Solved

Reverse Proxy - http to https

Posted on 2014-11-18
2
366 Views
Last Modified: 2014-11-24
I am running Oracle XE 11.2.0.2.0 on CentOS and having problem with https when calling through UTL_HTTP package when the SSL certificates of the server I access are signed with SSH-2. Oracle 11.2.0.2.0 and earlier can only handle SSH-1.
As there's no patch for XE this cannot be fixed.
UTL_HTTP however can take an argument for a Proxy server through which the required host can be accessed.  
I am thinking to have some kind of proxy server to which Oracle UTL_HTTP can make http call and the proxy server in the background makes https call to the actual host.  
But not sure how to do it and what do I need for this.
Any ideas are welcome.
0
Comment
Question by:sysautomation
2 Comments
 
LVL 33

Accepted Solution

by:
Dave Howe earned 500 total points
ID: 40450386
Assuming that you mean sha-1 vs sha-2.

At least in theory you should be able to do this with stunnel - stunnel listeners let you interchange between ssl wraps & non-ssl. With two of them, you could run client ssl - stunnel - plain - stunnel - ssl oracle.

If you have control of the Oracle server though, it would be easier to just have a listener with a self-generated cert without the issue :)
0
 

Author Closing Comment

by:sysautomation
ID: 40462014
Thanks. I used Apache ProxyPass to point to https traffic and make Apache run with http. Then called Apache URL in http instead of the target server with https.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Have you ever had to make fundamental changes to a table in Oracle, but haven't been able to get any downtime?  I'm talking things like: * Dropping columns * Shrinking allocated space * Removing chained blocks and restoring the PCTFREE * Re-or…
Microservice architecture adoption brings many advantages, but can add intricacy. Selecting the right orchestration tool is most important for business specific needs.
This video explains at a high level about the four available data types in Oracle and how dates can be manipulated by the user to get data into and out of the database.
This videos aims to give the viewer a basic demonstration of how a user can query current session information by using the SYS_CONTEXT function

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now