Implement encryption between apps ser - 9i

[james_cc]

Hi There,

We like to implement encryption between our 9i release 1 application server to our 9i database at a different location.

Have anyone had experience in this similiar setup? Any suggestions will be helpful. Thanks

I have tried to setup sqlnet.ora as below but the test results were not consistent.

# SQLNET.ORA Network Configuration File: F:\ORA92NEW\network\admin\sqlnet.ora
# Generated by Oracle configuration tools.

NAMES.DEFAULT_DOMAIN = calstate.edu

SQLNET.AUTHENTICATION_SERVICES= (NTS)

NAMES.DIRECTORY_PATH= (TNSNAMES)

sqlnet.encryption_type_server = (RC4_40)
sqlnet.encryption_server = REQUIRED
sqlnet.crypto_seed="akeifkaiapqkiajdkvnbaldkarewoidakjasjcls"

trace_level_server=16
trace_file_server=c:\temp\mytrace.trc

[DaPi]

In the sqlnet.ora you will need *_client parameters on the "client" side that match the *_server values, plus some seed value. You'll need to check the doc to see which encryption types are supported for your version.

At the moment I can't think of anything else . . . .

[stmontgo]

is not advanced securition option (aso) required?

are u trying to force https?

steve

[DaPi]

Originally posted by stmontgo
is not advanced securition option (aso) required?

That would appear to be so.

Looks like we can all use 256-bit encryption these days:
http://download-west.oracle.com/docs...3/asoconfg.htm

Don't forget that if you run a client-type application on the server, then the server's sqlnet.ora will need *_client parameters too.

Another trick (at least in 8.1.7) is that if the server has encryption parameters, EVEN IF IT SPECIFIES REJECTED, then all the clients need them too.

[stmontgo]

Originally posted by DaPi
That would appear to be so.

Looks like we can all use 256-bit encryption these days:
http://download-west.oracle.com/docs...3/asoconfg.htm

Don't forget that if you run a client-type application on the server, then the server's sqlnet.ora will need *_client parameters too.

Another trick (at least in 8.1.7) is that if the server has encryption parameters, EVEN IF IT SPECIFIES REJECTED, then all the clients need them too.

better pony up, don't despair though, only 10 large a processor, wait til end of quarter to cut your best deal