3 Replies Latest reply on Jun 17, 2015 12:42 PM by Srini Chavali-Oracle

    Enabling TLS3.0 in R12.1.3 as SSL -SHA-2 is not supported

    user12868605

      Hi,

       

      We have R12.1.3 and 11.2.0.3 Database on Linux running on mulitnode enviuronment and have a load balancer for the application as we have a two node shared appl_top.

       

      We have been using SSL and till now have had SHA-1,Now as part of the organization we have to implement SHA-256 compatible certiuficates.

       

      We tried and import to wallet fails as this is known bug and Oracle does nto support SHA-256 for R12.1.3

       

      TLS3.0 is one option which we are thinking of going for
      and need help with the detailed steps and approach

       

      I have these documents however I am not able to get a picture of what is required and what is not required  and how will TLS3.0 setup vary from SSL which we normally follow

       

      . Upgrading to the Latest OracleAS 10g 10.1.3.x Patch Set in Oracle E-Business Suite Release 12 ( Doc ID 454811.1 )

       

      "Oracle E-Business Suite Releases 11i and 12 Critical Patch Update Knowledge Document (October 2014) ( Doc ID 1923805.1 )" and apply

       

      CVE-2014-3566 - Instructions to Mitigate the SSLv3 Vulnerability ("POODLE Attack") in Oracle E-Business Suite ( Doc ID 1937646.1 )- This is a minor change.


      pls help with the detailed approach or any other suggestions for overcoming SHA2 incompatibility