Custom Trust and Custom Identity Keystore in WebLogic 10.3

QUESTION Having configured the Custom Trust and Custom Identity Keystores in WebLogic 10.3, anyone know why WebLogic 10.3 still persists to load the Demo key store and the JDK trust store please? DESCRIPTION I start WebLogic, browse to https://mysite.com/console and login, navigate to Environments->Servers->Admin Server->Keystores and configure the keystores and set the identity and trust … Read more

Can’t start managed server in Oracle Weblogic 10.3.2

I installed Oracle SOA Suite 11g. I start the NodeManager successfully. I start the AdminServer successfully. When I go to start the soa serve (soa_server1) I get this output: NMProcess: <Mar 15, 2010 3:33:30 PM> <WARNING> <Exception while starting server ‘soa_server1’> NMProcess: java.io.IOException: Server failed to start up. See server output log for more details. … Read more

Http-Only cookies in WebLogic: what versions support them/how and why are they supported?

We want to make all cookies set by our webapp http-only. I only have a basic understanding of the benefits of doing this but I’m told by security people that it’s a Good Thing ™ Our app is running under JDK1.6.05 and WebLogic10.3.0 After way too much digging around Oracle’s website for documentation, I’ve found … Read more

How can the HSTS header be added to WebLogic?

Is there an implementation for using the Strict-Transport-Security header to WebLogic? I figure it would be using something in web.xml under <security-constraint> I know how to do this for an Apache based server, but I am unsure on adding it in for WebLogic. Please note, with this instance I am unable to use Apache in … Read more