Use of TLS

Oracle strongly recommends configuring WebLogic to use TLS and accessing the Empirica Healthcare Analysis software using only TLS connections. For more information, see the Installation Guide.

To ensure that your use of TLS is secure, perform the following steps:

• Disable the use of vulnerable TLS protocols by adding the following JVM option to the JAVA_OPTIONS settings in the setDomainEnv.sh file, for example:

  -Dweblogic.security.SSL.protocolVersion=TLS1

  You can find the setDomainEnv.sh file in a location such as:

  /u01/app/oracle/Middleware/user_projects/domains/empirica/bin/setDomainEnv.sh

• Enable only strong ciphers in the WebLogic config.xml file by listing only strong ciphers in the SSL section of the file.

  For more information, see the Open Web Application Security Project website:

  http://www.owasp.org/index.php/Transport_Layer_Protection_Cheat_Sheet#Rule_-_Only_Support_Strong_Cryptographic_Ciphers

Copyright © 2013, 2016 Oracle and/or its affiliates. All rights reserved.