How to check SSL/TLS Renegotiation Protocol Change?

Hi:
I am applying patch #12837860 (part of CPU jan 2012). The link below is the readme. I don't know how to check if I need SSL/TLS Renegotiation in step #8.
https://updates.oracle.com/Orion/Services/download?type=readme&aru=14106915#CHDECEJC
8.After patching, see My Oracle Support Note 1301699.1, How the SSL/TLS Renegotiation Protocol Change Affects Oracle HTTP Server for more information on using SSL with Oracle HTTP Server.
Would you please tell me how to check if I need and how to reset it? This is for EBS 12.1.3, DB 11.1.0.7, 10.1.2.3 and 10.1.34 on Linux.
Thank you for your help in advance.

Both. When you use the JSSE APIs you must explicitly initiate a rehandshake. Of course, if you are the responder and you receive a hello request or a client hello, you will respond to it. I'll have to think about if there is someway for the responder to reject a rehandshake attempt.

Similar Messages

Disable SSL/TLS renegotiation

Is it possible to disable SSL/TLS renegotiation in SJSWS 7.0?
I'm asking because of the recently published SSL/TLS protocol flaw (CVE-2009-3555) described here: [http://extendedsubset.com/?p=8|http://extendedsubset.com/?p=8]
Thanks and regards,
Jostein Tveit.

The TLS Renegotiation vulnerability is now addressed in Sun Web Server 7.0u7.
For more details, please refer to
[http://blogs.sun.com/jyrivirkki/entry/more_thoughts_on_web_server|http://blogs.sun.com/jyrivirkki/entry/more_thoughts_on_web_server] , forum announcement
[http://forums.sun.com/thread.jspa?threadID=5420698&tstart=0|http://forums.sun.com/thread.jspa?threadID=5420698&tstart=0] and
the blog [http://blogs.sun.com/webtier/entry/sun_web_server_7_0u7|http://blogs.sun.com/webtier/entry/sun_web_server_7_0u7] .

How to check the PR release Strategy change date?

hi,
how to check when the PR Release Strategy chagned by someone ...?
Regs,
S J Solanki

Hi
You can directly go into the Purcahse order & check for the Heder changes which will give the Changed Date
If you need to use two table to find out the date when the Strategy was changed.
Use Table CDHDR & CDPOS. Object key is the POurcahse order number
Thanks & regards
Kishore

How to check if user's password changed recently

How can we find it out for any user's password has been changed recently. ?

user590616 wrote:
How can we find it out for any user's password has been changed recently. ?Run below query, try it. By auditing also it is possible
SELECT user$.NAME, user$.PASSWORD, user$.ptime, user_history$.password_date
FROM SYS.user_history$, SYS.user$
WHERE user_history$.user# = user$.user#
source
http://oracleebusinesssuite.wordpress.com/2007/06/11/trace-the-password-change-history-of-database-accounts/

Open Slaes Order-How to check and close ?

Hi,
We have an open sales order which looks like the delivery is closed and 100% completed, but the sales order is still open!
Now i know this is an ongoing issue which has several possible reasons for and i have used a script to see what is returned but nothing.
Can you let me know how to check if there were any changes made in any particular Sales orders ?
eg comparing open items list of sales orders with something ?
Thank you in advance,

Hi,
Yes we ran the query in note 948670 and it came back zero for all?! See below for details.
This is what has thrown us so what is the simplest way to check why a SO remains open i.e how to check if there were any changes made?
Rdr u2013 0 Rows
Dln - 0 Rows
Rdn - 0 Rows
Por - 0 Rows
Pdn - 0 Rows
Rpd - 0 Rows

How Redirect browser(client) based on non-negotiable SSL/TLS protocol or cipher

Hi guys,
we have a security requirement wherein we have to force the browsers accessing our asp.net application hosted on windows server 2012 to have atleast tsl 1.1 , but we don't want to simply block the request, instead we would like to redirect the request
to a unsecured static html page with the instructions on how to get them onto tsl.
can any one help me here?>? actually i found a similar and exactly same thread on stackoverflow but i think that is probably directed towards linux family. http://serverfault.com/questions/591188/redirect-browser-based-on-non-negotiable-ssl-tls-protocol-or-cipher
please help me guys..
ps: i have posted the same question on IIS forum (http://forums.iis.net/t/1223352.aspx?How+Redirect+browser+client+based+on+non+negotiable+SSL+TLS+protocol+or+cipher+from+IIS)
and got a reply saying that it can be done at windows kernel level(possibly).

Hi,
As far as I know, once SSL handshake fails, no subsequent communication would occur between the server and client.
Therefore, as the way I see it, the goal cannot be achieved.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

How Redirect browser(client) based on non-negotiable SSL/TLS protocol

Hi guys,
we have a security requirement wherein we required to force the browsers accessing our application to have atleast tsl 1.1 , but we don't want to simply block the request, instead we would like to redirect the request to a unsecured static html page with the
instructions on how to get them onto tsl.
can any one help me here?>? actually i found a similar and exactly same thread on stackoverflow but i think that is probably directed towards linux family. http://serverfault.com/questions/591188/redirect-browser-based-on-non-negotiable-ssl-tls-protocol-or-cipher
ps: i have posted the same question on IIS forum (http://forums.iis.net/t/1223352.aspx?How+Redirect+browser+client+based+on+non+negotiable+SSL+TLS+protocol+or+cipher+from+IIS) and got a reply saying
that it can be done at windows kernel level(possibly by making use of
http.sys, ksecdd.sys and schannel).
can any one help me here guys.
Thanks,
Haroon

Hi,
As far as I know, once SSL handshake fails, no subsequent communication would occur between the server and client.
Therefore, as the way I see it, the goal cannot be achieved.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
[email protected]

How to disable SSL renegotiation in weblogic 10.3

Hi,
Can someone advise how to disable the SSL renegotiation in weblogic 10.3 server with jdk 1.6.0_35-b10 or 1.6.0_07-b06?
I tried to set up below properties when starting up weblogic server. But didn't work.
-Dweblogic.security.disableNullCipher=true -Dweblogic.ssl.AllowUnencryptedNullCipher=false -Dweblogic.security.ssl.enable.renegotiation=false -Dssl.debug=true -Dsun.security.ssl.allowUnsafeRenegotiation=false -Dsun.security.ssl.allowLegacyHelloMessages=false
Really appreciate if anyone can give any advise.

Thanks PratikS.
I tried to apply such patch in weblogic10.3.0. But got below NoSuchMethodError. Any idea? Any other patch needed?
<Jun 3, 2013 1:25:49 PM CST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.NoSuchMethodError:weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
java.lang.NoSuchMethodError: weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
at weblogic.security.utils.SSLContextManager.getChannelSSLContext(SSLCon
textManager.java:234)
at weblogic.security.utils.SSLContextManager.getSSLServerSocketFactory(S
SLContextManager.java:89)
at weblogic.server.channels.DynamicSSLListenThread.<init>(DynamicSSLList
enThread.java:59)
at weblogic.server.channels.DynamicListenThreadManager.createListener(Dy
namicListenThreadManager.java:289)
at weblogic.server.channels.DynamicListenThreadManager.start(DynamicList
enThreadManager.java:129)
Truncated. see log file for complete stacktrace
>

Checking the details of SSL/TLS

In most of common browsers you can check what cryptographic algorithms or security mechanisms are used (and choose them). For example in Firefox (or any other Mozilla software) there's about:config and you can find there things like these:
security.ssl3.dhersa_aes_128sha
security.ssl3.dhersa_aes_256sha
security.ssl3.dhersa_camellia_128sha
security.ssl3.dhersa_camellia_256sha
security.ssl3.ecdhecdsa_aes_128sha
security.ssl3.ecdhecdsa_aes_256sha
security.ssl3.ecdhecdsa_des_ede3sha
and so on.
Thanks to that i know which algorithms is my browser exactly using in SSL/TLS connections. If i think that for example "3DES with EC-Diffie-Hellman and SHA" isn't the most secure set of algorithms for me, i can turn it off. I'd like to know which algorithms do exactly Safari use? It's an important thing because for example FF still uses for example ARC4 algorithm which isn't highly secure.
How to check it?
Safari version: 4.0.4 (531.21.10)
Operating System: Windows XP
Best regards,
Michael

Hmmmm ... not a lot of info in the following document from the Safari Development Center, and it's a bit dated too, but just in case it's of any use as a starting point:
[What encryption, authentication, and proxy technologies does Safari support?|http://developer.apple.com/safari/library/qa/qa2009/qa1537.html]

How to check the status of TLS cert?

Hi all,
Except export (or copy) the cert from the configuration file, and view using openssl, is there anyway / tools to allow me check the TLS / SSL cert is being used?
As beside checking the cert is using by my IronPort, i would like to check the cert using by my partner as well (although i can configure IronPort to accept trust cert only, i still wanna verify it)
Thanks for advise.

You don't need to copy the cert out of your configuration. OpenSSL has an "s_client" subcommand which can open an SSL connection and verify the cert for you. It even knows how to do STARTTLS. Something like this ought to do it:
openssl s_client -starttls smtp -CAfile /path/to/ca/file -connect your.ironport:25
The /path/to/ca/file is necessary to provide openssl with a cache of root CA certs. You could use -CApath instead of -CAfile if you have a hashed directory of root CA certs instead of a single file containing them all.
You can also point this at your partner's SMTP server as well.

How to check 6 digital signals change value at the same time with PCI-6229??

I am using DAQ card PCI-6229.
Channel 1 generate a digital signal.
Channel 2,3,4,5,6,7 acquire digital signals.
I want to check:
1. Whether the rising edge of Channel 2,3,4,5,6,7 occures at the same time;
2. The time delay from the rising edge of Channel 1 to the rising edge of Channel 2,3,4,5,6,7 is within a certain range.
I know I can use counter to get the two edge seperation time delay. But I only have two counter, it is two time-consuming if I check one by one.
I don't know how to check the rising edge of 6 different channels occure at the same time.
Does anyone has any suggestions?
Thanks

Hello,
You can use the DAQ card's digital input change detection circuitry to detect changes in the input, you can then use a counter to measure the relative time between samples. Please read Page 6-9 DI Change Detection Applications for more information. Let me know if this helps
Christian A
National Instruments
Applications Engineer

How do I reconnect using SSL/TLS security in Dreamweaver using Windows 7?

I am using an old version of Dreamweaver on Windows 7. When I try to upload a file, I get a message saying that I need to reconnect using SSL/TLS security mechanisms. Is this a setting in Dreamweaver or Windows 7? Thanks for any help or suggestions.

It sounds like it is a requirement of the server, not Dreamweaver or Windows7
Dreamweaver, even older versions, can connect using both FTP and SFTP. But SSL/TLS are on the HTTP protocol, not FTP, so I don't understand why you would get such an error using DW file upload.

How I check in group by query the group change

How I check in group by query the group change
Hi master
Sir I have master detail table
This is my query
select rownum,chartofacc.accid,title,nvl(drbal,0),nvl(crbal,0),
(select case when nvl(sum(debit),0)-nvl(sum(credit),0)>0 then
nvl(sum(debit),0)-nvl(sum(credit),0)
else
0
end mfadrttt
from voudetail where voudetail.accid=chartofacc.accid) as mfadr,
(select case when nvl(sum(credit),0)-nvl(sum(debit),0)>0 then
nvl(sum(credit),0)-nvl(sum(debit),0)
else
0
end mfacrttt
from voudetail where voudetail.accid=chartofacc.accid) as mfacr
,nvl(debit,0),nvl(credit,0),voumaster.entdate,voumaster.vno from chartofacc ,accbal,voudetail,voumaster where chartofacc.accid=accbal.accid(+) and chartofacc.accid=voudetail.accid(+) and voumaster.vno=voudetail.vno order by chartofacc.accid,voumaster.entdate,voudetail.VNO;
Sir I need add opbal from master section to debit in detail section when new group start only after adding I use that column for accumulative total or running balance
If I get any method when group change system give me any key or indication then I use
Please give me idea in both field oracle sql and oracle report 6i
Thank
aamir

Hi,
Please send tables structures and sample data from that tables. And, of course what should be the output. :) Just sending your query won't help us to find a solution.
Peter D.

How to check changes in a HU done by users.

Hi Guys
How to check changes in a HU done by users.
Thanx in advance

Hi,
you can check changes of HUs in the change docs. You can see this in transaction humo -> mark the relevant HU -> menu: goto - chnge docs (F4).
Regards,
Ely

How to check changes done in close in period.

Hi
How to check the changes done for closeing period ( mmpv ).
Thanks
Prashant
Edited by: Prashant U. Maid on Dec 5, 2008 5:28 AM

Hi
You can check thru T.code MMRV the peroid status.If you need to see what are the changes and how has made the changes then go to T.code se11 and check the entries for the table MARV( Material Control Record ) for the desired company code.
Client
Company Code
Fiscal Year of Current Period
Current period (posting period)
Fiscal year of previous period
Month of previous period
Fiscal year of last period of previous year
Last month of previous year
Allow Posting to Previous Period (Backposting)
Indicator: Disallow backposting after a change of period
Name of Person Who Changed Object
Date of Last Change
Time
Indicator: Initialize company code
Fiscal year of period before last
Month of period before last
Fiscal year of last period of year before last
Last period of year before last
Fiscal year of 1st period with dynamic closing
1st period with dynamic closing
Fiscal Year of 1st Period After 4.6C Upgrade
1st Period After 4.6C Upgrade
Regards
suny

How to check SSL/TLS Renegotiation Protocol Change?

Similar Messages

Maybe you are looking for