My Oracle Support Banner

Support Status of New SSL Features Released with Oracle HTTP Server and Oracle Web Cache 11.1.1.9 (Doc ID 2041410.1)

Last updated on MAY 27, 2020

Applies to:

Oracle HTTP Server - Version 11.1.1.2.0 to 11.1.1.9.0 [Release Oracle11g]
Oracle Fusion Middleware - Version 11.1.1.2.0 to 11.1.1.9.0 [Release Oracle11g]
Web Cache - Version 11.1.1.2.0 to 11.1.1.9.0 [Release Oracle11g]
Oracle Forms - Version 11.1.2.0.0 to 11.1.2.2.0 [Release 11g]
Information in this document applies to any platform.
Applies to Oracle HTTP Server and Oracle Web Cache in all Oracle Fusion Middleware installations, including but not limited to:
- Oracle Web-Tier 11g (11.1.1)
- Oracle Identity Management 11g (11.1.1)
- Oracle Forms & Reports 11g R2 (11.1.2)
- Oracle Cloud Control 12c (12.1)
- Oracle Portal, Forms, Reports & Discoverer (PFRD) 11g (11.1.1)
- Oracle Business Intelligence Enterprise Edition (OBIEE) 11g (11.1.1)

Details

New SSL features have been released with the 11.1.1.9 Patch Set release. This document is providing the current status and the Statement of Direction (SoD) for the Web-Tier based products such as Oracle HTTP Server and Oracle Web Cache specifically regarding the new SSL features. Full Web-Tier SoD can be found at <Note 1576588.1> , "Oracle Web Tier - Statement of Direction".

  

Background

Oracle HTTP Server and Oracle Web Cache up to and including 11.1.1.7 provided support for older SSL standards. (e.g. SSL 3.0, TLS 1.0, older ciphers and certificate types). Installed with OHS and Web Cache are  OPMN and a Network/SSL layer where the same SSL specifications are used. Because of industry trends and changing standards, there became a need to update the SSL layer for these components in order to provide new SSL features beginning with 11.1.1.9 and 12c releases.

Current Status

Versions where Error Correction Support has expired (pre-11.1.1.7) should upgrade as soon as possible to maintain a secure level. Oracle HTTP Server and Oracle Web Cache 11.1.1.7 continues to support TLS 1.0 protocol and is recommended to follow the Critical Patch Update program for further security patching. Oracle HTTP Server and Oracle Web Cache 11.1.1.9 - the latest Patch Set release, see <Note 2003468.1> - now offers the following new features:

Actions

Statement of Direction

These and other new features which come available are limited only to the latest release 11.1.1.9 or above and cannot be backported to older releases including the 11.1.1.7 release. Updated SSL features are also included in Oracle HTTP Server 12c. If you have currently configured SSL (HTTPS) within Oracle HTTP Server and/or Oracle Web Cache 11.1.1.7 and you want to leverage the new capabilities currently available within Oracle HTTP Server 11.1.1.9/12c, then you may have one of the following options.

OPTIONS:

<Note 2067900.1> Oracle Fusion Middleware 12c Release 2 (12.2) Announcements

 

Notes:

-- If you have installed a configured 11.1.1.7 environment, it is not supported to disable components and re-configure (aka "re-wire") a remote Oracle HTTP Server 11.1.1.9 or 12c to your existing environment. This may produce unexpected results and attempting to do so is not supported unless it is otherwise certified and documented by Oracle for all products/applications installed and deployed. This is not planned for reasons related to new SSL features. It is recommended to stay on your configured versions and maintain with proactive security patches until such time you can perform a full upgrade.

-- If you have an 11g or 12c environment combined with 10g (e.g. SSO 10g), it is not certified/supported to use 11.1.1.9 or 12c in these situations and you will have compatibility issues between components. 

-- In some cases, there isn't an 11.1.1.9 release available or certified. If remaining on version 11.1.1.7, it is fully supported through Premier Support due to an extension granted. This means security patches will be included for both 11.1.1.7 and 11.1.1.9 through the Critical Patch Update program. For details and exceptions on this extension, see <Note 1585582.1> , "Extended Fusion Middleware 11g Lifetime Support Policy Dates".

 

 

Contacts

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Details
Actions
Contacts
References

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.