Jar Siging Oracle EBS 12.2

Jar Siging Oracle EBS 12.2

The aim of the post is to eliminate the java warning prompt message when using the 1.8 version with oracle EBS 12.2.
when starting forms the below screen will showen, and no way to save the response 

• Request a certificat from CA with Code signing extended properties enabled (https://www.thesslstore.com)

• Import the certificat in the keysotre 

 

cd $NE_BASE

cd EBSapps/appl/ad/admin/

mv  adkeystore.dat adkeystore.dat.backup

keytool -importkeystore -destkeystore adkeystore.jks -deststoretype jks -srckeystore ComodoCS_Certif.p12 -srcstoretype pkcs12

• Check the alias in the askeystore.jks

keytool -list -v -keystore adkeystore.jks

• Change the destination alias using the below command line when needed:

keytool -changealias -keystore adkeystore.jks -alias "id comodo ca limited to company name" -destalias EBSPROD_ebs-prod

• Copy the adkeystore to $NE_BASE/EBSapps/appl/ad/admin

cp adkeystore.jks adkeystore.dat

create a ruleset file with the below content:

$cat  ruleset.xml

<ruleset version="1.0+">

 <rule>

  <id location="http://*.domain-name.com" />

  <action permission="run" />

 </rule>

 <rule>

  <id location="https://*.domain-name.com" />

  <action permission="run" />

 </rule>

</ruleset>

$

create a deployement rule set jar using:

jar -cvf DeploymentRuleSet.jar ruleset.xml

• Sign the jar file using the alias already changed before

jarsigner –keystore adkeystore.dat DeploymentRuleSet.jar EBSPROD_ebs-prod

Enter Passphrase for keystore: <PWD1>
  Enter key password for <alias>: <PWD2>

PWD1: keystore password
PWD2: certificat password used during the export.

• Deploy the DeploymentRuleSet.jar to end user machines using GPO to copy the jar file under:

C:\Windows\Sun\Java\Deployment

For mac os :

/etc/.java/deployment

Note:
This require a password for the adkeystore.jsk will share the procedure to get the password  ComodoCS_Certif.p12 use the below link to export the certificat shared by comodo CA.

Note : Enhanced Jar Signing for Oracle E-Business Suite (Doc ID 1591073.1)