Friday, 5 July 2013

SSL Configuration for Apache

First make sure that apache installations and SSL changes have done, now use these below steps to configure SSL certificates.

Step 1 : Move to "extra" directory of apache.

Ex: cd /APACHE_HOME/conf/extra

Step 2: Generate Private Key on the Server Running Apache + mod_ssl

Ex: openssl genrsa -des3 -out .key 4096
So your result will be : .key

Step 3: Generate a Certificate Signing Request (CSR)

Ex: openssl req -new -key .key –out .csr
So your result will be : .csr

Step 4: Generate a Self-Signed SSL Certificate

Ex: openssl x509 -req -days 365 -in .csr –signkey .key -out .crt
So your result will be : .crt

Step 5: Generate a CA file

Ex: openssl req -new -x509 -days 365 -key in .key -out in .ca
So your result will be : .ca

Step 6: Generate a DER file

Ex: openssl x509 -in .crt -out .der.crt -outform DER
So your result will be : .der.crt

Step 7: Removal of Passphrase (Optional if you want to remove passphrase)

Ex: openssl rsa -in .key -out new.key
So your result will be : new.key
Now copy that “new.key” to “.key” 
Ex : cp new.key .key .

Step 8: Finally copy .key and .crt to /APACHE_HOME/conf/, so use

Ex : cp .key /APACHE_HOME/conf/
cp .crt /APACHE_HOME/conf/

Note : You can change the key capacity to higher or lower (i have given 4096==4 MB) and also key validity to more days (i have given 365==1 Year).

Now you are done with your SSL certificates.

Sunday, 26 May 2013

OIAM 11g - Introduction to Oracle Identity and Access Management 11g

Introduction to Oracle Identity and Access Management 11g

As part of Oracle Fusion Middleware, Oracle Identity Management provides a unified, integrated security platform designed to manage user identities, provision resources to users, secure access to corporate resources, enable trusted online business partnerships, and support governance and compliance across the enterprise.

Oracle Identity Management ensures the integrity of large application grids by enabling new levels of security and completeness to address the protection of enterprise resources and the management of the processes acting on those resources.


Oracle Identity Management provides enhanced efficiency through a higher level of integration, consolidation, and automation, and increased effectiveness in terms of application-centric security, risk management, and governance. Oracle Identity Management supports the full life cycle of enterprise applications, from development to deployment to full-blown production.



Oracle Identity Management Overview:

In just a few years Oracle has established itself as the foremost identity and access management (IAM) vendor by providing an integrated, application-centric product portfolio unmatched by its competitors. Oracle’s ability to anticipate and meet customer demand through a savvy combination of key acquisitions and organic growth has turned the company’s identity and access management offering into the IAM market leader.

Oracle Identity Management Business Benefits:

Oracle Identity Management allows enterprises to manage the end-to-end life cycle of user identities across enterprise resources both within and beyond the firewall, independently from enterprise applications. In other words, Oracle Identity Management’s application-centric approach allows customers to clearly separate business logic from security and resource management, thus promoting development agility and lowering maintenance costs.

Oracle’s strategy for IAM provides the following key benefits:


Complete: Oracle Identity Management provides a comprehensive set of market-leading services including identity administration and role management; user provisioning and compliance; web applications and web services access control; single sign-on and federated identities; fraud detection; strong, multifactor authentication and risk management; role governance and identity analytics, audit and reports. 


Integrated: Oracle Identity Management components can be deployed separately or together as an integrated suite of identity services. The various components making up Oracle Identity Management are designed to work together to satisfy each identity management and access control requirement met throughout a business transaction.


Hot-Pluggable: Oracle Identity Management’s standards-based suite of products is designed to support heterogeneous, multiple-vendor development and runtime environments, including operating systems, web servers, application servers, directory servers, and database management systems.


Best-Of-Breed: In addition to Oracle Identity Management’s level of completeness, integration, and hot-pluggability, the components of the suite deliver functional depth and sophistication that, taken individually, makes them market-leading, best-of-breed products.