Menu

iplanet

file_share

Access files via iPlanet

, , , 0

Guide on making files accessible via iPlanet

 

this is based on Linux installed Oracle iPlanet Web Server version 7.0

 

Go to iPlanet web instance config directory

cd ~iPlanetDirectory/https-web_instance/config/

 

Look for web instance obj.conf file

vi ./web_instance-obj.conf

 

Add below configurations

 

Name it whatever (you desire) and use ppath (physical path) to catch the URL

<Object name=”whatever” ppath=”*/whatever/*”>

 

Set up methods and set it to internal and function to send files

Service method=”(GET|HEAD|POST)” type=”*~magnus-internal/*” fn=”send-file”

 

Setting variable on service headers to access control allow from anywhere

Output fn=”set-variable” insert-srvhdrs=”Access-Control-Allow-Origin: *”

 

</Object>

 
ssl

Renew SSL on iPlanet

, , , , , 0

Here’s the guide on how to renew SSL on iPlanet web server

 

this is based on Linux installed Oracle iPlanet Web Server version 7.0

 

Find the configuration file folder

cd ~/iPlanetHomeDirectory/https-instance_name/config/

 

List the certificates installed in the directory

certutil -L -d . 

 

Read the current SSL parameters from above list

certutil -L -d . -n “certificateName”

 

*There can only be one database per directory!

 

Export the certificate using name from above list

pk12util -o /root/certificateNameToBeSaved.p12 -d . -n “certificateName”

 

Pulling the key out of the current (exported) certificate

openssl pkcs12 -in /root/certificateNameToBeSaved.p12 -out /root/certificateNameToBeSaved.key -nocerts -nodes

 

Make new csr file to renew from certificate authority (CA)

openssl req -new -key /root/certificateNameToBeSaved.key -out certificateToBeSaved.csr

 

Go to the certificate authority (CA) and complete the purchase!

 

Install the new certificate via iPlanet Web GUI

-click set passwords under certificates to list all

-click install and put in the new cer received

-make sure to deploy and check the 2nd option to save previous work done

 

How to make pem certificate

pk12util -o /root/certificateNameToBeSaved.p12 -d . -n “certificateName” ” (pulling after applying)

openssl pkcs12 -in /root/certificateToBeExported.p12 -out certificateName.pem

 

How to make pfx certificate

openssl pkcs12 -inkey certificateKey.key -in certificate.cer -export -out newCertificate.pfx

 

How to convert certificate from p12 format to pem format

openssl pkcs12 -in certificate.p12 -out certificate_exported.pem

 

How to convert pem certificate to p12 format

openssl pkcs12 -export -out certificate_exported.p12 -in certificate.pem -inkey certificateKey.key

 

How to convert certificate from pem format to pfx format

Option #1

openssl pkcs12 -export -out certificate_exported.pfx -inkey server.key -in server.crt -certfile IntermediateCA.crt

 

Option #2

openssl pkcs12 -inkey certificate_exported.pem -in certificate_x509_format.txt -export -out certificate_exported.pfx

sign

Set redirect http to https on iPlanet

, , , , , 0

Here’s the guide on how to setup redirect http to https on iPlanet web server

 

this is based on Linux installed Oracle iPlanet Web Server version 7.0

 

Go to iPlanet web instance config directory

cd ~iPlanetDirectory/https-web_instance/config/

 

Look for web instance obj.conf file

vi ./web_instance-obj.conf

 

revise to add below for settings

 

<Client security=”off”>

NameTrans fn=”set-variable” abort=”true” error=”302″ set-srvhdrs=”Location: https://www.<HOSTNAME.DOMAIN>”

</Client>

 

OR

 

<Client security=”off”>

NameTrans fn=”set-variable” abort=”true” error=”302″ set-srvhdrs=”Location: https://<HOSTNAME.DOMAIN>”

</Client>

 

OR

 

<Object name=”default”>

AuthTrans fn=”match-browser” browser=”*MSIE*” ssl-unclean-shutdown=”true”

<If not $security>

NameTrans fn=”redirect” from=”/web” url-prefix=”https://$urlhost/web”

</If>

 

once added, you can reload and/or restart the web-instance to take effect !

security

Create SSL on iPlanet

, , , 0

Guide on making certificate key & SSL database for iPlanet

 

this is based on Linux installed Oracle iPlanet Web Server version 7.0

 

Find the configuration file folder

cd ~/iPlanetHomeDirectory/https-instance_name/config/

 

List the certificates installed in the directory

certutil -L -d . 

 

Read the current SSL parameters from above list

certutil -L -d . -n “certificateName”

 

*There can only be one database per directory!

 

 

Here’s how we are going to create a new database set

 

Make a new directory

mkdir newcert

 

Change directory to the new directory we created

cd newcert

 

Creating new database on current directory

certutil -N -d .

 

Creating new CSR file for new SSL

certutil -R -d . -g 2048 -Z SHA256 -a -o site.csr -s ‘C=CA,ST=Ontario, L=Mississauga, O=Organization, CN=blog.marvins.work’

 

C stands for country

ST stands for state

L stands for local a.k.a. city

O stands for organization

CN stands for comman name a.k.a. domain name

 

Purchasing SSL certificate from certificate authority (CA)

upload the new CSR you created above and receive CRT

 

To install signed CRT certificate

 

Go to the target directory where database is stored

cd newcert

 

Add the new SSL into the database

certutil -A -n CertName -t ‘,,’ -d . -a -i signedcertificate.cert

 

Note

Make sure the server.xml file is pointing to the new SSL database directory, and reload the web instance to update the new SSL go effective. Make sure the name you given on above “CertName” matches the configuration files.

 

new

Create new web instance on iPlanet

, , , 0

Here’s guide on how to create new web instance on iPlanet

this is based on Linux installed Oracle iPlanet Web Server version 7.0

Prepare a new IP Address to apply to the new web instance

Best way to create new instance is via iPlanet WEB GUI

-> login to IP admin-server with port default 8888

-> go to configurations tab

-> go to new…

1. Configuration information

create name / server name (make it the same)

Document Root: ./docs (which is the default)

Server User: webservd (which is the default)

 

2. Listener Properties

Pick a port which is not used in server

use command “netstat -ntlp | grep ‘desiredPortNumber‘ ” for http/https

IP Address should be * (wildcard for all IP address)

 

3. Configuration Properties

Do not change anything

 

4. Create Instances

Select Nodes as necessary

 

5. Review

Click “Finish” and wait for the result

Best way to create the SSL is by following how to create SSL on iPlanet tutorial

Configure listener for http and https ports

go to configurations > click the configuration > click HTTP Listeners > click New…

Name: leave as is

Port: use the https port availabl e (not used in server)

IP Address: *

Server Name: enter the domain name

Default Virtual Server: enter whichever that is active & running

SSL: Enabled and select SSL installed

Add new virtual servers

configurations > virtual servers> new…

1. Enter Virtual Server Information

use the web URL for Name & Hosts

use default “../docs” directory

2. Choose HTTP Listener(s)

use HTTP & HTTPS Listeners created

Create new obj.conf file inside config directory

copy from default obj.conf and use assigned WebLogic plugin port informations

make sure chown & chmod is set the same as other

Register and check firewall between webserver and weblogic server

make sure to submit for permanent

make sure to check the connectivity

Edit the file /config/server.xml

add the tag below to inside of <virtual-server>

“<object-file>instance_name-obj.conf</object-file>”

it’ll use this specific obj.conf on the virtual server created

Configure the logs to run and use the pre-configured log format as needed

Configurations > General > Log Preferences

Make sure to enable weblogic plugin modules by adding following lines on magnus.conf file

Init fn=”load-modules” funcs=”wl_proxy” shlib=”/iPlanetDirectory/wlsplugin/lib/mod_wl.so”

Test the connectivity by following commands

wget –header ‘Host: marvins.work‘ http://127.0.0.1:8443/api-O-

wget –header ‘Host: marvins.work’ http://127.0.0.1:8443/api/login -O-

web

Configure WebLogic port forward on iPlanet Webserver

, , , , , 0

Here’s the guide on how to setup weblogic cluster port forward on iPlanet web server

 

this is based on Linux installed Oracle iPlanet Web Server version 7.0

 

you can edit the configuration file to achieve this settings

go to iPlanet web instance config directory

cd ~iPlanetDirectory/https-web_instance/config/

 

look for web instance obj.conf file

vi ./web_instance-obj.conf

 

Here’s how you can put weblogic proxy on default landing page

<Object name=”default”>

Service method=”(GET|HEAD|POST)” fn=”wl_proxy” WebLogicCluster=”server1:11111,server2:11111″ PathTrim=”/” CookieName=”SESSION_ID”

</Object>

 

Here’s how you can put weblogic proxy on specific physical path below /api/

example.com/api/

<Object name=”api” ppath=”*/api/*”>

PathCheck fn=”set-cache-control” control=”no-cache”

Service fn=”wl_proxy” WebLogicCluster=”server1:11112,server2:11112″ PathTrim=”/api” CookieName=”SESSION_ID”

</Object>

 

here’s another example of physical path /api/

<Object name=”api” ppath=”*/api/*”>

<If $path =~ ‘^(.*)\.(jpg|jpeg|gif|png|css|js|html|htm)$’>

   Service method=”(GET|HEAD|POST)” type=”*~magnus-internal/*” fn=”send-file”

</If>

<Else>

   PathCheck fn=”set-cache-control” control=”no-cache”

   Service fn=”wl_proxy” WebLogicCluster=”server1:1111,server2:1111″ PathTrim=”/” CookieName=”SESSION_ID”

</Else>

 

</Object>