How to disable SSL v3 for sun os 5.6 (OAS 4.0.8), I am facing POODLE vulnerability issue?

my Website is hosted on Sun OS 5.06 (OAS 4.0.8) and using web server : Oracle_Web_Listener/4.0.8. Website is configured to use https for secure pages and it was working fine from last 10 years but suddenly i am getting complaints from my customers that they can not browse site on chrome version 40 and above and firefox 34 and above.
I searched for this issue and found that there is POODLE attack which may causing this issue. now the only solution i can see is to disable SSL v3 on server.
Can any help me out with the process or an idea, How to disable SSL V3 on this Olde server? its sun microsystem server.

Hi Aamir,
   This is old software, been a while since I saw one of these.
    Normally when SSL was setup there were two listeners, one with SSL and one without, in a different port, so you could try to find this second port, which may work without any need to change the configuration.
    Else, try to check on the OAS manager (Usually on port 8888), the HTTP listener -> WWW -> Network, if there is a setup only for the SSL port, you will need to add a new line, with the same configuration, but a different port and the security disabled.
    Also, there may be some setting on the application itself for the url path. If so, when you navigate in the application it will try to redirect you back to the SSL port. In that case you will need to figure out where to change that, which depend on the application itself.
   Found this page on google with the process to setup SSL on OAS 4.0, you need to do the inverse of step 5.
WoSign Support: SSL Certificates Installation Instruction - Oracle Web Server (OAS 4.0.8)
Regards,
Luis

Similar Messages

How to setup SSL cert for SharePoint apps in a three tier farm with nlb

I am having trouble understanding how to setup the SSL certificate on SharePoint apps or in general its configuration

Please check the below thread..
https://social.technet.microsoft.com/Forums/sharepoint/en-US/53465d30-10b2-48c9-9541-5ade738156b4/how-to-setup-ssl-cert-for-apps
Don't forget to mark it as an Answer if it resolves your issue and Vote Me as helpful if it useful.
Mahesh

Does Anyone Knows How To Disable The "Check For Updates" Option in Adobe Edge Code and Reflow?

Does Anyone Knows How To Disable The "Check For Updates" Option in Adobe Edge Code and Reflow?
Thanks in Advance

I don't think there is a way for Edge Code. I'm not sure about Reflow.
Why don't you just upgrade? That will stop the notifications.
Randy

How to disable SSL renegotiation in weblogic 10.3

Hi,
Can someone advise how to disable the SSL renegotiation in weblogic 10.3 server with jdk 1.6.0_35-b10 or 1.6.0_07-b06?
I tried to set up below properties when starting up weblogic server. But didn't work.
-Dweblogic.security.disableNullCipher=true -Dweblogic.ssl.AllowUnencryptedNullCipher=false -Dweblogic.security.ssl.enable.renegotiation=false -Dssl.debug=true -Dsun.security.ssl.allowUnsafeRenegotiation=false -Dsun.security.ssl.allowLegacyHelloMessages=false
Really appreciate if anyone can give any advise.

Thanks PratikS.
I tried to apply such patch in weblogic10.3.0. But got below NoSuchMethodError. Any idea? Any other patch needed?
<Jun 3, 2013 1:25:49 PM CST> <Critical> <WebLogicServer> <BEA-000386> <Server subsystem failed. Reason: java.lang.NoSuchMethodError:weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
java.lang.NoSuchMethodError: weblogic.protocol.ServerChannel.getConfig()Lweblogic/management/configuration/NetworkAccessPointMBean;
at weblogic.security.utils.SSLContextManager.getChannelSSLContext(SSLCon
textManager.java:234)
at weblogic.security.utils.SSLContextManager.getSSLServerSocketFactory(S
SLContextManager.java:89)
at weblogic.server.channels.DynamicSSLListenThread.<init>(DynamicSSLList
enThread.java:59)
at weblogic.server.channels.DynamicListenThreadManager.createListener(Dy
namicListenThreadManager.java:289)
at weblogic.server.channels.DynamicListenThreadManager.start(DynamicList
enThreadManager.java:129)
Truncated. see log file for complete stacktrace
>

How to disable SSL Renegotiation

Hi All,
A security audit discovered one of our application's SSL termination, resides our ACE, supports SSL Renegotiation, which is, in their opinion, a security risk. As far I know, it is not supported to turn off this feature on ACE. Anyway, I want to be sure, before I reports this to the auditors. If you know, how to disable it, please share with me!
We are running 3.0(0)A4(2.2).
Regards,
Tamas

Thank you for your answer.
Our running version is A5(2.0). It should have rehandshake disabled by default.
Here are the outputs from some commands:
ACE# sh run | i rehand
Generating configuration....
ACE# sh parameter-map SSL_TERMINATION
Parameter-map : SSL_TERMINATION
Description : -
Type : ssl
    version                            : all
    close-protocol                     : none
    expired-crl                        : allow
    cdp-errors                         : reject
    authentication-failure any         : reject
    session-cache timeout              : disabled
    queue-delay timeout                : disabled
    Accepted cipher list:
      RSA_WITH_RC4_128_MD5 (priority:1)
      RSA_WITH_RC4_128_SHA (priority:1)
      RSA_WITH_AES_128_CBC_SHA (priority:10)
      RSA_WITH_AES_256_CBC_SHA (priority:1)
    rehandshake                        : disabled
    purpose-check                      : enabled
As you can see there is no configuration command to activate rehandshake.
So my question is if the rehandshake command only affects the ACE´s ability to do a rehandshake from its own side, but always lets the client do it if it wants to.
It isn't easy to find details about this. And the only place where I have found i little bit of details says "Enables rehandshake, allowing the ACE to send an SSL HelloRequest message to its peer to restart SSL handshake negotiation", so it might just be in that direction.
A followup question would be if it is possible to prevent the client from doing a rehandshake by a command in the ACE.
If this behaviour is not the intention this has to be a bug and I would go to the TAC with it.
I just want to know how the ACE is intended to work before I do that.
Best Regards,
/Torbjörn

How to disable webview cache for Windows Phone 8.1 Runtime universal app?

Is it possible to disable cache for the Webview control for a Windows Phone 8.1 runtime universal app? My App seems to be remembering the information it received the first time. My app logs me into a service and when I go back to rerun app in the emulator
(without completing shutting down the emulator) it logs me in automatically rather than giving me the prompt. This behavior is in the NavigationCompleted handler if that helps explain a bit more on where I am hitting this issue.
If I were to shut off the emulator completely and then restart it then I am prompted for the login name and password again. I have gotten over this cache issue, when I was using the HttpClient in other part of my app, by sending the no-cache in the header
as:
client.DefaultRequestHeaders.Add("Cache-Control", "no-cache");
Can I do something similar for the webview control?
thanks
mujno

Hi mujno,
As I know currently there is no programmatically way to clean cache for WebView, see Matt's blog:How to clear the WebView cache
However if you are developing an enterprise app, you should be able to invoke some scripts to clean for you, see this for more information:Brokered
Windows Runtime Components for side-loaded Windows Store apps
--James
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to disable keyboard shortcut for Type-And-Transfer

Hi,
I'm trying to create a macro in Excel that I want to use the ctrl+shft+h keyboard shortcut. However, Lenovo's Type-and-Transfer tool has hijacked that shortcut so everytime I try to use the shortcut within Excel it launches the Type-and-Transfer tool. I've looked everywhere and cannot, for the life of me, figure out how to disable this keyboard shortcut from launching the Type-and-Transfer tool. Anybody have any idea?
Thanks in advance,
jd

Hi,
here is what I would check in:
Registry:
- HKEY_CURRENT_USER\Software\IBM
- HKEY_CURRENT_USER\Software\LENOVO
- HKEY_LOCAL_MACHINE\SOFTWARE\IBM
- HKEY_LOCAL_MACHINE\SOFTWARE\Lenovo
<sorry as I don't havea system with this shortcut type I cannot find the exact same key combination>
My second thought is going more in the direction of an application, that is called Keyboard Customizer
Try this one, if that will fit your request.
Let me know any update, that you can give on this situation.
Cheers

SRQM_NOTES - how to disable the tooltip for the textfield

Hello,
in SRQM_NOTES the textarea represents this contextnote attribute:
//BTTEXT/STRUCT.CONC_LINES
How can we disable the tooltip for this textarea.
It is not usable that there is a tooltip window in the way while a user tries to read the text behind the tooltip.
Thank you.
Kind regards
Manfred

Hi
At the moment GET_P looks like this:
METHOD get_p_conc_lines.
CASE iv_property.
    WHEN if_bsp_wd_model_setter_getter=>fp_fieldtype.
      rv_value = cl_bsp_dlc_view_descriptor=>field_type_textarea.
    WHEN if_bsp_wd_model_setter_getter=>fp_textarea_rows.
      rv_value = 20.
    WHEN if_bsp_wd_model_setter_getter=>fp_tooltip.
      rv_value = space.
ENDCASE.
ENDMETHOD.
Thank you
Kind regards
Manfred

How to disable Transactional Iview for a particular user in portal

Hi Experts,
I have a scenario
i have created a user group for all the employees and assigned all the transactional roles to it, now the issue is they wanted to disable the Transactional Iview to particular user for a certain period and enable it later on, how is it possible?
As per my knowledge we have to assign that particular Role individually to all the user, instead of user group and make the iview invisible when required.
Instead of this is there any other Easy Method that i can approach the issue easily?
Thanks Inadvance
Siva

Hi Siva,
You can have two types of groups: one Group with users having access to transactional iview and another devoid of this access.
You can assign users to group with transactional role and vice versa. By the way of user groups, we will have more control over the transaction role access.
Regards,
Ganesh N

How to disable delivering plant for sales organisation and material

HI
We usually deliver via 2 delivering plants and changing them via MM02 according to availability Theese 2 delivering plants are connected with many sales organisations
It is possible to disable delivering plant for some products to specific sales organisation , so that customer service is not able to order a this material from a plant for this sales organisation? Other sales organisation should be still able to order the product from that plant.
I can imagine to block the whole delivering plant for a material. But how is possible to do so on the level of sales organisarion-material-plant?
Thanks a lot
Sona

With standard, it is not possible. You can try with USEREXIT_CHECK_VBAP in the program MV45AFZB
G. Lakshmipathi

How to disable touch screen for touchsmart 610

HP TouchSmart 610
Windows 7 64-bit
I need to touch the screen without causing stuff to move.

Not sure what you ? is since your subjet says : how to disable then your statement in the body of the form says " touch the screen without causing stuff to move" so confused.
What I suggest is pick your model here from the Model 610 page and look for what your asking within that page on your system.
http://h10025.www1.hp.com/ewfrf/wc/pfinder?cc=us&dlc=en&lc=en&tool=&query=touchsmart+610#N194
Hope it helps

How to disable selection parameter for a particular radio button

hi experts,
How to disable selection parameter(bukrs) for a particular radio button 'radio1'.

hi,
Check This Code (copy paste and run it ).
U have to use MODIF ID along with the parameter.
*----------------Option
*---Background
*---Summary Report
PARAMETERS : p_backgd RADIOBUTTON GROUP rad1
 USER-COMMAND radio DEFAULT 'X'.
PARAMETERS : p_sumrep RADIOBUTTON GROUP rad1 .
*----------------File
PARAMETERS : p_sumfl TYPE char255 modif id ABC .
PARAMETERS : p_detfl TYPE char255 modif id ABC.
*---------------Activate & Deactivate Screen Fields--------------------*
AT SELECTION-SCREEN OUTPUT.
LOOP AT SCREEN.
 IF p_sumrep = 'X'.
 IF screen-group1 = 'ABC'.
 screen-input = '0'.
 MODIFY SCREEN.
 ENDIF.
 ENDIF.
ENDLOOP.
Please Reward Points & Mark Helpful Answers
To mark Helpful Answers ;click radio Button next to the post.
RadioButtons
o Helpful Answer
o Very helpful Answer
o Problem Solved.
Click any of the above button next to the post; as per the anwers
To close the thread; Click Probelm solved Radio Button next to the post ,
which u feel is best possible answers

How To Restrict SSL Ciphers for iCal and Address Book

Does anyone know how to set the allowed SSL ciphers for the Address Book and iCal services on Snow Leopard Server?

Hi,
There's a dedicated forum for Server customers.
Good luck,
S.

How to disable memory cache for SL410?

Hi,
My lenovo thinkpad SL410 has Windows 7 prof edition as its OS. But in the last few months it frequently crashes. Many times when I use Chrome browser status would indicate AppCache, and that's an evil OMEN for its usually the prelude of crash. Other browser may or may not have such issue, however, Chrome is really my preferred web browser.
Some research seems to suggest disabling memory cache via BIO setup would resolve it. And here's my lenovo's BIO info:
Version: 1.23
Date: 2009-10-19
but it does not have any info as to who's its maker or the like. And I don't see any option in the BIO setup that would allow me to disable cache. So, two questions,
a) Is it possible to disable memory cache for SL410?
b) if so how?
Thanks.

Hi mujno,
As I know currently there is no programmatically way to clean cache for WebView, see Matt's blog:How to clear the WebView cache
However if you are developing an enterprise app, you should be able to invoke some scripts to clean for you, see this for more information:Brokered
Windows Runtime Components for side-loaded Windows Store apps
--James
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

How to disable an "open for editing" option in word/excel viewers

Hi All. It's my first post on here so please be gentle! ;-)
We have a situation on an RDS server whereby the majority of the users simply need Excel Viewer to review reports generated from an application, with only a very small number of users that actually need to amend and save these reports within Excel 2013 i.e.
a version of Excel that we need a license for.
There is an option within Excel Viewer that says "Open for editing" and unfortunately, because we also have Excel installed on the server this allows them to launch the Excel 2013 application i.e. full-blown Excel.
Is there a way that I can disable this menu item, or can anyone suggest a way that I can stop users from launching Excel 2013? I suspect that I can use AppLocker to prevent them calling on the excel.exe, but I was rather hoping that there was a more
elegant way i.e. to simply disable the menu item in Excel Viewer.
Any help / suggestions would be greatly appreciated.

It may be difficult for us to disable the "Open for Editing" option in Excel Viewer.
If you want to allow only view access to certain files, you should consider controlling access to the file location with network security. Grant the "view only" users with Read-only permission to access the document file location.

How to disable SSL v3 for sun os 5.6 (OAS 4.0.8), I am facing POODLE vulnerability issue?

Similar Messages

Maybe you are looking for