Otdfbt

Is there a verb for listening stealthily?

Feather, the Redeemed and Dire Fleet Daredevil

What were wait-states, and why was it only an issue for PCs?

Raising a bilingual kid. When should we introduce the majority language?

Protagonist's race is hidden - should I reveal it?

When speaking, how do you change your mind mid-sentence?

What is a 'Key' in computer science?

Will I lose my paid in full property

How do I deal with an erroneously large refund?

How long can a nation maintain a technological edge over the rest of the world?

Could a cockatrice have parasitic embryos?

Why did Israel vote against lifting the American embargo on Cuba?

Is it accepted to use working hours to read general interest books?

What is ls Largest Number Formed by only moving two sticks in 508?

SQL Server placement of master database files vs resource database files

What's the difference between using dependency injection with a container and using a service locator?

What's called a person who works as someone who puts products on shelves in stores?

Will I be more secure with my own router behind my ISP's router?

How can I wire a 9-position switch so that each position turns on one more LED than the one before?

How would you suggest I follow up with coworkers about our deadline that's today?

What was Apollo 13's "Little Jolt" after MECO?

Suing a Police Officer Instead of the Police Department

What is the ongoing value of the Kanban board to the developers as opposed to management

Married in secret, can marital status in passport be changed at a later date?

Weblogic Admin Console SSL Connection

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

0

I am trying to set up SSL/TLS for my weblogic admin console. Note this is not for the Weblogic Server but for the admin console.

I would like to specifically set the the admin console to only use TLS 1.2. Originally I thought that I could set it under setEnv and set the java_admin_options or something like that but I still was able to connect to it via SSlv3.

Also if possible can cipher suites be set for the admin console as well? I know how to set them for the regular server, but unsure on how to set them for for the admin server.

ssl weblogic

share|improve this question

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

add a comment | 

0

I am trying to set up SSL/TLS for my weblogic admin console. Note this is not for the Weblogic Server but for the admin console.

I would like to specifically set the the admin console to only use TLS 1.2. Originally I thought that I could set it under setEnv and set the java_admin_options or something like that but I still was able to connect to it via SSlv3.

Also if possible can cipher suites be set for the admin console as well? I know how to set them for the regular server, but unsure on how to set them for for the admin server.

ssl weblogic

share|improve this question

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

add a comment | 

I am trying to set up SSL/TLS for my weblogic admin console. Note this is not for the Weblogic Server but for the admin console.

I would like to specifically set the the admin console to only use TLS 1.2. Originally I thought that I could set it under setEnv and set the java_admin_options or something like that but I still was able to connect to it via SSlv3.

Also if possible can cipher suites be set for the admin console as well? I know how to set them for the regular server, but unsure on how to set them for for the admin server.

ssl weblogic

share|improve this question

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

share|improve this question

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

share|improve this question

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

edited Nov 7 '15 at 16:57

EEAA

102k16148219

edited Nov 7 '15 at 16:57

EEAA

102k16148219

asked Oct 6 '15 at 15:15

VngeVnge

144111

asked Oct 6 '15 at 15:15

VngeVnge

144111

1 Answer
1

active

oldest

votes

0

you can add the following line of code in commEnv.sh file.(i am using it on weblogic 12c)

# Set server startup arguments for AdminServer

if [ "$SERVER_NAME" == "AdminServer" ] ; then
 USER_MEM_ARGS="-Xms1024m -Xmx1024m -Dweblogic.security.SSL.protocolVersion=TLSv1.2"
export USER_MEM_ARGS
fi

This will only enable TLS on admin server as per requirement.

you can also try -Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.0 parameter in commEnv.sh file which will disable SSLv3.

You can change the cipher suites on admin server as mentioned below by adding it under ssl tab in config.xml

<server>
<name>AdminServer</name>
<ssl>
<name>AdminServer</name>
<enabled>true</enabled>
<ciphersuite>TLS_RSA_WITH_AES_128_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_AES_256_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>
<ciphersuite>TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>

share|improve this answer

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

add a comment | 

Your Answer

StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f727096%2fweblogic-admin-console-ssl-connection%23new-answer', 'question_page');

);

Post as a guest

Name

Email

Required, but never shown

0

you can add the following line of code in commEnv.sh file.(i am using it on weblogic 12c)

# Set server startup arguments for AdminServer

if [ "$SERVER_NAME" == "AdminServer" ] ; then
 USER_MEM_ARGS="-Xms1024m -Xmx1024m -Dweblogic.security.SSL.protocolVersion=TLSv1.2"
export USER_MEM_ARGS
fi

This will only enable TLS on admin server as per requirement.

you can also try -Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.0 parameter in commEnv.sh file which will disable SSLv3.

You can change the cipher suites on admin server as mentioned below by adding it under ssl tab in config.xml

<server>
<name>AdminServer</name>
<ssl>
<name>AdminServer</name>
<enabled>true</enabled>
<ciphersuite>TLS_RSA_WITH_AES_128_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_AES_256_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>
<ciphersuite>TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>

share|improve this answer

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

add a comment | 

0

you can add the following line of code in commEnv.sh file.(i am using it on weblogic 12c)

# Set server startup arguments for AdminServer

if [ "$SERVER_NAME" == "AdminServer" ] ; then
 USER_MEM_ARGS="-Xms1024m -Xmx1024m -Dweblogic.security.SSL.protocolVersion=TLSv1.2"
export USER_MEM_ARGS
fi

This will only enable TLS on admin server as per requirement.

you can also try -Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.0 parameter in commEnv.sh file which will disable SSLv3.

You can change the cipher suites on admin server as mentioned below by adding it under ssl tab in config.xml

<server>
<name>AdminServer</name>
<ssl>
<name>AdminServer</name>
<enabled>true</enabled>
<ciphersuite>TLS_RSA_WITH_AES_128_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_AES_256_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>
<ciphersuite>TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>

share|improve this answer

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

add a comment | 

you can add the following line of code in commEnv.sh file.(i am using it on weblogic 12c)

# Set server startup arguments for AdminServer

if [ "$SERVER_NAME" == "AdminServer" ] ; then
 USER_MEM_ARGS="-Xms1024m -Xmx1024m -Dweblogic.security.SSL.protocolVersion=TLSv1.2"
export USER_MEM_ARGS
fi

This will only enable TLS on admin server as per requirement.

you can also try -Dweblogic.security.SSL.minimumProtocolVersion=TLSv1.0 parameter in commEnv.sh file which will disable SSLv3.

You can change the cipher suites on admin server as mentioned below by adding it under ssl tab in config.xml

<server>
<name>AdminServer</name>
<ssl>
<name>AdminServer</name>
<enabled>true</enabled>
<ciphersuite>TLS_RSA_WITH_AES_128_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_AES_256_CBC_SHA</ciphersuite>
<ciphersuite>TLS_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>
<ciphersuite>TLS_DHE_RSA_WITH_3DES_EDE_CBC_SHA</ciphersuite>

share|improve this answer

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

# Set server startup arguments for AdminServer

if [ "$SERVER_NAME" == "AdminServer" ] ; then
 USER_MEM_ARGS="-Xms1024m -Xmx1024m -Dweblogic.security.SSL.protocolVersion=TLSv1.2"
export USER_MEM_ARGS
fi

share|improve this answer

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644

answered Oct 8 '15 at 19:13

Man-I-n-MiddLeWareMan-I-n-MiddLeWare

644