Camunda SSL / TLS configuration on container with Oracle schema

Camunda 7 Topics Discussion & Questions
,
1

Hi Team,

Good day.

We have requirement of configuring SSL / TLS for Camunda-BPM on container with Oracle Schema.
I have configured sucessfully Camunda-BPM version: 7.15.6 on VM. I am not able to find any options for container part. Any help on it.

Configuration used:

OS: Ubuntu
Camunda-bpm: 7.15.6-ee with Apache Tomcat
DB: Oracle 19-C
SSL / TLS: Oracle Wallet

SSL configuration on VM

Added the below entry in server.xml file

vi /opt/camunda/server/apache-tomcat-9.0.36/conf/server.xml

Started camunda-bpm services.

Thanks
Sanjeev Kumar N

2

In the Camunda BPM configuration file (mine is in production.yml there are some properties to set:

server:
# https://docs.camunda.org/manual/latest/user-guide/camunda-bpm-run/#https
# do not use the provided certificate in production
  ssl:
    key-store: classpath:keystore.p12
    key-store-password: camunda
    key-store-type: pkcs12
    key-alias: camunda
    key-password: camunda
  port: 8443

# https://docs.camunda.org/manual/latest/user-guide/security/#http-header-security-in-webapps
# https://docs.camunda.org/manual/latest/webapps/shared-options/header-security/
  servlet.session.cookie:
    secure: true
    http-only: true

You will, of course, have to provide your own keystone and password, etc.

If you’re planning to use LetsEncrypt for the SSL cert, this post will help you with that aspect as well: Camunda Platform Run with Let's Encrypt

Best Regards,
dg

3

I am looking for, like I have configured SSL / TLS on Oracle server and
we need to integrate Oracle SSL with Camunda container where handshake or Communication
between Camunda Container and Oracle Schema will happen securely.

I was able to achieve this on server, but on container its failing.

So any help on this.

4

Ahh, this seems more like you need to change your JDBC driver connection parameters to connect using SSL. For that, I think this post over at Oracle might be what you’re looking for.

Hope it helps,
dg

5