Skip to main content

Posts

Showing posts with the label security

When Why to use Work Managers in Weblogic

" If you do nothing on dispatch policies in OSB proxy or business services, all is done in the Default Workmanager. But since some constructions, not only service call-outs, need other threads to finish the job,  you can get stuck threads because the workmanager's threadpool gets empty having all or near to all threads waiting , leaving no threads to pickup work to free the others.  If all threads in the default queue become stuck, the server changes its health state to "critical. If all threads in weblogic.admin.HTTP, weblogic.admin.RMI, or a user-defined execute queue become stuck, the server changes its health state to "warning. Work Managers have a Ignore Stuck Thread options that gives the ability to execute long running jobs.  " Based on our need we can create one of following work manager's: For OSB to work optimally and prevent floading WebLogic’s threadpool with hogged/stuck threads you should create 3 FairShareRequest classes ...

PFX Certificate key based secured REST API Invocation in OSB with JAVA

Hello, Today we are going to see how we can invoke a REST API which is secured with private key & certificate which requires two way SSL for successful invocation. Before starting development what we need: Certificate.pfx file This PFX file contain a CERTIFICATE AND KEY, which will be used for two way SSL REST API URL like "https://SERVERURL/URL/connect/token" JAVA implementation: We need to use below external JAR's for making HTTP Call. Below is sample JAVA code for same: package com.api.client; import java.io.BufferedReader; import java.io.File; import java.io.FileInputStream; import java.io.InputStream; import java.io.InputStreamReader; import java.io.OutputStream; import java.net.HttpURLConnection; import java.net.InetSocketAddress; import java.net.Proxy; import java.net.URL; import java.security.KeyStore; import java.security.SecureRandom; import java.util.logging.Logger; import javax.net.ssl.HttpsURLConn...

Two Way SSL implementation in Oracle SOA Suite Using TLS

Hello Everyone, Hope you all are doing well, Today i will be going to discuss how we can configure SOA server to implement two way SSL by which request/response encryption and secure/trusted connection can be done. You will see lots of blog over it, Here i am not going to discuss in theory about it as who ever is going to start work with two way SSL implementation, Must read below oracle documentation and make clear about terms and their specifications. https://docs.oracle.com/middleware/12213/soasuite/administer/GUID-5E4E3425-F0E3-4E97-B5AE-2EEE7A205ACF.htm Here we will focus how we can make a SOA composite two way SSL enabled, You need to follow same type of implementation when you are in process of consuming any third party SOAP service in SOA composites. Let's Start, Before actual implementation let's have a show review of terms will be used in this implementation. SSL/TLS: S SL stands for Secure Sockets Layer. SSL is the predecessor of TLS. SSL should be con...