Oracle B12255-01 Manuale Utente

Security Services Implemented Within Oracle HTTP Server

Oracle HTTP Server Administrator’s Guide

Oracle HTTP Server provides security services that enable you to protect your
server from unwanted users and malicious attacks. These security services ensure
secure data exchanged between client and the server.

mod_ossl

 enables secure connections between Oracle HTTP Server and a browser

client by using an Oracle-provided encryption mechanism over SSL. It also
provides data integrity and strong authentication for users and HTTP servers.

mod_ossl

 provides standard support for HTTPS protocol connections to Oracle

Database. It enables secure connections between Oracle HTTP Server and a browser
client by using an Oracle-provided encryption mechanism over SSL. It may also be
used for authentication over the Internet through the use of digital certificate
technology. It supports SSL v. 3.0, and provides:

■

Encrypted communication between client and server, using

encryption standards.

■

Integrity checking of client-server communication using

checksum algorithms.

■

Certificate management with Oracle

 identifies the differences between mod_ossl, and mod_ssl.

SSL versions supported

3.0

2.0, 3.0, TLS 1.0

Certificate management

Oracle Wallet

1, 2

1

Oracle Wallet Manager is a tool that manages certificates for mod_ossl.

2

Supports obfuscated passwords.

Text file