Re: Applying missing patches ETCC

Posted by ErmanArslansOracleBlog on Sep 26, 2021; 6:47pm
URL: http://erman-arslan-s-oracle-forum.124.s1.nabble.com/Applying-missing-patches-ETCC-tp10286p10299.html

post req 1 is for -> post-release certification where patches and steps are required when configuring SSL to meet FIPS 140-2 standards.

If you will never user SSL, you may skip it. (it is your risk bytheway, I m just giving my opinion)

post req 2 is for using the security enhancements delivered with this patch..It is for -> new configuration requirements and options made available with the Oracle HTTP Server (OHS) Bundle Patches for 11.1.1.9.

So you should check the 2626956.1 and consider if it is better to do some conf changes in your env.. So in my opinion, it is again up to you, it depends on your security requirements to do the things given in that doc...

post req 3 is not a problem for you I guess :)