogicPort parameter in the httpd.conf file to the WebLogic Server SSL listen port configured in Step 2.

4. In the Apache Server, set the SecureProxy parameter in the httpd.conf file to ON.

5. Set any additional parameters in the httpd.conf file that define information about the SSL connection. Forr a complete list of the SSL parameters that you cab configure for the plug-in.



Issues with SSL-Apache Configuration

These known issues arise when you configure the Apache plug-in to use SSL:

  . To prepare the plugin configuration, double click the lock and go to the certificates path:
     * Select the root CA (at the top)

     * Display it

     * Detail and then copy this certificate to a file using the Coded "Base

       64 X509" option

     * Save the file, for example, to ýMyWeblogicCAToTrust.cerý (which is also a PEM file)

  . The PathTrim parameter must be configured inside the <Location> tag.
 
    The following configuration is incorrect:

<Location /weblogic>
SetHandler weblogic-handler
</Location>

<IfModule mod_weblogic.c>
WebLogicHost localhost
WebLogicPort 7001
PathTrim /weblogic
</IfModule>

The following configuration is correct setup:

<Location /weblogic>
SetHandler weblogic-handler
PathTrim /weblogic
</Location>

  . Thee Include directive does not work with Apache SSL. You must configure all parameters directly in the httpd.conf file. Do not use the following configuration when using SSL:

    <IfModule mod_weblogic.c>
     MatchExpression *.jsp
     Include weblogic.conf
    <IfModule>

  . The current implementation of the WebLogic Server Apache Plug-In does not support the use of multiple certificate files with Apache SSL.





Possible Causes of Connection Failures

Failure of the WebLogic Server host to respond to a connection request could indicate the following problems:

 . Physical problems with the host machine

 . Network problems

 . Other server failures

 Failure of all WebLogic Server instances to respond could indicate the following problems:

 . WebLogic Server is not running or is unavailable

 . A hung server

 . A database problem

 . An application-specific failure