Oracle HTTP Server, Administrator'S Manual

Page: 142 / 224

Security Services Implemented Within Oracle HTTP Server
8-12 Oracle HTTP Server Administrator’s Guide
Security Services Implemented Within Oracle HTTP Server
Oracle HTTP Server provides security services that enable you to protect your
server from unwanted users and malicious attacks. These security services ensure
secure data exchanged between client and the server.
mod_ossl
enables secure connections between Oracle HTTP Server and a browser
client by using an Oracle-provided encryption mechanism over SSL. It also
provides data integrity and strong authentication for users and HTTP servers.
Using mod_ossl
mod_ossl
provides standard support for HTTPS protocol connections to Oracle
Database. It enables secure connections between Oracle HTTP Server and a browser
client by using an Oracle-provided encryption mechanism over SSL. It may also be
used for authentication over the Internet through the use of digital certificate
technology. It supports SSL v. 3.0, and provides:
■
Encrypted communication between client and server, using RSA or DES
encryption standards.
■
Integrity checking of client-server communication using MD5 or SHA
checksum algorithms.
■
Certificate management with Oracle
wallet
s.
Table 8–2 identifies the differences between
mod_ossl
, and
mod_ssl
.
Table 8–2 Differences between mod_ossl and mod_ssl
Feature mod_ossl mod_ssl
SSL versions supported 3.0 2.0, 3.0, TLS 1.0
Certificate management
Oracle Wallet
1, 2
1
Oracle Wallet Manager is a tool that manages certificates for mod_ossl.
2
Supports obfuscated passwords.
Text file