Web Server Security

During the installation, when you are in the Typical Installation mode, HTTPS is selected for you (by default) as the running mode of your system. We recommend that you maintain the default (HTTPS) to create secure connections over the network. If you have a specific reason for not using the default, you can alternately select HTTP (unsecured). See the Configure Web Server Security section of your Oracle Communications Session Delivery Manager Installation Guide for more information.

HTTPS Certificate Support

Note:

OpenSSL 1.0.1e-fips or later must be installed on your linux server in order to use the HTTPS service on the Apache web server.
Oracle Communications Session Delivery Manager fully supports X.509 certificates and the following certificate extensions are supported through HTTPS:
  • .csr—Certificate signing request certificate used in public key infrastructure (PKI) systems.
  • .cer—Internet security certificate (CER) in sockets layer (SSL) format that is used by web servers to help verify the identity and security of a site in question. SSL certificates are provided by a third-party security certificate authority such as VeriSign, GlobalSign or Thawte.
  • .crt—Certificate is used with a web browser to verify the authenticity of a secure website, and is distributed by certificate authority (CA) companies such as GlobalSign, VeriSign and Thawte. CRT files allow a web browser to connect securely using SSL, and can be viewed by clicking the lock icon within your web browser.
  • .der—Distinguished encoding rules certificate provides a method for encoding a data object, such as an X.509 certificate, to be digitally signed or to have its signature verified.

Set the Maximum Upload File Size Limit

You can optionally configure the upload file-size limit, from 2 to 100 gigabytes (GB), for certificate files being uploaded to the web server for its secure operation. See the Configure Web Server Security section of your Oracle Communications Session Delivery Manager Installation Guide for more information.