Our Enterprise is using Oracle Application Server in front of Oracle database. We are using Oracle wallet manager(Installed with Oracle client 10) to create self-signed certificates. As you may know wallet manager in v 10 has some limitation in key size(I don't know exactly the limitation and i hope you could help me on it ).
When we want to issue a certificate at first we create a certificate request with wallet manager and then issue based on certificate in Windows server CA.
Now I have some questions:
1- What exactly indicates the ssl/tls version? I mean the web server, client or the certificate? is it possible the web server supports the tls v1.0 but the certificate doesn't?
2- What are the limitations of using wallet manager in V10 to issue the self-signed certificate?
3- Is there another way to create a self-signed certificate without wallet manager V10?(when I try the newest versions oracle application failed to open a certificate)
4- and my most important question: Can i stop POODLE attack in oracle application? (I read somewhere that the POODLE vulnerability doesn't apply in TLSV1. so I guess its better to ask my question this way: does Oracle application server support the TLSV1? )
I really appreciate any sort of help. thank you.