2 What’s New in this Release

This chapter describes the features and improvements in Oracle HTTP Server. The following topics introduce the new and changed features of Oracle HTTP Server and other significant changes in the guides, and provides pointers to additional information.

New Features

The following are the new features in Oracle HTTP Server 14.1.2.0.0:

  • Oracle HTTP Server now supports the latest version of TLS, version 1.3. The default settings for the SSLProtocol directive have also changed. See SSLProtocol Directive in Administering Oracle HTTP Server.

  • Oracle HTTP Server now supports Apache HTTP Server version 2.4.62 with enhancements and latest security fixes.

  • Oracle HTTP Server supports only auto_login_only wallets. See Creating a Wallet in Administering Oracle HTTP Server.

  • Oracle HTTP Server provides a script to convert the auto_login wallet to auto_login_only wallet when upgrading from Oracle HTTP Server 12.2.1.4.0. For more information, see Convert Auto_login Wallets to Auto_login_only in Upgrading Oracle HTTP Server.

  • Server Name Indication, which allows clients to include the requested host name in the initial message of their SSL handshake, is now supported. See Server Name Indication in Administering Oracle HTTP Server.

  • Oracle HTTP Server provides intelligent load balancing as an alternative to the default round-robin method. See Support for Intelligent Load Balancing in Using Oracle WebLogic Server Proxy Plug-Ins.

  • The WLSSLWallet is no longer allowed in the Location container. See WLSSLWallet in Using Oracle WebLogic Server Proxy Plug-Ins.

  • Oracle HTTP Server uses the OpenSSL library as the underlying cryptography library instead of the NZ library. See Security Features in Administering Oracle HTTP Server.

Deprecated Features

This section describes the deprecated features of Oracle HTTP Server.

Although deprecated features may continue to work in the current release, we recommend migrating away from them as soon as possible as they may be removed in a future release.

mod_ora_audit Module

The mod_ora_audit module is deprecated and removed from this release. Use the mod_security module for audit log instead. See Configuring mod_security for Audit Logging in Administering Oracle HTTP Server.

Removed Directives

The following directives are no longer supported and were removed as of Oracle HTTP Server 14.1.2.0.0:

  • SSLProxySessionCache
  • SSLRequire
  • SSLTraceLogLevel
  • SSLCRLCheck Off
  • OraAuditEnable
  • SSLInsecureRenegotiation