Laurent Schneider

How can you use SSL to encrypt your network traffic?

Here is how I did it.

1. Install Oracle Certification Authority 10.1.4

you need a CA to approve a certification request

2. Install Oracle Database 10gR2 Enterprise Edition with Advanced Security Options
3. Start Wallet Manager

from Database Oracle Home, start $ORACLE_HOME/bin/owm

4. create a new Wallet

define a password

5. add certificate request

fill the fields or chose advanced :
CN=yourhost,DC=yourdomain,DC=com

6. Start OCA

from OCA home, start $ORACLE_HOME/oca/bin/ocactl start

7. Open OCA homepage

Open your browser on
https://yourhost.yourdomain.com:6600/oca/user
Install the ROOTca in your browser

8. Request a new certificate

Server/SubCA Certificates - Request a certificate - Paste String from OWM

9. Approve the certificate

log on the admin page,
https://yourhost.yourdomain.com:6600/oca/admin
define your identity, then in Certificate Management, select the certification request and approve it.

10. Import the certificate in OWM

Select the approved certificate, view details.
In owm, import user certificate , and copy paste the BASE64 string.
To get the CA string, download the CA certificate from
https://yourhost.yourdomain.com:6600/oca/certDownload

11. Save the wallet

The certificate should show [Ready]
Select Autologin
Save in system default (/etc/ORACLE/WALLETS/oracle)

Ok, we are now ready to use the TCPS protocol

listener.ora
LISTENER=(DESCRIPTION=(ADDRESS=(PROTOCOL=<b>TCPS</b>)
(HOST=yourhost.yourdomain.com)(PORT=1521)))

tnsnames.ora
LSC01=(DESCRIPTION=(ADDRESS=(PROTOCOL=<b>TCPS</b>)
(HOST=yourhost.yourdomain.com)(PORT=1521))
(CONNECT_DATA=(SERVICE_NAME=LSC01)))

Start the listener
$ lsnrctl start
Listening on: (DESCRIPTION=(ADDRESS=(PROTOCOL=<b>TCPS</b>)
(HOST=yourhost.yourdomain.com)(PORT=1521)))
The command completed successfully

Test it!
$ sqlplus scott/tiger@lsc01
Connected to:
Oracle Database 10g Enterprise Edition Release 10.2.0.3.0 - 64bit Production
SQL>

Blogroll, dba, security