Auditing an Oracle database for security issues is very important. PeteFinnigan.com provides all of the information and tools that you will need Click here for details of PeteFinnigan.com Limited's detailed Oracle database security audit service Click here for details of PeteFinnigan.com Limited's Oracle Security Training Courses
Cookie Policy:We only use essential cookies on small sections of this website. For details see here.

Welcome, Guest. Please Login.
Feb 16th, 2019, 5:48am
News: If you would like to register contact the forum admin
Home | Help | Search | Members | Login
   Pete Finnigan's Oracle Security Forum
   Oracle Security
   Oracle Security
(Moderator: Pete Finnigan)
   Can the latest Apache be used in Oracle
« Previous topic | Next topic »
Pages: 1  Reply | Notify of replies | Send Topic | Print
   Author  Topic: Can the latest Apache be used in Oracle  (Read 1677 times)
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Can the latest Apache be used in Oracle
« on: Sep 9th, 2005, 3:33pm »
Quote | Modify

Hi everyone,
 
Does enyone know the position with substituting the version of Apache included with the database for the latest version from Apache.org?  
 
I have never tried to do it myself and I have found conflicting reports on the net about others who have tried. Some claim to have got it to work othres not. Also what is Oracles position in substituting the Apache version? - I would guess that they have made mods that are needed for it to function with the database?
 
Also what about current Apache patches? - its known that the Oracle version of apache is older than the real version. does anyone have real world experience with Apache patches and substitutions?
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Can the latest Apache be used in Oracle
« Reply #1 on: Sep 14th, 2005, 2:59am »
Quote | Modify

Pete,
 
I asked this question about 1.5 years ago to the product manager (at that time) of the iAS (Apache) product.  
 
When pressed about the reason I would want to upgrade (the nerve!), he told me emphatically that the version of Apache at that time had all it's security flaws addressed and that version 2.4x was less secure than the version they ship.
 
He told me there are many modules that would need to be manually added and that we would not get support if we changed the Apache version.
 
I have used Apache 2.48 (I think that was the version) with a current, modern version if Perl, DBI, and DBD:Shockedracle against Oracle 9.2 without issue (CGI code), but never have tried to get the entire iAS suite running under it.
 
Sorry I cannot give you something else.
 
- Ron Reidy
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pete Finnigan
PeteFinnigan.com Administrator
*****




Oracle Security is easier if you design for it

   
View Profile | WWW | Email

Gender: male
Posts: 309
Re: Can the latest Apache be used in Oracle
« Reply #2 on: Sep 17th, 2005, 7:52pm »
Quote | Modify

Hi Ron,
 
Thanks very much for your insight into the situation. I suspected that this is the true case. So even though it is most liklely possible to get the latest version running, it needs to be modded to add the Oracle changes and it is *almost certainly more secure* !, the bottom line being Oracle will not support you. I am not talking about the full iAS stack though.
 
Thanks for your guidance Ron,
 
cheers
 
Pete
IP Logged

Pete Finnigan (email:pete@petefinnigan.com)
Oracle Security Web site: http://www.petefinnigan.com
Forum: http://www.petefinnigan.com/forum/yabb/YaBB.cgi
Oracle security blog: http://www.petefinnigan.com/weblog/entries/index.html
Pages: 1  Reply | Notify of replies | Send Topic | Print

« Previous topic | Next topic »

Powered by YaBB 1 Gold - SP 1.4!
Forum software copyright 2000-2004 Yet another Bulletin Board