oracle11g配置网络加密传输

重要：客户端和服务器端任何一方配置加密传输即可。如果两端都配置，则需确保加密算法一致。


服务器端配置：[oracle@lncs admin]$ pwd
/oracle/app/product/11.2.0/db_1/network/admin
[oracle@lncs admin]$ cat sqlnet.ora

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)

ADR_BASE = /oracle/app
DIAG_ADR_ENABLED=OFF
DIAG_SIGHANDLER_ENABLED=FALSE
DIAG_DDE_ENABLED=FALSE
添加：

SQLNET.ENCRYPTION_SERVER = requested
SQLNET.ENCRYPTION_TYPES_SERVER= (RC4_256)
SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED
SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = MD5

复制

监听无需重启。

客户端配置：(无需配置)

LNDB58 =
(DESCRIPTION =
(ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.205.58)(PORT = 1521))
(CONNECT_DATA =
(SERVER = DEDICATED)
(SERVICE_NAME = lndb)
)添加

    (SECURITY =
      (ENCRYPTION_CLIENT=REQUIRED)
      (ENCRYPTION_TYPES_CLIENT=RC4_256)
      (CRYPTO_CHECKSUM_CLIENT=REQUESTED)
      (CRYPTO_CHECKSUM_TYPES_CLIENT=MD5))
复制

)

相关参考：
https://mp.weixin.qq.com/s/Xa8HQQZ4t3-m6qSESfeJRA
https://blog.csdn.net/hwbays/article/details/122218905