Certs questions

[Laurel]

Hi Dear Erman!

2 questions.
1.  Do you have instructions how to share TLS/SSL ja Java signing certificate n EBS instances 12.2 if they run on the same hosts ?

2.our certs will expire soon and new one will be implemented. Is there a good way to test that the new certificates working fine and correctly implemented ?

Thx alot
Br,Laurel

[ErmanArslansOracleBlog]

Hi Laurel,

1)Can't you use SAN or Wildcard certs?

2)Check MOS NOTE: -> How To Check Certificate Expiration, KB493700

[Laurel]

Hi!
Thx Erman!

1.Sure - use Wildcard cert.

2. I used that KB493700 and it displays the date it was requested/created but not the date it expires..
KB493700
How to know/see  date it expires ?
ANy way to check when I login to EBS ?
I can see  for java certificate, but for the  SSL ?

Thx alot!
Br,Laurel

[ErmanArslansOracleBlog]

1)Ok then. Ensure it is supported

2)It should display it with the keyword "until".. Use verbose output.. With "-v"
And checking the SSL certificate in EBS login, try to use your browser's capabilities. Browsers have that capability under the security tab. Security -> view certificate ... something like that..

However; if your EBS is behind a load balancer, what you will see may differ from how your EBS is configured. I mean; since Oracle EBS environments often use Load Balancers or Reverse Proxies, the certificate the browser sees might even be different from the one sitting in a local JKS file on the app tier... Just keep that in mind.