Note:376700.1 - MUST we use mod_ssl instead of mod_ossl?
We recently applied the storm of 10.1.3 patches as required by the October 2017 CPU:
October 2017 CPU patches for 10.1.3 ORACLE_HOME
Patch 21845960: CPUOCT2015 TRACKING BUG FOR APPLICATION SERVER 10.1.3.5 UNIX
Patch 25859264: DELIVER OPENSSL 1.0.2K SECURITY PATCH FOR 10G EBS FOR OHS
Patch 6640838: OUI prerequisite requirement for 24484104
Patch 24484104: TRACKING BUG FOR OPMN DELIVERABLES: OHS 10G TLS1.2 SUPPORT FOR EBS
I also updated the ssl.conf to stop using sslv3 and favor TLS:
SSLCipherSuite HIGH:MEDIUM:!aNULL:!RC4:!3DES:!SEED:!IDEA:!CAMELLIA:+HIGH:+MEDIUM
SSLProtocol all -SSLv2 -SSLv3
What I did NOT do is migrate from mod_ossl to mod_ssl since this would require me to get new certificates. I'm staying with "SSLWallet = My current owm style wallet".