Security Services Implemented Within Oracle Http Server; Using Mod_Ossl - Oracle HTTP Server B12255-01 Administrator's Manual

Security Services Implemented Within Oracle HTTP Server

Security Services Implemented Within Oracle HTTP Server
Oracle HTTP Server provides security services that enable you to protect your
server from unwanted users and malicious attacks. These security services ensure
secure data exchanged between client and the server.
mod_ossl enables secure connections between Oracle HTTP Server and a browser
client by using an Oracle-provided encryption mechanism over SSL. It also
provides data integrity and strong authentication for users and HTTP servers.

Using mod_ossl

mod_ossl provides standard support for HTTPS protocol connections to Oracle
Database. It enables secure connections between Oracle HTTP Server and a browser
client by using an Oracle-provided encryption mechanism over SSL. It may also be
used for authentication over the Internet through the use of digital certificate
technology. It supports SSL v. 3.0, and provides:
I
I
I
Table 8–2
Table 8–2 Differences between mod_ossl and mod_ssl
Feature
SSL versions supported
Certificate management
1
Oracle Wallet Manager is a tool that manages certificates for mod_ossl.
2
Supports obfuscated passwords.
8-12 Oracle HTTP Server Administrator's Guide
Encrypted communication between client and server, using
encryption standards.
Integrity checking of client-server communication using
checksum algorithms.
Certificate management with Oracle wallets.
identifies the differences between mod_ossl, and mod_ssl.
MD5
mod_ossl
3.0
1, 2
Oracle Wallet
RSA or DES
or SHA
mod_ssl
2.0, 3.0, TLS 1.0
Text file