As part of the gateway is actually a WebLogic server, handling TLS/SSL certificates is the same process as configuring WebLogic which out of the box uses the demo java key store (demo.jks). While OK for development, the credentials to demo.jks are openly published. This makes the key store very insecure and it is recommended that a secure keystore is used for certificates, and so on.
To do this a new keystore needs to be created—an explanation of this can be seen at https://docs.oracle.com/middleware/1213/wls/SECMG/identity_trust.htm#SECMG365.
Then the WebLogic server will need to be configured to use the new key store, and will also need the credentials needed to access the key store. There are several approaches ...
