|
一 配置客户端和服务端的wallet
2端配置方法一致，相互添加证书
orapki wallet create -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD -auto_login_local
orapki wallet add -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD -dn "CN=`hostname`" -keysize 1024 -self_signed -validity 3650
导出证书
orapki wallet export -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD -dn "CN=`hostname`" -cert /tmp/`hostname`-certificate.crt
导入证书
orapki wallet add -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD -trusted_cert -cert /tmp/ROCKY-20160621P-certificate.crt
验证
orapki wallet display -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD
二监听配置
2端sqlnet一致添加
WALLET_LOCATION =
(SOURCE =
(METHOD = FILE)
(METHOD_DATA =
(DIRECTORY = /u01/app/oracle/wallet)
)
)
SQLNET.AUTHENTICATION_SERVICES = (TCPS,NTS,BEQ)
SSL_CLIENT_AUTHENTICATION = FALSE
SSL_CIPHER_SUITES = (SSL_RSA_WITH_AES_256_CBC_SHA,SSL_RSA_WITH_3DES_EDE_CBC_SHA)
服务端netca配置listener
客户端添加tnsname
三验证
tnsping ok
sqlplus 登录ok （编辑：李大同）
【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!
|
