How to Configure Oracle HTTP Server to Use ECC Certificates and ECDHE_ECDSA CipherSuite (Doc ID 2110254.1)

Last updated on APRIL 09, 2024

Applies to:

Goal

ECDHE_ECDSA cipher suite options are provided with newer OHS versions in order to work with ECC certificates. This document will outline requirements and successful implementation of ECC certificates with ECDHE_ECDSA ciphers. Note ECC certificates and ECDHE_ECDSA ciphers are only supported on OHS 11.1.1.9, 12.1.2, 12.1.3, 12.2.1 and higher where TLS 1.2 protocol is also supported.

Notes:

- ECDHE_ECDSA ciphers require an ECC (ECDSA) certificate. They will not work with RSA certificates.
- ECDHE_RSA ciphers require an an RSA certificate. They will not work with ECC/ECDSA certificates.

You may also be interested in configuring SSL FIPS 140-2 Standards, which also includes support for ECC certificates:

<Note 2115681.1> SSL FIPS 140-2 Standard for Oracle HTTP Server 11.1.1.9

Solution

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.