E-Business Suite Release 12 will include a raft of new SSL-related features, including a new mod_ossl plug-in, use of Oracle Wallet Manager, and optional use of Oracle Certificate Authority for PKI deployments.

Oracle Certificate Authority Screenshot:


The most significant change for Secure Sockets Layer (SSL) support in E-Business Suite Release 12 is expected to be the use of the mod_ossl module for the Oracle HTTP Server.  Like mod_ssl, the mod_ossl plug-in enables strong cryptography for Oracle HTTP Server.  In contrast to the OpenSSL module, mod_ossl is based on the Oracle implementation of SSL, which supports SSL 3, and is based on Certicom and RSA Security technology.

Release 12 SSL certificates will be managed by the Oracle Wallet Manager 10g, which will be accessible via a graphical user interface (GUI) or via a command line interface (CLI), for all of you die-hard purists out there.

Forms Listener Servlet won’t need a separate certificate, and will share the same wallet as the Oracle HTTP Server. 

If you’re interested in deploying public key infrastructure (PKI) technologies in your organization, you will also have the option of using the Oracle Certificate Authority (OCA) to issue and manage X.509 digital client certificates.  End-users and servers will be able to use these digital certificates to authenticate themselves to Release 12.

The above is intended to outline our general product direction.  It is intended for information purposes only, and may not be incorporated into any contract.   It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision.  The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle.