oracle apex ssl configuration for ords standalone server
I have configured oracle apex 18.2 with ords as standalone server ,
For ords configuration i used below command
java -jar ords.war install advanced
I have selected 1 from below Question while Configuring ords
Enter 1 if using HTTP or 2 if using HTTPS [1]:
and Started the Server Using below Command
java -jar ords.war standalone
Server is working fine locally , but as per Current Plan i want to make server Live over internet for that i want to Secure Using SSL HTTPS Configuration , I exactly didn't know the Steps that how to Achieve this. I just have select Require HTTPS from Work-space in Instance Setting , but its didn't worked as instance was not accessible so i used below Command to Revert settings back
BEGIN
APEX_INSTANCE_ADMIN.SET_PARAMETER('REQUIRE_HTTPS', 'N');
commit;
end;
/
Want some useful suggestion for SSL/HTTPS Configuration
oracle-apex
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
add a comment |
I have configured oracle apex 18.2 with ords as standalone server ,
For ords configuration i used below command
java -jar ords.war install advanced
I have selected 1 from below Question while Configuring ords
Enter 1 if using HTTP or 2 if using HTTPS [1]:
and Started the Server Using below Command
java -jar ords.war standalone
Server is working fine locally , but as per Current Plan i want to make server Live over internet for that i want to Secure Using SSL HTTPS Configuration , I exactly didn't know the Steps that how to Achieve this. I just have select Require HTTPS from Work-space in Instance Setting , but its didn't worked as instance was not accessible so i used below Command to Revert settings back
BEGIN
APEX_INSTANCE_ADMIN.SET_PARAMETER('REQUIRE_HTTPS', 'N');
commit;
end;
/
Want some useful suggestion for SSL/HTTPS Configuration
oracle-apex
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
add a comment |
I have configured oracle apex 18.2 with ords as standalone server ,
For ords configuration i used below command
java -jar ords.war install advanced
I have selected 1 from below Question while Configuring ords
Enter 1 if using HTTP or 2 if using HTTPS [1]:
and Started the Server Using below Command
java -jar ords.war standalone
Server is working fine locally , but as per Current Plan i want to make server Live over internet for that i want to Secure Using SSL HTTPS Configuration , I exactly didn't know the Steps that how to Achieve this. I just have select Require HTTPS from Work-space in Instance Setting , but its didn't worked as instance was not accessible so i used below Command to Revert settings back
BEGIN
APEX_INSTANCE_ADMIN.SET_PARAMETER('REQUIRE_HTTPS', 'N');
commit;
end;
/
Want some useful suggestion for SSL/HTTPS Configuration
oracle-apex
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
I have configured oracle apex 18.2 with ords as standalone server ,
For ords configuration i used below command
java -jar ords.war install advanced
I have selected 1 from below Question while Configuring ords
Enter 1 if using HTTP or 2 if using HTTPS [1]:
and Started the Server Using below Command
java -jar ords.war standalone
Server is working fine locally , but as per Current Plan i want to make server Live over internet for that i want to Secure Using SSL HTTPS Configuration , I exactly didn't know the Steps that how to Achieve this. I just have select Require HTTPS from Work-space in Instance Setting , but its didn't worked as instance was not accessible so i used below Command to Revert settings back
BEGIN
APEX_INSTANCE_ADMIN.SET_PARAMETER('REQUIRE_HTTPS', 'N');
commit;
end;
/
Want some useful suggestion for SSL/HTTPS Configuration
oracle-apex
oracle-apex
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
edited Nov 24 '18 at 18:11
Mihai Chelaru
2,210101122
2,210101122
asked Nov 23 '18 at 19:58
user10266688user10266688
127
asked Nov 23 '18 at 19:58
user10266688user10266688
127
asked Nov 23 '18 at 19:58
user10266688user10266688
127
127
add a comment |
add a comment |
1 Answer
1
active
oldest
votes
Edit the file ..... config/ords/standalone/standalone.properties
Add the setting jetty.secure.port=443 ( or whatever port needed )
That spins up the HTTPS service with a self-signed cert.
Next procure a certificate and set it in the configuration. There are multiple choices
Let's Encrypt which is details in my blog post http://krisrice.io/2018-05-09-ORDS-and-lets_encrypt/
SSL authorities. This could include converting the ssl cert format to a .der which is what ORDS requires.
In this case, you must run a command similar to the following to convert it and remove the encryption:
openssl pkcs8 -topk8 -inform PEM -outform DER -in yourdomain.key -out yourdomain.der -nocrypt
Then again edit the conf/ords/standalone/standalone.properties adding
ssl.cert=<path to yourdomain.crt>
ssl.cert.key=<path to yourdomain.der>
ssl.host=yourdomain
This is in the doc here: https://docs.oracle.com/cd/E56351_01/doc.30/e87809/installing-REST-data-services.htm#AELIG7026
Or on oracle-base here: https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-standalone-mode
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
I have addedjetty.secure.port=443to standalone.properties and restarted the ords , but now i am getting error onopenssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocryptError is139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)# Create a self-signed certificate in a JKS keystore.and# Create a PKCS12 keystore from the JKS keystore.and# Extract the key and certificate in PEM format.are successful but# Convert them to DER format.is not working as giveing errorunable to load key
– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
|
show 12 more comments
Your Answer
StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53452335%2foracle-apex-ssl-configuration-for-ords-standalone-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
Edit the file ..... config/ords/standalone/standalone.properties
Add the setting jetty.secure.port=443 ( or whatever port needed )
That spins up the HTTPS service with a self-signed cert.
Next procure a certificate and set it in the configuration. There are multiple choices
Let's Encrypt which is details in my blog post http://krisrice.io/2018-05-09-ORDS-and-lets_encrypt/
SSL authorities. This could include converting the ssl cert format to a .der which is what ORDS requires.
In this case, you must run a command similar to the following to convert it and remove the encryption:
openssl pkcs8 -topk8 -inform PEM -outform DER -in yourdomain.key -out yourdomain.der -nocrypt
Then again edit the conf/ords/standalone/standalone.properties adding
ssl.cert=<path to yourdomain.crt>
ssl.cert.key=<path to yourdomain.der>
ssl.host=yourdomain
This is in the doc here: https://docs.oracle.com/cd/E56351_01/doc.30/e87809/installing-REST-data-services.htm#AELIG7026
Or on oracle-base here: https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-standalone-mode
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
I have addedjetty.secure.port=443to standalone.properties and restarted the ords , but now i am getting error onopenssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocryptError is139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)# Create a self-signed certificate in a JKS keystore.and# Create a PKCS12 keystore from the JKS keystore.and# Extract the key and certificate in PEM format.are successful but# Convert them to DER format.is not working as giveing errorunable to load key
– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
|
show 12 more comments
Edit the file ..... config/ords/standalone/standalone.properties
Add the setting jetty.secure.port=443 ( or whatever port needed )
That spins up the HTTPS service with a self-signed cert.
Next procure a certificate and set it in the configuration. There are multiple choices
Let's Encrypt which is details in my blog post http://krisrice.io/2018-05-09-ORDS-and-lets_encrypt/
SSL authorities. This could include converting the ssl cert format to a .der which is what ORDS requires.
In this case, you must run a command similar to the following to convert it and remove the encryption:
openssl pkcs8 -topk8 -inform PEM -outform DER -in yourdomain.key -out yourdomain.der -nocrypt
Then again edit the conf/ords/standalone/standalone.properties adding
ssl.cert=<path to yourdomain.crt>
ssl.cert.key=<path to yourdomain.der>
ssl.host=yourdomain
This is in the doc here: https://docs.oracle.com/cd/E56351_01/doc.30/e87809/installing-REST-data-services.htm#AELIG7026
Or on oracle-base here: https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-standalone-mode
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
I have addedjetty.secure.port=443to standalone.properties and restarted the ords , but now i am getting error onopenssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocryptError is139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)# Create a self-signed certificate in a JKS keystore.and# Create a PKCS12 keystore from the JKS keystore.and# Extract the key and certificate in PEM format.are successful but# Convert them to DER format.is not working as giveing errorunable to load key
– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
|
show 12 more comments
Edit the file ..... config/ords/standalone/standalone.properties
Add the setting jetty.secure.port=443 ( or whatever port needed )
That spins up the HTTPS service with a self-signed cert.
Next procure a certificate and set it in the configuration. There are multiple choices
Let's Encrypt which is details in my blog post http://krisrice.io/2018-05-09-ORDS-and-lets_encrypt/
SSL authorities. This could include converting the ssl cert format to a .der which is what ORDS requires.
In this case, you must run a command similar to the following to convert it and remove the encryption:
openssl pkcs8 -topk8 -inform PEM -outform DER -in yourdomain.key -out yourdomain.der -nocrypt
Then again edit the conf/ords/standalone/standalone.properties adding
ssl.cert=<path to yourdomain.crt>
ssl.cert.key=<path to yourdomain.der>
ssl.host=yourdomain
This is in the doc here: https://docs.oracle.com/cd/E56351_01/doc.30/e87809/installing-REST-data-services.htm#AELIG7026
Or on oracle-base here: https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-standalone-mode
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
Edit the file ..... config/ords/standalone/standalone.properties
Add the setting jetty.secure.port=443 ( or whatever port needed )
That spins up the HTTPS service with a self-signed cert.
Next procure a certificate and set it in the configuration. There are multiple choices
Let's Encrypt which is details in my blog post http://krisrice.io/2018-05-09-ORDS-and-lets_encrypt/
SSL authorities. This could include converting the ssl cert format to a .der which is what ORDS requires.
In this case, you must run a command similar to the following to convert it and remove the encryption:
openssl pkcs8 -topk8 -inform PEM -outform DER -in yourdomain.key -out yourdomain.der -nocrypt
Then again edit the conf/ords/standalone/standalone.properties adding
ssl.cert=<path to yourdomain.crt>
ssl.cert.key=<path to yourdomain.der>
ssl.host=yourdomain
This is in the doc here: https://docs.oracle.com/cd/E56351_01/doc.30/e87809/installing-REST-data-services.htm#AELIG7026
Or on oracle-base here: https://oracle-base.com/articles/misc/oracle-rest-data-services-ords-standalone-mode
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
answered Nov 23 '18 at 20:14
Kris RiceKris Rice
2,356728
2,356728
I have addedjetty.secure.port=443to standalone.properties and restarted the ords , but now i am getting error onopenssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocryptError is139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)# Create a self-signed certificate in a JKS keystore.and# Create a PKCS12 keystore from the JKS keystore.and# Extract the key and certificate in PEM format.are successful but# Convert them to DER format.is not working as giveing errorunable to load key
– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
|
show 12 more comments
I have addedjetty.secure.port=443to standalone.properties and restarted the ords , but now i am getting error onopenssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocryptError is139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY
– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)# Create a self-signed certificate in a JKS keystore.and# Create a PKCS12 keystore from the JKS keystore.and# Extract the key and certificate in PEM format.are successful but# Convert them to DER format.is not working as giveing errorunable to load key
– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
I have added
jetty.secure.port=443 to standalone.properties and restarted the ords , but now i am getting error on openssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocrypt Error is 139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY– user10266688
Nov 24 '18 at 14:46
I have added
jetty.secure.port=443 to standalone.properties and restarted the ords , but now i am getting error on openssl pkcs8 -topk8 -inform PEM -outform DER -in self-signed.pem -out self-signed.der -nocrypt Error is 139778680584080:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:707:Expecting: ANY PRIVATE KEY– user10266688
Nov 24 '18 at 14:46
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
where did the cert files come from ?
– Kris Rice
Nov 24 '18 at 14:48
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)
# Create a self-signed certificate in a JKS keystore. and # Create a PKCS12 keystore from the JKS keystore. and # Extract the key and certificate in PEM format. are successful but # Convert them to DER format. is not working as giveing error unable to load key– user10266688
Nov 24 '18 at 15:01
ok i have followed your given link from oracle base on SSL Configuration (HTTPS)
# Create a self-signed certificate in a JKS keystore. and # Create a PKCS12 keystore from the JKS keystore. and # Extract the key and certificate in PEM format. are successful but # Convert them to DER format. is not working as giveing error unable to load key– user10266688
Nov 24 '18 at 15:01
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
If this is for the but testing do not use a self-signed cert.
– Kris Rice
Nov 24 '18 at 15:02
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
so what should i do now ? my server is almost down
– user10266688
Nov 24 '18 at 15:03
|
show 12 more comments
Thanks for contributing an answer to Stack Overflow!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53452335%2foracle-apex-ssl-configuration-for-ords-standalone-server%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
