Posts

Showing posts from 2019

Weblogic AdminServer with SSL configurations

Steps to enable SSL configurations for all Admin Server tasks:  1) Enable SSL port using weblogic Admin console        Home >Summary of Servers >adminserver > General > SSL Listen Port Enabled 2) Upload the custom SSL keystore certificate in Keystores  tab section:       Keystores: Custom Identity and Custom Trust       Custom Identity Keystore: <path to keystore>       Custom Identity Keystore Passphrase: <password> 3) Update the Truststore alias and passwords in SSL tab section      Identity and Trust Locations: Keystore      Private Key Location: from Custom Identity Keystore      Private Key Alias: <alias name>      Private Key Passphrase: <password> 4) Update the custom wlctl or WLST command scripts to use SSL protocol instead of non-ssl protocol.    ...

Apache mod rewrite examples

Scenario 1:  To extract the specific word from QUERY_STRING in a URL. RewriteCond %{QUERY_STRING} ^(.*)matching-word=([^&]+)&?(.*)$ RewriteRule ^(.*)request-url$  https://%{HTTP_HOST}/some/path/value=%2 [NE,QSA,PT,L] In the above scenario, we would like to extract the value after <matching-word> string and before the & or ? charecters in the QUERY_STRING. Example:  Source url:  https://mydomain.com/request/url/test1?myquery&string= value1 &test123 Destination url:   https://mydomain.com/some/path/value= value1

Extract PEM (Private Key) & CERT from PFX file

Prerequisite : Login into any Linux based server and make sure it has openssl installed and copied pfx file in some location.  Run below command to extract the PEM (Private Key). openssl pkcs12 -in <filename>.pfx -nocerts -nodes -out domaincert.pem Run below command to extract certificate. openssl pkcs12 -in <filename>.pfx -clcerts -nokeys -out domaincert.crt

Apache Disable Outdated SSL/TLS versions

Following configurations will get you high security cipher SSL configurations in Apache by updating the ssl config file. ##To disable TLS 1.0/1.1 and SSL 2.0/3.0 SSLProtocol all -SSLv2 -SSLv3 -TLSv1 -TLSv1.1 ## To enable only high degree of protection SSLCipherSuite HIGH:!aNULL:!MD5:!3DES ## To use server cipher preferences instead of client preferences SSLHonorCipherOrder on

Weblogic 12c & Apache 2.4 troubleshooting

Error -   libonssys.so: cannot open shared object file : httpd: Syntax error on line 355 of /etc/httpd/conf/httpd.conf: Syntax error on line 1 of /data/apps/apache2/conf.d/vhost.conf: Cannot load /etc/httpd/modules/mod_wl_24.so into server: libonssys.so: cannot open shared object file: No such file or directory Solution: 1) Copy all supported  Download Oracle WebLogic Web Server Plug-Ins 12c from Oracle website : http://www.oracle.com/technetwork/middleware/webtier/downloads/index-jsp-156711.html Extract the downloaded archive and find (correct file according to your architecture) mod_wl_24.so (This is for Apache2.4.x) & libonssys.so & libonsssl.so & libdms2.so copy into /etc/httpd/modules/ folder. 2) Set the  LD_LIBRARY_PATH inside the  /etc/sysconfig/httpd file.  echo $ LD_LIBRARY_PATH first and copy paste the same in httpd file along with  /etc/httpd/modules location. Example in my case: File:  /etc/syscon...