How can you update an Oracle Application from Non-SSL to SSL?

Products

• CA Privileged Access Manager (PAM)

Issue/Introduction

Privileged Access Management (PAM) Admin has to update numerous Oracle Applications from Non-SSL to SSL.

They want to know how to accomplish this with our pamcli so they can script out this process.

Resolution

PAM Admin used the following pamcli commands to get the desired results:

Get the Target Application Name, Application ID and Target Server ID via:

RAW_XML_OUTPUT=$("$COMMAND_PATH" capam="$CAPAM" adminUserID="$ADMIN_USER" adminPassword="$ADMIN_PASS" cmdName=searchTargetApplication
TargetApplication.type=oracle TargetApplication.name="$APP_Name")

Then update the target application via the following command:

"$COMMAND_PATH" capam="$CAPAM" adminUserID="$ADMIN_USER" adminPassword="$ADMIN_PASS" \
        cmdName=updateTargetApplication \
        TargetApplication.type=oracle \
        TargetApplication.ID="$APP_ID" \
        TargetServer.ID="$DEVICE_ID" \
        TargetApplication.name="$APP_NAME" \
        Attribute.port=2484 \
        Attribute.extensionType=oracle \
        Attribute.oidport=3060 \
        Attribute.sslEnabled=true \
        Attribute.sslCertificate="-----BEGIN CERTIFICATE----- -----END CERTIFICATE-----"

 

Note:  when you see $ they are variables that you have to define in your script.  

In this particular case the Oracle SSL Port (Attribute.port) was 2484 and the Attribute.sslCertificate would have to be updated with an correct certificate.