Call: +44 (0)1904 557620 Call

Pete Finnigan's Oracle Security Weblog

This is the weblog for Pete Finnigan. Pete works in the area of Oracle security and he specialises in auditing Oracle databases for security issues. This weblog is aimed squarely at those interested in the security of their Oracle databases.

[Previous entry: "CPU 12 July 2005"] [Next entry: "Security advisories released detailing 4 of the bugs fixed in CPU July 2005"]

Self signed SSL certificates with JInitiator

I saw Wilfred van der Deijl's post to his blog a few days ago titled "Using self-signed SSL certificates with JInitiator" and made a note to go and have a look. Wilfred wanted to test if a performance issue still existed if he used Oracle's JInitiator instead of the Sun JPI. He uses self sign certificates on all non production webservers but he says JInitiator refuses to make connections and fails. He then details the steps to include a self-signed certificate in the JInitiator store.

Wilfred then details the failure conditions and errors and then shows how to get the self-signed certificate and manually add it to the certdb.txt file and then how to close and restart so that it should work. This is an interesting post as its security related and worth reading if you use Oracle's JInitiator.