Apache weblogic integration and ssl configuration

Apache weblogic integration and ssl configuration in apache

1 download "httpd/apache_x.x.x-win32-x86-openssl-x.x.x.msi" (http://httpd.apache.org/download.cgi)

*************************************************************************

Step 1) Make sure the Apache server runs on port 8080.This can be done by modifying the httpd.conf present at

D:\Program Files\Apache Group\Apache2\conf

Modify the Listen port to 8080

Listen 8080

or

Listen 80

Step 2) Copy the mod_wl_20.so file from weblogic to D:\Program Files\Apache Group\Apache2\modules

Copy  mod_wl_20.so for Apache 2.0  

          mod_wl_22.so for Apache 2.2 

Step 3) Add these lines in the httpd.conf file

LoadModule weblogic_module modules/mod_wl_20.so

<Location />

SetHandler weblogic-handler

</Location>

<IfModule mod_weblogic.c>

WebLogicCluster localhost:7003,localhost:7005

Debug ON

WLLogFile c:/temp/wlproxy.log

WLTempDir c:/temp

</IfModule>

Step 4) Restart Apache and access the application deployed on the Cluster using

http://localhost:8080/app-name or http://localhost/app-name

  

SSL Configuration Steps

1) Configure apache configure file httpd.conf, uncomment the following 2 lines,
 

LoadModule ssl_module modules/mod_ssl.so
Include conf/extra/httpd-ssl.conf

2) Execute the following step for windows

set OPENSSL_CONF=C:\Program Files\Apache Software Foundation\Apache2.2\conf\openssl.cnf

3) Generate certification using openssl,
openssl req -new -out server.csr
openssl rsa -in privkey.pem -out server.key
openssl x509 -in server.csr -out server.cert -req -signkey server.key -days 365

4)  Copy the generation files to the directory defined by httpd-ssl.conf

     We have the Self-signed SSL certificates ready now. Now We need to MOVE the "server.cert" and        "server.key" file to the

     "C:\Program Files\Apache Software Foundation\Apache2.2\conf" location.

5) check httpd-ssl.conf

    Now we need to modify the "C:\Program Files\Apache Software Foundation\Apache2.2\conf\extra\httpd- ssl.conf". Let all the default options as it is but make sure to modify the following section according to your need:

<VirtualHost _default_:443>
ServerAdmin some@email.com
DocumentRoot "Your Root folder location"
ServerName www.domain.com:443
ServerAlias domain.com:443
ErrorLog "logs/anyFile-error.log"
CustomLog "logs/anyFile-access.log" common
SSLEngine on

    SSLCertificateFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/server.cert"

    SSLCertificateKeyFile "C:/Program Files/Apache Software Foundation/Apache2.2/conf/server.key"
</VirtualHost>

6) Open an exception in Windows Firewall for TCP port 443.

 Open a port in Windows Firewall for windows 7

If Windows Firewall is blocking a program and you want to allow that program to communicate through the firewall, you can usually do that by selecting the program in the list of allowed programs (also called the exceptions list) in Windows Firewall. To learn how to do this, see Allow a program to communicate through Windows Firewall.

However, if the program isn't listed, you might need to open a port. For example, to play a multiplayer game with friends online, you might need to open a port for the game so that the firewall allows the game information to reach your computer. A port stays open all the time, so be sure to close ports that you don't need open anymore.

1.       Open Windows Firewall by clicking the Start button  , and then clicking Control Panel. In the search box, type firewall, and then click Windows Firewall.

2.       In the left pane, click Advanced settings.   If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

3.       In the Windows Firewall with Advanced Security dialog box, in the left pane, clickInbound Rules, and then, in the right pane, click New Rule.

4.       Follow the instructions in the New Inbound Rule wizard.

If you’re having trouble allowing other computers to communicate with your computer through Windows Firewall, you can try using the Incoming Connections troubleshooter to automatically find and fix some common problems.

Open the Incoming Connections troubleshooter by clicking the Start button  , and then clicking Control Panel. In the search box, type troubleshooter, and then clickTroubleshooting. Click View all, and then click Incoming Connections.

7) Access the application using the below url:

https://localhost:443/app-name or https://localhost/app-name