My Oracle Support Banner

Accessing SSL Page on OHS 11.1.1.7 Fails with "Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced Settings and try connecting again" (Doc ID 2197082.1)

Last updated on JANUARY 28, 2021

Applies to:

Oracle HTTP Server - Version 11.1.1.7.0 to 11.1.1.7.0 [Release Oracle11g]
Information in this document applies to any platform.
- This may happen with other versions, but for different reasons, the solution here is specific to 11.1.1.7

Symptoms

On : 11.1.1.7.0 version, SSL Module

When attempting to access the https page, https://hostname.domain:port, the following error occurs.

Turn on TLS 1.0, TLS 1.1, and TLS 1.2 in Advanced Settings and try connecting
to https://hostname.domain:port again. If this error persists, it is possible that this site uses
an unsupported protocol or cipher suite such as RC4 which is not considered
secure. Please contact your site administration

 
The issue can be reproduced at will with the following steps:
1. Renewed the wallet in FMWC
2. Access SSL from browser


Changes

Different configurations are attempted in ssl.conf but it is found that SSL 3.0 needs to be disabled and only TLS 1.0 is supported in this release. 

Even with these changes the problem persists.

Cause

To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!


In this Document
Symptoms
Changes
Cause
Solution
References


My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.