Can I configure ssl with an remote database server

2019-03-05 18:50发布

I would like to know if I could configure ssl between my application and a remote database server.

Oracle Database and web app on weblogic server

Thanks

标签: database ssl
2条回答
甜甜的少女心
2楼-- · 2019-03-05 19:12

I have not done this but believe you need oracle advanced security option

http://www.oracle.com/technology/sample_code/deploy/security/files/secure_thin_driver/readme.html

查看更多
再贱就再见
3楼-- · 2019-03-05 19:22

Yes, it's possible. I'm not sure how to configure the server (I've only used it from the client's perspective), but the JDBC driver can be configured as described from the link on this page: "SSL With Oracle JDBC Thin Driver". (Oracle seem to be making changes to the website so if it moves, look for the title.)

Note that that "Case #1: Use SSL for encryption only", is just that, which doesn't really enforce security. If you really want security, you'll also want server authentication at least. Encryption-only is like exchanging information secretly with someone whose identity you haven't verified: it's not particularly useful. Usually, you'll want to tell secrets only to the intended recipients of the secrets, after making sure they're who they say they are. The anonymous cipher suites (as described in this document, but not specific to Oracle JDBC SSL/TLS connections) are the ones to avoid for this reason. Client authentication is probably less important, depending on your context.

查看更多
登录 后发表回答