Oracle Cloud Infrastructure Documentation

TLS Cipher Suites Support

Oracle Integration supports the following TLS cipher suites.

Supported Cipher Suites

  • TLS_ECDHE_RSA_AES128_GCM_SHA256
  • TLS_ECDHE_RSA_AES256_GCM_SHA384

See Inbound and Outbound Endpoints and Transport Layer Security Server Version Support in Using Integrations in Oracle Integration 3.

Deprecated Cipher Suites

If you use any of these cipher suites, replace them with a supported cipher suite.

The following cipher suites aren't supported as of October 2024.
  • TLS_DHE-RSA-AES128-GCM-SHA256
  • TLS_DHE-RSA-AES128-SHA256
  • TLS_DHE-RSA-AES256-GCM-SHA384
  • TLS_DHE-RSA-AES256-SHA256
  • TLS_ECDHE-RSA-AES128-SHA256
  • TLS_ECDHE-RSA-AES256-SHA384

Deprecated Camerfirma certificates

The JDK will stop trusting TLS server certificates issued after Apr 15, 2025 and anchored by Camerfirma root certificates, in line with similar actions taken by Apple, Google, Microsoft and Mozilla. TLS server certificates issued on or before Apr 15, 2025 will continue to be trusted until they expire. Certificates issued after that date will be rejected.