les_07-AS10gR3_学生手册_英文.rar.ppt

Managing Secure Sockets Layer in Oracle Application Server Objectives After completing this lesson, you should be able to: Explain how secure sockets layer (SSL) works Discuss Oracle Application Server public key infrastructure (PKI) components Explain the Oracle Wallet Manager (OWM) functionality Manage user and trusted certificates Configure Oracle HTTP Server to use SSL Configure ORMIS for OC4J What Is SSL? Secure sockets layer (SSL) is an industry-standard protocol for securing network connections. SSL involves three mechanisms: Encryption Authentication Data integrity Oracle Application Server supports SSL (versions 2 and 3) and Transport Layer Security (TLS) version 1. What Is SSL? How SSL Works How SSL Works Key Cryptography SSL provides message integrity, authentication, and encryption: On the basis of the concept of public key cryptography Through two types of encryptions: Public key Private or symmetric key Key Cryptography Public Key Infrastructure (PKI) You can use public key certificates for the following: Enabling secure and reliable authentication of users Ensuring the integrity of transmitted data Preventing unauthorized access to information when transmitted or stored Precluding repudiation of electronic transactions User Certificates You may need a user certificate to authenticate to an SSL-enabled Web site. You can obtain user certificates from any Certificate Authority (CA). Obtaining a Server Certificate You can make the access to a server in the enterprise secure by enabling SSL. To enable the server security, you require a PKCS#10 certificate request. Use Oracle Wallet Manager (OWM) to generate the server request. You can get a server certificate from a trusted CA after submitting the PKCS#10 request. Storing Secure Credentials A wallet: Is a database that is used to manage authentication data Stores secure credentials such as digital certificates Manages security credentials on the server and client What Is Oracle Wallet Manager? Oracle Wa