mozilla / ssl-config-generator

Mozilla SSL Configuration Generator
https://ssl-config.mozilla.org/
Mozilla Public License 2.0
374 stars 60 forks source link

Disable OpenSSL for Oracle HTTP #266

Closed janbrasna closed 1 month ago

janbrasna commented 1 month ago

OHS uses mod_ossl and not mod_ssl.

Rationale

https://docs.oracle.com/en/middleware/fusion-middleware/web-tier/12.2.1.4/administer-ohs/under_mods.html

mod_ossl Module—Enables Cryptography (SSL) The mod_ossl module enables strong cryptography for Oracle HTTP Server. It is a plug-in to Oracle HTTP Server that enables the server to use SSL. The functionality of this module is similar to the functionality of Apache’s mod_ssl module. However, the cryptography engine used in the mod_ossl module differs from that of the mod_ssl module. The mod_ossl module uses Oracle’s Secure Socket Layer, which is based on RSA security technology, whereas the mod_ssl module relies on OpenSSL to provide the cryptography engine. […] It uses a version of the underlying SSL libraries that has gone through formal FIPS certification. […] Oracle no longer supports the mod_ssl module.

Significant changes and points to review

This disables OpenSSL–specific targeting (as upcoming SECLEVEL etc.) and changes to IANA naming, according to: