SSL certificate error with Weblogic in Internet Explorer

Question

I have a Weblogic server installed and a site. The SSL port is 7002 When I try to access a secure page ex https://localhost:7002/site in Internet Explorer I get a certificate error. Clicking the continue to website does not do anything. In chrome, I get the opton to "Ignore Anyway" and I can continue to see the page. But in Internet explorer I having no such luck. Not sure what I am doing wrong. I am using the default certificates that come wih weblogic installation. I have not generated any private keys or certificates.

Any help appreciated.

Answer 1

The problem is with a recent Windows security update that blocks any site with less than 1024-bit SSL key. WebLogic out of the box comes with 512-bit self signed certificate. If you create your own self-signed identity and key stores with 2048-bit keys the problem will go away.

Answer 2

Suleyman: I am also facing the same problem although I know that this was due to recent microsoft patches. I have disabled those patches and it is working fine now. It would be great if you could share the steps to create 2048-bit keys.

Answer 3

Anil: To create your own SSL key and configure WebLogic to use it, follow the steps here:

http://techworldrocks.wordpress.com/2012/03/28/configure-self-signed-certificate-with-weblogic-server/

Make sure you include '-keysize 2048' on your key generating command

Answer 4

Type in cmd started as administrator:

certutil -setreg chain\minRSAPubKeyBitLength 512

this allows using insecure 512 bit long certificates and should be executed only once on a single host.