Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there a way to enable TLS 1.1 on Oracle HTTP Server (which I believe is a custom version of Apache)? Right now I'm getting a SSLv3 response and need to use TLS 1.1

share|improve this question
add comment

migrated from stackoverflow.com Jun 18 '10 at 5:35

This question came from our site for professional and enthusiast programmers.

1 Answer

Are you sure you want to do that? There's very limited browser support for TLS1.1. Wikipedia has the following list: http://en.wikipedia.org/wiki/Transport_Layer_Security#Browser_implementations

  • Apple's Safari supports TLS, but it’s not officially specified which version.[22] On Operating Systems(Safari uses the TLS implementation of the underlying Operating System) like Mac OS X 10.5.8, Mac OS X 10.6.6, Windows XP, Windows Vista or Windows 7, Safari 5 has been reported to support TLS 1.0.[23]
  • Mozilla Firefox, versions 2 and above, support TLS 1.0.[24] As of December 2010, Firefox does not support TLS 1.1 or 1.2.[25]
  • Microsoft Internet Explorer always uses the TLS implementation of the underlying Microsoft Windows Operating System, a service called SChannel Security Service Provider. Internet Explorer 8 in Windows 7 and Windows Server 2008 R2 supports TLS 1.2. Windows 7 and Windows Server 2008R2 use the same code (Microsoft Windows Version 6.1 (build 7600)) similar to how Windows Vista sp1 uses the same code as Windows 2008 Server.[26]
  • As of Presto 2.2, featured in Opera 10, Opera supports TLS 1.2.[27]

Unless you really tightly control both ends you should re-examine the requirements for TLS1.1.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.