Oracle SSL configuration and validation

1. How to Get Secure Web Services (SSL/HTTPS) & Oracle APEX Working
STEP 1: How to prepare your APEX Environment for secure web services - Introduction
1.APEX developers need to call secure (SSL) webservices
2.Need DB to allow external connection
3.Need to recognise / accept digital certificate
STEP 2: Allowing external connections from the oracle database (ACL)
//Create and grant privileges to USER syed
grant connect, resource to syed identified by syed;
// Execute this script
begin
dbms_network_acl_admin.append_host_ace(
host=>'www.oracle.com'
ace=>xs$ace_type(privilege_list => xs$name_list('connect'),
principal_name=>'syed'
principal_type=> xs_acl.ptype_db));
end;
/
STEP 3: Configuring the Environment for Digital Certificates
Here you go to Firefox – “Options” – “Advanced” – “Certificates”
then
"View certificates tab" and on the "Authorities tab"
Go to Host Location:
===================
Windows:
notepad %ORACLE_HOME%networkadminsqlnet.ora
Linux:
oracle> vim %ORACLE_HOME%networkadminsqlnet.ora then add the Wallet Location in RED

2. Create Dir and Wallet:
===================
Windows: mkdir c:tmpwallet
orapki wallet create -wallet c:tmpwallet -pwd oracle123 -auto_login
Note:
ORAPKI – (Utility) , c:tmpwallet – ( Location of Wallet ) , oracle123 ( wallet password), -auto_login
(Auto)

3. Question: What is ORAPKI?
Answer: The orapki utility is provided to manage public key infrastructure (PKI) elements, such as
wallets and certificate revocation lists, on the command line so the tasks it performs can be
incorporated into scripts. Providing a way to incorporate the management of PKI elements into scripts
makes it possible to automate many of the routine tasks of maintaining a PKI.

5. Download the certificates and export to the desired location:

7. STEP 4: Testing the Web Service Call
Login with the created user in this example
C:tmp> sqlplus syed/syed
==========================================================
THANK YOU
==============================================
Written by:
Syed Sadath Ullah
M.Tech;Ocp
Database Administrator