title: Configure OHS Weblogic 12c / Apache to support TLSv2 only
body: <p>And thanks for your help and I would like to know if someone has faced this issue, I don't success to configure my SSL configuration for OHS, it seems that TLSV1.2 only doesn't work .</p>
  <p>My OHS is embedeed with a weblogic 12C</p>
  <p>See below my configuration</p>
  <pre><code>###################################################################
  # Oracle HTTP Server mod_ossl configuration file: ssl.conf        #
  ###################################################################
  
  # The Listen directive below has a comment preceding it that is used
  # by tooling which updates the configuration.  Do not delete the comment.
  #[Listen] OHS_SSL_PORT
  Listen 8443
  
  &lt;IfModule ossl_module&gt;
  ##
  ##  SSL Global Context
  ##
  ##  All SSL configuration in this context applies both to
  ##  the main server and all SSL-enabled virtual hosts.
  ##
  
  #
  #   Some MIME-types for downloading Certificates and CRLs
      AddType application/x-x509-ca-cert .crt
      AddType application/x-pkcs7-crl    .crl
  
  #   Inter-Process Session Cache:
  #   Configure the SSL Session Cache: First the mechanism 
  #   to use, second the expiring timeout (in seconds) and third
  #   the mutex to be used.
      SSLSessionCache &quot;shmcb:${ORACLE_INSTANCE}/servers/${COMPONENT_NAME}/logs/ssl_scache(512000)&quot;
      SSLSessionCacheTimeout  300
      &lt;IfModule !mpm_winnt_module&gt;
        Mutex pthread ssl-cache
      &lt;/IfModule&gt;
  
  ##
  ## SSL Virtual Host Context
  ##
  #[VirtualHost] OHS_SSL_VH
  &lt;VirtualHost *:8443&gt; 
    &lt;IfModule ossl_module&gt;
     #  SSL Engine Switch:
     #  Enable/Disable SSL for this virtual host.
     SSLEngine on
  
     #  Client Authentication (Type):
     #  Client certificate verification type and depth.  Types are
     #  none, optional and require.
     SSLVerifyClient None
  
     #  SSL Protocol Support:
     #  Configure usable SSL/TLS protocol versions.
     SSLProtocol +TLSv1.2 nzos_Version_3_0_With_2_0_Hello nzos_Version_3_0
  
     #  SSL Cipher Suite:
     #  List the ciphers that the client is permitted to negotiate.
     # SSL Certificate Revocation List Check
     # Valid values are On and Off
  
  SSLCipherSuite ALL
  
  SSLCRLCheck Off
  
     #Path to the wallet
  SSLWallet &quot;/data/as/Certificates/OHS&quot;
          
     &lt;FilesMatch &quot;\.(cgi|shtml|phtml|php)$&quot;&gt;
        SSLOptions +StdEnvVars
     &lt;/FilesMatch&gt;
  
     &lt;Directory &quot;${ORACLE_INSTANCE}/config/fmwconfig/components/${COMPONENT_TYPE}/instances/${COMPONENT_NAME}/cgi-bin&quot;&gt;
        SSLOptions +StdEnvVars
     &lt;/Directory&gt;
  
     BrowserMatch &quot;MSIE [2-5]&quot; \
           nokeepalive ssl-unclean-shutdown \
           downgrade-1.0 force-response-1.0
  
    &lt;/IfModule&gt;
  &lt;/VirtualHost&gt;
  
  </code></pre>
  <p>See below the errors when I tried to connect with the URL ?</p>
  <pre><code>2021-02-04T19:12:18.2523+01:00] [OHS] [ERROR:32] [OH99999] [ossl] [client_id: 172.21.0.68] [host_id: lpacs122] [host_addr: 172.21.20.79] [pid: 29658] [user: as] [VirtualHost: localhost:8443] OHS:2079 Client SSL handshake error, nzos_Handshake returned 29039(server localhost:8443)
  [2021-02-04T19:12:18.2523+01:00] [OHS] [ERROR:32] [OH99999] [ossl] [host_id: lpacs122] [host_addr: 172.21.20.79] [pid: 29658] [user: as] [VirtualHost: localhost:8443] OHS:2171 NZ Library Error: SSL negotiation error [Hint: too restrictive SSLCipherSuite]
  </code></pre>
  <p>Does someone has faced this issue ?</p>
  <p>Many Thanks for yor help</p>