Upcoming Changes to Supported TLS / SSL Cipher Suites (Doc ID 2979893.1)

Last updated on APRIL 02, 2025

Applies to:

Details

Safe harbor statement: This information is supplied for reference purposes only and is subject to change at any time without prior notice.

Oracle OTM / GTM Cloud is removing 10 deprecated TLS / SSL Ciphers. These are the 10 ciphers which are being removed:

Iana_cipher_name / openssl_cipher_name
TLS_RSA_WITH_AES_128_GCM_SHA256 / AES128-GCM-SHA256
TLS_RSA_WITH_AES_128_CBC_SHA256 / AES128-SHA256
TLS_RSA_WITH_AES_256_GCM_SHA384 / AES256-GCM-SHA384
TLS_RSA_WITH_AES_256_CBC_SHA256 / AES256-SHA256
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 / DHE-RSA-AES128-SHA256
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 / DHE-RSA-AES256-SHA256
TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256 / ECDHE-ECDSA-AES128-SHA256
TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384 / ECDHE-ECDSA-AES256-SHA384
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 / ECDHE-RSA-AES128-SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 / ECDHE-RSA-AES256-SHA384

Actions

Customers need to make sure that their inbound client supports at least one of these TLS / SSL Ciphers:

Iana_cipher_name / openssl_cipher_name
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 / DHE-RSA-AES128-GCM-SHA256
DHE-RSA-AES128-GCM-SHA256
DHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES128-GCM-SHA256
ECDHE-ECDSA-AES256-GCM-SHA384
ECDHE-RSA-AES128-GCM-SHA256
ECDHE-RSA-AES256-GCM-SHA384

Contacts

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.