Requesting a Private Key and Digital Certificate
You must submit your request in a particular format called a Certificate Signature Request (CSR). WebLogic Server includes a Certificate Request Generator servlet that creates a CSR. The Certificate Request Generator servlet collects information from you and generates a private key file and a certificate request file. You must then submit the CSR. Before you can use the Certificate Request Generator servlet, WebLogic Server must be installed and running.
1. Start the Certificate Request Generator servlet (certificate.war). The .war file is automatically installed when you start WebLogic Server. In a Web browser, enter the URL for the Certificate Request Generator servlet as follows:
https://hostname:port/Certificate
Where hostname is the DNS name of the machine running WebLogic Server, and port is the number of the port at which WebLogic Server listens for SSL connections.
For example, if WebLogic Server is running on a machine named yourmachine and it is configured to listen for SSL communications at the default port 7002, you must enter the following URL in your Web browser to run the Certificate Request Generator servlet:
https://yourmachine:7002/certificate
2. The Certificate Request Generator servlet loads a form in your web browser. Complete the form.
3. Click the Generate Request button. The Certificate Request Generator servlet displays messages informing you if any required fields are empty or if any fields contain invalid values. Click the Back button in your browser and correct any errors.
4. When all fields have been accepted, the Certificate Request Generator servlet generates the following files in the startup directory of your WebLogic Server:
mydomain_com-key.der: The private key file. The name of this file should go into the Server Key File Name field on the SSL tab in the Administration Console.mydomain_com-request.dem: The certificate request file, in binary format.mydomain_com-request.pem: The CSR file that you submit. It contains the same data as the.demfile but is encoded in ASCII so that you can copy it into email or paste it into a Web form.
