Cisco Cisco Prime Service Catalog 10.0 Technical References

Page of 216
 
5-43
Cisco Prime Service Catalog 10.0 Configuration Guide
OL-31034-01
Chapter 5      System Administration
Configuring SSL for Service Link Inbound Documents
Step 11
On the General page, enter the following values:
  •
Check the SSL Listen Port Enabled check box.
  •
SSL Listen Port = <enter an available port number, for example 9443>.
Step 12
Click Save.
Step 13
Restart the WebLogic server where Service Link is deployed.
Step 14
Look in the log file “<WL_servername>.out” for messages similar to the following, to ensure that the 
WebLogic server has started up in the secure port (9443):
<Notice> <Security> <BEA-090171> <Loading the identity certificate and private key stored 
under the alias hydra2 from the jks keystore file 
C:\jdk160_23\jre\lib\security\slkeystore.>
<Notice> <Server> <BEA-002613> <Channel "DefaultSecure" is now listening on 
192.168.21.72:9443 for protocols iiops, t3s, ldaps, https.>
Your Service Link service is now SSL-enabled.
Step 15
Skip this step if you have already created the file “slsigner.cer” that contains the signer certificate for the 
servicelink certificate. Otherwise, you can perform the following procedure to export the signer 
certificate. There are several methods to export the signer certificate; the following procedure is just one 
way to do it using the “keytool.exe” utility that comes with the Sun JDK 6 installation.
a.
Execute the following commands on a Command Prompt window:
cd <JAVA_HOME>\jre\lib\security
<JAVA_HOME>\bin\keytool -export -rfc -file slsigner.cer -alias servicelink -keystore 
slkeystore.jks -storepass slpassword
b.
To verify that file “slsigner.cer” is good, execute:
<JAVA_HOME>\bin\keytool –printcert –file slsigner.cer