Caveats

The following items describe caveats in the P-CZ3.2.0 release.

Default Subnet

After an upgrade, default subnet value overrides a manually configured value. Access the config file and update the value manually again.

HA Limitation

HA switchover causes TCP/TLS ports to be reset. This terminates the TCP/TLS calls that were in progress on the formerly active OECB. New call setup over TCP/TLS, however, is successful.

Logging Limitation

Setting Logging to DEBUG simultaneously with greater than 300k degrades system performance. Be sure to set Logging to WARNING or NOTICE under this condition, and only use DEBUG when absolutely required.

Console Access on the Oracle X7-2 and X8-2 Servers

"The Oracle X7-2 and X8-2 servers do not support the OECB (OESBC)) when its "Console Device" bootparameter is set to VGA. This setting prevents the device from booting. Note that this is the default setting, requiring you to change it whenever deploying over these platforms.

Workaround: Set your "Console Device" bootparameter to "COM1" when deploying your device over Oracle X7-2 and X8-2 servers. Do this by interrupting the boot process as documented in the section "Change Boot Parameters by Interrupting a Boot in Progress" within the Installation and Platform Preparation Guide. This section explains how to proceed when you see the following comment during the boot process.

Press the space bar to stop auto-boot ...

You use COM1 by either connecting your external terminal equipment directly to the physical serial port, or by starting an SSH session via iLOM and running Virtual Serial Port Emulation - http://docs.oracle.com/cd/E93361_01/html/E93392/gtibt.html.

LDAP Support

Only the default "ecb" network can support LDAP. Additional networks cannot.

Registrar Support

Only the default "ecb" network can act as the registrar. Additional networks cannot.

ECB Sync Compatibility

ECB SYNC is supported only between nodes with the same configuration platforms. For example, X3 to X3, X5 to X5, VM to VM are supported.

Deprecated Ciphers

The system deprecates the following ciphers, adhering to recent OpenSSL changes intended to eliminate weak ciphers:
  • All DES-CBC ciphers, including:
    • TLS_DHE_RSA_WITH_DES_CBC_SHA
    • TLS_RSA_EXPORT1024_WITH_DES_CBC_SHA
Oracle recommends that you remove any prior version configuration that uses these ciphers, and that you do not configure a security profile with the expectation that these ciphers are available. Note also that TLS profiles using the ALL (default) value for the cipher-list parameter no longer use these ciphers.

Note:

The ACLI may still display these ciphers when you run cipher-list ?, but the system does not support them.