Effective Oracle Databases 10g Security by Design
- Title:
- Rating:
P50 encrypt network is easy:
SQLNET.ENCRYPTION_TYPES_SERVER= (RC4_40)
SQLNET.ENCRYPTION_TYPES_CLIENT= (RC4_40)
SQLNET.ENCRYPTION_CLIENT = requested
SQLNET.ENCRYPTION_SERVER = requested
SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT= (MD5)
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER= (MD5)
SQLNET.CRYPTO_SEED = dfksjkjrkejrkejrkji33333o-__9i9
SQLNET.CRYPTO_CHECKSUM_SERVER = requested
SQLNET.CRYPTO_CHECKSUM_CLIENT = requested
Oracle OTN has detailed documentation as well
David Knox claims “independent lab tests how little overhead”
Specify the following properties in JBOSS connection pool configuration file if JBOSS runs on same server as Oracle and you do not want the overhead of encryption on a local connection.
<connection-property name="oracle.net.encryption_client">REJECTED</connection-property>
<connection-property name="oracle.net.crypto_checksum_client">REJECTED</connection-property>
Add a comment
You are not allowed to comment on this entry as it has restricted commenting permissions.