Oracle 加密配置,Oracle sqlnet设置网络传输加密

1、查看加密组件

[oracle@yuntestdb ~]$ adapters

Installed Oracle Net transport protocols are:

IPC

BEQ

TCP/IP

SSL

RAW

SDP/IB

Installed Oracle Net naming methods are:

Local Naming (tnsnames.ora)

Oracle Directory Naming

Oracle Host Naming

Oracle Names Server Naming

Installed Oracle Advanced Security options are:

RC4 40-bit encryption

RC4 56-bit encryption

RC4 128-bit encryption

RC4 256-bit encryption

DES40 40-bit encryption

DES 56-bit encryption

3DES 112-bit encryption

3DES 168-bit encryption

AES 128-bit encryption

AES 192-bit encryption

AES 256-bit encryption

MD5 crypto-checksumming

SHA-1 crypto-checksumming

Kerberos v5 authentication

RADIUS authentication

2、设置网络加密，只对服务端进行设置，客户端默认设置是ACCEPTED

SQLNET.ENCRYPTION_SERVER = requested

SQLNET.ENCRYPTION_TYPES_SERVER= (RC4_256)

3加密设置是否生效参考官网

https://docs.oracle.com/cd/E11882_01/network.112/e40393/asoconfg.htm#ASOAG9599

Client SettingServer SettingEncryption and Data NegotiationREJECTEDREJECTEDOFFACCEPTEDREJECTEDOFFREQUESTEDREJECTEDOFFREQUIREDREJECTEDConnection failsREJECTEDACCEPTEDOFFACCEPTEDACCEPTEDOFFFoot 1 REQUESTEDACCEPTEDONREQUIREDACCEPTEDONREJECTEDREQUESTEDOFFACCEPTEDREQUESTEDONREQUESTEDREQUESTEDONREQUIREDREQUESTEDONREJECTEDREQUIREDConnection failsACCEPTEDREQUIREDONREQUESTEDREQUIREDONREQUIREDREQUIREDON

设置完sqlnet以后不用重启监听

验证是否加密可以trace sqlnet,操作前在sqlnet.ora内增加如下行，做完后删除。

#Trace file setup

trace_level_server=16

trace_level_client=16

trace_directory_server=/oracle/app/oracle/product/11.2.0/db_1/network/admin

trace_directory_client=/oracle/app/oracle/product/11.2.0/db_1/network/admin

trace_file_client=cli

trace_file_server=srv

trace_unique_client=true

diag_adr_enabled = off

验证

[oracle@yuntestdb admin]$ cat srv_24360.trc |grep "encryption is active"

[29-JUL-2020 16:26:23:709] na_tns: encryption is active, using RC4_256

加密以后包变大拉

加密解密性能影响，参考http://www.orafaq.com/wiki/Network_Encryption

AlgorithmNoneMD5SHA-1

Time%NoneTime%NoneTime%None

None79.6 s80.5 s101%82.4 s104%

DES104.7 s132%107.1 s135%108.2 s136%

3DES168151.8 s191%153.9 s193%155.6 s196%

AES12888.8 s112%90.5 s114%92.1 s116%

AES25691.8 s115%93.5 s117%94.2 s118%

RC4_12881.6 s103%82.5 s104%85.0 s107%

RC4_25681.7 s103%82.8 s104%85.0 s107%

分享到：

Oracle 加密配置,Oracle sqlnet设置网络传输加密相关推荐

Oracle 加密配置,【学习笔记】Oracle sqlnet设置网络传输加密案例
天萃荷净 Database Advanced Security,Oracle研究中心学习笔记:分享一篇关于Oracle数据库网络传输加密笔记,通过配置SQLNET.ora文件使网络传输加密即将客户端也 ...
oracle设置打印机,使用 Oracle Solaris 打印管理器设置网络连接的打印机
使用 Oracle Solaris 打印管理器设置网络连接的打印机使用 Oracle Solaris 打印管理器设置网络连接的打印机的方法与设置直接连接的打印机类似.但是需要设置的打印机定义有所不同 ...
oracle oic配置,Oracle数据库 client配置
以下是11g client配置 1. 从OTN下载几个压缩包下载地址为: http://www.oracle.com/technology/software/tech/oci/instantclie ...
oracle manager 配置,Oracle Net Manager 基本配置
配置过程中会让你输入"服务名",这个服务名是你本机连接到oracle的服务名字. 会让你输入"ip"和"数据库实例名","实例名& ...
配置oracle net,配置 Oracle Net 的3个重要文件
在 $ORACLE_HOME/network/admin 下面有3 个重要的文件: • The listener.ora file is a server-side file that defines ...
退出oracle系统,配置Oracle随系统启动和关闭
1.修改/etc/oratab文件将需要随操作系统自启动的数据库由N修改为Y lis:/u01/app/Oracle/product/11.2.0/db_1:N 修改为: lis:/u01/app/ ...
oracle audit_actions,配置Oracle安全审计选项audit
2. SYSDBA/SYSOPER操作的审计 SQL>show parameter audit: NAME TYPE ...
oracle pns配置,oracle笔记大全
一.in的用法. select ename,deptno from emp where sal in(800,1250) in 里面可以是一个结果集,是一个sql语句. 当然也可用not in 二.操 ...
linux的oracle最低配置,Oracle Linux的系统配置和限制
转自: System Configurations and Limits for Oracle Linux Releases (Doc ID 300652.1) APPLIES TO: Linux O ...

Oracle 加密配置,Oracle sqlnet设置网络传输加密

Oracle 加密配置,Oracle sqlnet设置网络传输加密相关推荐

最新文章

热门文章