FMW 11.1.1.7.0 - Applying Oracle HTTP Server Patch 20394174: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 19948000 17905017

FMW 11.1.1.7.0 - Applying Oracle HTTP Server Patch 20394174: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 19948000 17905017


- Ensure all patch requisites highlighted in patch README file are met.

- Set the ORACLE_HOME environment variable, say "[MW_HOME]/Oracle_WT1" directory.

- Stop all opmn, OHS services.


Applying Patch 20394174


1. Download Patch 20394174 and unzip patch zip file p20394174_111170_Linux-x86-64.zip into PATCH_TOP.

   $ unzip -d PATCH_TOP p20394174_111170_Linux-x86-64.zip

2. Set your current directory to the directory where the patch is located.
   cd PATCH_TOP/20394174

3. Run OPatch to apply the patch.

 $ opatch apply


Post Patch Steps:

- Disable SSLv2 and SSLv3 from your configuration.

- Remove ciphers that are deprecated in this release.

(Refer to the patch README file for more details on the post patching steps)

- Start all opmn, OHS services.


Rollback Patch 20394174:


If any issues post patching and a rollback is needed, remove the patch as follows:


- Set the ORACLE_HOME environment variable, say "[MW_HOME]/Oracle_WT1" directory.

- Stop all opmn, OHS services.

- Change to the directory where the patch was unzipped.
   cd PATCH_TOP/20394174

- Run OPatch to deinstall the patch.

$ opatch rollback -id 20394174

- Restart all opmn, OHS services.

Related Posts:

FMW 11.1.1.7.0 - Applying Patch 20493440: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 18423801 18025250

FMW 11.1.1.7.0 - Applying Patch 20124292: OPTIC NEEDS BETTER DIAGNOSTICS FOR CONNECTION ERRORS

Applying Patch 19849290 - CPU CONFLICT MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 17337741 17555224

Applying Patch 17337741: OSS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2013)

FMW 11.1.1.7.0 - Applying Patch 18423831: WLSPLUGINS (OHS) SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

FMW 11.1.1.7.0 - Applying Patch 18423801: OPMN SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

FMW 12.1.2.0.0 - Oracle HTTP Server - Applying Patch 21768251: MERGE REQUEST ON TOP OF 12.1.2.0.0 FOR BUGS 19948089 19304888 20806507 20900385

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19229422: OHS 12C UNABLE TO CONNECT TO WLS DYNAMIC CLUSTER

Applying Patch 16856341: CPU: OHS CORE DUMPS AFTER MOD_SECURITY PATCH/CONF APPLIED

FMW 11.1.1.7.0 - Applying Patch 21640624: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2015)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

- Download and extract the patch 19948000 onto the staging area PATCH_TOP of the server. 

- Ensure environment variables are set eg: ORACLE_HOME=$MW_HOME/Oracle_WT1

- Download latest OPatch, ensure access to valid inventory.

- Stop all opmn, OHS services.


Applying patch 19948000

- Unzip the patch zip file into the PATCH_TOP.

   unzip -d PATCH_TOP p19948000_111170_Linux-x86-64.zip

- cd PATCH_TOP/19948000

- Run following command:
  
   opatch apply


Post Install Instructions:
--------------------------

- Disable SSLv2 and SSLv3 from config files.
   
   A.  SSLProtocol
   
   Check config files like ORACLE_INSTANCE/config/OHS/<OHS name>/ssl.conf, ORACLE_INSTANCE/config/OHS/<OHS name>/admin.conf and any other custom files.
   Change SSLProtocol directive to disable SSLv2, SSLv3 protocols by either:
   
   SSLProtocol -All +TLSv1  (allows the one TLS protocol currently supported in this version)
   
   or
   SSLProtocol All -SSLv2 -SSLv3 (allows for future scaling to newer TLS version if later upgraded)
   
   or
   SSLProtocol nzos_Version_1_0

   B.  SSLProxyProtocol
   
   This directive must also be configured to disable SSLv2, SSLv3 protocols similar to SSLProtocol.

- Remove ciphers from SSLCipherSuite directive that are deprecated in this release. Check patch README file for more details.
   
  Alternatively, enable only the valid ciphers for this release.
  
-  Start all opmn, OHS services.


Rollback patch

If any issues post patching and a roll back is needed, follow below steps:

- Stop the services


- cd PATCH_TOP/19948000

- Run following command:
  
  opatch rollback -id 19948000


- Restart all opmn, OHS services.


Related Posts:

FMW 12.1.2.0.0 - Oracle HTTP Server - Applying Patch 21768251: MERGE REQUEST ON TOP OF 12.1.2.0.0 FOR BUGS 19948089 19304888 20806507 20900385
FMW 11.1.1.7.0 - Applying Oracle HTTP Server Patch 20394174: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 19948000 17905017

FMW 11.1.1.7.0 - Applying Patch 20493440: MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 18423801 18025250

FMW 11.1.1.7.0 - Applying Patch 20124292: OPTIC NEEDS BETTER DIAGNOSTICS FOR CONNECTION ERRORS

Applying Patch 19849290 - CPU CONFLICT MERGE REQUEST ON TOP OF 11.1.1.7.0 FOR BUGS 17337741 17555224

Applying Patch 17337741: OSS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUOCT2013)

FMW 11.1.1.7.0 - Applying Patch 18423831: WLSPLUGINS (OHS) SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

FMW 11.1.1.7.0 - Applying Patch 18423801: OPMN SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJUL2014)

Applying Patch 19948000: OHS SECURITY PATCH UPDATE 11.1.1.7.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19948154: OHS SECURITY PATCH UPDATE 12.1.3.0.0 (CPUJAN2015)

FMW 12.1.3.0.0 - Applying Patch 19229422: OHS 12C UNABLE TO CONNECT TO WLS DYNAMIC CLUSTER


Applying Patch 16856341: CPU: OHS CORE DUMPS AFTER MOD_SECURITY PATCH/CONF APPLIED