Oracle Fusion Middleware 11g Architecture and Management

Conclusion

This chapter has highlighted some of the common security considerations around a typical Fusion Middleware environment. We have taken some initial steps in securing our pricing application, starting with securing the physical hosts for each server. We began our infrastructure hardening by introducing keystores and Oracle wallets for setting up Secure Sockets Layer (SSL). We then proceeded with SSL configuration for Oracle HTTP Server, followed by securing the LDAP channels with SSL between OPSS and Oracle Internet Directory. We also looked at how to secure OPSS artifacts being stored in Oracle Internet Directory that are serving as the identity and policy stores for OPSS. Web access to our pricing application was protected by the installation ...