一个不留_YiGeBuLiu: June 2007 Archives

让OC4J支持https访问

By UPDATE on June 20, 2007 2:14 PM | Permalink

我现在用的OC4J版本是10.13

第一步先建一个用https访问的web site 文件,内容大致如下:

<?xml version="1.0" standalone='yes'?>

<web-site
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xsi:noNamespaceSchemaLocation="http://xmlns.oracle.com/oracleas/schema/web-sit
e-10_0.xsd"
port="443" secure ="true"
display-name="OC4J 10g (10.1.3) Default Web Site"
schema-major-version="10"
schema-minor-version="0"
>
<ssl-config keystore="my.keystore" keystore-password="hello" />

<default-web-app application="default" name="defaultWebApp" access-log="true"/
>
<web-app application="default" name="gm" root="/gm" access-log="true"/>
<web-app application="default" name="wap" root="/wap" access-log="true"/>
<web-app application="default" name="media" root="/media" access-log="true"/>
<web-app application="system" name="dms0" root="/dmsoc4j" access-log="false" /
>
<web-app application="system" name="dms0" root="/dms0" access-log="false" />

<web-app application="system" name="JMXSoapAdapter-web" root="/JMXSoapAdapter" />
<web-app application="default" name="jmsrouter_web" root="/jmsrouter" load-on-startup="true" />
<web-app application="javasso" name="javasso-web" root="/jsso" load-on-startup="false" />
<web-app application="ascontrol" name="ascontrol" root="/em" load-on-startup="true" ohs-routing="false" />


<access-log path="../log/default-web-access.log" split="day" />


</web-site>

其中红色的是重点部分.标准https端口号是443,如果选用其它端口的话则直接改就行了,secure ="true"是必须标注的.

<ssl-config keystore="my.keystore" keystore-password="hello" />这个就是用于https的证书文件,和密码.

第二步是在server.xml中加入使用https的web site 文件,如下:

<?xml version="1.0"?>

<application-server xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="http://xmlns.oracl
e.com/oracleas/schema/application-server-10_1.xsd" application-directory="../applications"
check-for-updates="adminClientOnly"
deployment-directory="../application-deployments"
connector-directory="../connectors"
schema-major-version="10" schema-minor-version="0" >
....

        <global-application name="default" path="application.xml" parent="system" start="true" />
        <application name="javasso" path="../../home/applications/javasso.ear" parent="default" start="false" />
        <application name="ascontrol" path="../../home/applications/ascontrol.ear" parent="system" start="true" />
        <global-web-app-config path="global-web-application.xml" />
        <transaction-manager-config path="transaction-manager.xml" />
        <web-site default="true" path="./default-web-site.xml" />
        <web-site path="./secure-web-site.xml" />
        <cluster id="78400349798527" />
</application-server>

这样oc4j配置就可以,然后重启oc4j,用浏览器访问一下吧.https://localost,是不是可以了呢.当然还会提示证书未信任,解决这个问题就是要买一个证书了,便宜的,几百,贵的7,8千.