Attention: To align with new corporate security policies, and to match policies adopted by other communities within Oracle, the My Oracle Support Community access requirements will change beginning September 18, 2025. MOSC will now require that member accounts in our community be associated to a *corporate* email address. This means that users with generic domains (such as gmail.com, yahoo.com, and others) will no longer be granted access to the discussion forums and ideas labs. If this policy affects you, act now to change the email address that is associated with your Oracle (and community) account. Alternatively, you can opt to create a new Oracle account that uses your corporate email domain.

PeopleTools and Lifecycle Management - PSFT (MOSC)

How to check if SSLv3 is disabled on a server (or a load balancer)

Jul 25, 2017 8:15AM edited Jul 25, 2017 8:15AM in PeopleTools and Lifecycle Management - PSFT (MOSC)

You can test with a simple command line - thanks to open ssl - if SSLv3 is disabled?

NOTE: You should dislable SSLv3 due to Poodle vulnerability https://en.wikipedia.org/wiki/POODLE

If disabled you should have a "CONNECTED" message, then a "handshake failure" message like this:

psadm2@linuxserver:/peoplesoft/hr92/common/pt855> openssl s_client -connect peoplesoft-hrms.mydomain.net:443 -ssl3

CONNECTED(00000003)

1264862214094410:SSL routines:SSL3_READ_BYTES:sslv3 alert handshake failure:s3_pkt.c:1126:SSL alert number 40

126486221409E0E5:SSL routines:SSL3_WRITE_BYTES:ssl handshake failure:s3_pkt.c:547:

Tagged:

legacy_documents

0

Howdy, Stranger!

To view full details, sign in to My Oracle Support Community.

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month