enabling TLS on 12.2.6

[AKHAN]

Hi Arslan,

This is for the first time i am submitting my question to your Forum.

I am planning to enable TLS by following "Enabling TLS in Oracle E-Business Suite Release 12.2 (Doc ID 1367293.1)" from Section 5: Enabling TLS 1.2 with Backward Compatibility

i wanted to know the brief steps about the setup like what are the things i need to take care about versions, patches and so on before i start.


My current setup for EBS 12.2.6.
java version "1.7.0_121"
Java(TM) SE Runtime Environment (build 1.7.0_121-b32)
Java HotSpot(TM) Server VM (build 24.121-b32, mixed mode)

Oracle Home = /u02/oracle/fs2/FMW_Home/webtier.
Product Version = 11.1.1.9.0
Checking required bugfixes for FMW - Web Tier 11.1.1.9.0.
All required bugfixes are present for FMW - Web Tier.
These results have been stored in the database.
The use of TLS 1.2 requires Oracle Fusion Middleware 11.1.1.9

AD & TXK on C.8.


Before i start do i need to upgrade the AD & TXK to Delta 10. or i can proceed with C.8?

Looking forward to your reply. I will continue further once i get a reply from you.

Best regards,

AKHAN

[ErmanArslansOracleBlog]

Hi,

All the required things are written in note "Enabling TLS in Oracle E-Business Suite Release 12.2 (Doc ID 1367293.1)"
What you do is , prepare your source env (patches and son on) , create a ceritificate request, import the certificates(once created and delivered to you) and do some other SSL related things as documented in the above note.

----

*I recommend that you apply the latest AD and TXK Delta Release Update Packs.. Currently the latest RUPS are R12.AD.C.Delta.10 (Patch 25820806) and R12.TXK.C.Delta.10 (Patch 25828573).

As these SSL things are sensitive, I recommend you to apply those patches and be in the latest technology level.

*After the SSL enablement, I recommend you to do a full test..
Standard login tests, OAF&Forms navigation tests, Notification mailer Inbound and Outbound tests and etc.

*You may need to consider implementing SSL in Workflow mailer also.

[Muthu]

Hello,

May I know how to find out the current version of TLS on the EBS R12.2 ?

Thanks
Muthu

[ErmanArslansOracleBlog]

One quick way is using nmap..

just use nmap to check.. (run the relevant command and analyze its output.. the oputput will tell you that..)

nmap --script ssl-enum-ciphers -p <your_ebs_login_url_port> <your_ebs_login_url>

Example:

nmap --script ssl-enum-ciphers -p 443 testebs.companyrtr.com

[ErmanArslansOracleBlog]

You can also use openssl

ex:

openssl s_client -connect server_name:port -tls1