Skip to content

An ITAR/STIG-compliance-driven customer wants to enable SSLFIPS on Oracle HTTP Server by directly editing ssl.conf on the Middleware Server (setting the SSLFIPS directive to On) — is this something IFS supports or recommends doing?

Answer

No — IFS explicitly advises against making this kind of direct configuration change to Middle Tier components outside IFS's own tooling, for three concrete reasons: it hasn't been internally tested, so there's no confirmation the wider application (clients, integrations, etc.) actually works correctly with SSLFIPS enabled; the IFS Middleware Server licensing terms don't permit configuration changes to Middle Tier components made outside IFS Tools; and any manually-applied change like this would simply get overwritten the next time an Update, MWS build pack, or Oracle CPU patch is applied through IFS's own delivery process. If a customer has a hard compliance requirement like this, it needs to be raised with IFS directly rather than implemented as a manual server-side edit.

← Browse Developer Studio, deployment, and upgrades questions