|
Attribute
|
Description
|
Range of Values
|
Default Value
|
|
Enabled
|
This attribute enables server-to-server SSL connections. It is disabled to override automatic SSL between servers.
|
Boolean
True = selected
False = not selected
|
Selected
|
|
Listen Port
|
This attribute specifies the dedicated port on which WebLogic Server listens for SSL connections.
|
Valid listen port
|
7002
|
|
Server Key File Name
|
The name of the private key file for WebLogic Server.
|
String
|
config/mydomain/demokey.pem
|
|
Server Certificate File Name
|
This attribute designates the name of the private key file for your WebLogic Server.
|
String
|
config/mydomain/democert.pem
|
|
Server Certificate Chain File Name
|
This attribute designates the full directory location of the digital certificate for your WebLogic Server.
|
String
|
config/mydomain/ca.pem
|
|
Client Certificate Enforced
|
This attribute is set to true to enforce the client certificate.
|
Boolean
True = selected
False = not selected
|
Not Selected
|
|
Trusted CAFile Name
|
This attribute designates the name of the file that contains the digital certificate for the certificate authority trusted by WebLogic Server.
|
This attribute can be a file that contains a single digital certificate or a chain of digital certificates for certificate authorities.
|
trusted-ca.pem
|
|
Certificate Authenticator
|
This attribute specifies the certificate authenticator to be used to determine the validity of the certificate.
|
Valid authenticator
|
Null
|
|
Key Encrypted
|
Specifies whether or not the private key for the WebLogic Server has been encrypted with a password.
- If the attribute is set to true, the private key requires a pass phrase be supplied to use the key.
- If the attribute is set to false, the private key is unencrypted and may be used without providing a pass phrase.
|
Selected = true
Not Selected = false
|
Not Selected
|
|
Use Java
|
This attribute enables the use of native Java libraries. WebLogic Server provides a pure-Java implementation of the SSL protocol. Native libraries enhance the performance for SSL operations on the Solaris, Windows NT, and IBM AIX platforms.
|
Selected = true
Not Selected = false
|
Selected
|
|
Handler Enabled
|
Specifies whether or not WebLogic Server rejects SSL connections that fail client authentication for one of the following reasons:
- The requested client digital certificate was not furnished.
- The client did not submit a digital certificate
- The digital certificate from the client was not issued by a certificate authority specified by the Trusted CA Filename attribute.
By default, the SSL Handler allows one WebLogic Server to make outgoing SSL connections to another WebLogic Server. For example, an EJB in WebLogic Server may open an HTTPS stream on another web server. With the HandlerEnabled attribute enabled, WebLogic Server acts as a client in an SSL connection.
|
Selected = true
Not Selected = false
|
Selected
|
|
Export Key Lifespan
|
This attribute specifies the number of times WebLogic Server can use an exportable key between a domestic server and an exportable client before generating a new key. The more secure you want WebLogic Server to be, the fewer times the key should be used before generating a new one.
|
The maximum value is specified as java.lang.Integer.MAX_VALUE. The minimum value is 1.
|
500
|
|
Login Timeout Millis
|
This attribute sets the number of milliseconds that WebLogic Server should wait for an SSL connection before timing out. SSL connections take longer to negotiate than regular connections. If clients are connecting over the Internet, raise the default number to accommodate additional network latency. A value of 0 disables the attribute.
|
The maximum value is specified as java.lang.Integer.MAX_VALUE. The minimum value is 1.
|
25000
|
|
Certificate Cache Size
|
This attribute sets the number of digital certificates held that have not been redeemed by tokens.
|
The maximum value is specified as java.lang.Integer.MAX_VALUE. The minimum value is 1.
|
3
|
|
Hostname Verification Ignored
|
This attribute disables the installed Hostname Verifier when WebLogic Server is acting as a client to another WebLogic Server.
|
|
Not Selected
|
|
Hostname Verifier
|
This attribute sets the name of the Java class that implements the Hostname Verifier interface.
|
String
|
Null
|
|
Two-way SSL Enabled
|
This attribute allows the user to set Two-way SSL in order to make mutual authentication optional. If a client certificate is presented then mutual authentication is done, if not, the connection is accepted without requiring a client certificate.
|
Boolean
Selected = Two-way SSL is enabled.
Not Selected = Two-way SSL is disabled.
|
Not Selected
|