Histórico da Página

...

4- Configurar o client na máquina do cliente com os mesmos arquivos e certificados da wallet do servidor.

Arquivos de Network

Image Removed

LISTENER.ORA

# listener.ora Network Configuration

# Generated by Oracle configuration tools.

SID_LIST_LISTENER =

(SID_LIST =

(SID_DESC =

(SID_NAME = CLRExtProc)

(ORACLE_HOME = C:\Users\engenhariasoftware\Downloads\ORACLE)

(PROGRAM = extproc)

(ENVS = "EXTPROC_DLLS=ONLY:C:\Users\engenhariasoftware\Downloads\ORACLE\bin\oraclr19.dll")

)

SSL_CLIENT_AUTHENTICATION = FALSE

LISTENER =

(DESCRIPTION =

(ADDRESS = (PROTOCOL = TCPS)(HOST = BH-ENG-VM05)(PORT = 1521))

)

ADR_BASE_LISTENER = C:\Users\engenhariasoftware\Downloads\ORACLE\log

SQLNET.ORA

# sqlnet.ora Network Configuration File: C:\Users\engenhariasoftware\Downloads\ORACLE\network\admin\sqlnet.ora

# Generated by Oracle configuration tools.

SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT= (SHA256)

SQLNET.AUTHENTICATION_SERVICES= (BEQ, TCPS, NTS)

SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER= (SHA256)

SSL_VERSION = 0

NAMES.DIRECTORY_PATH= (TNSNAMES, HOSTNAME)

SSL_CLIENT_AUTHENTICATION = FALSE

SQLNET.CRYPTO_SEED = 'Th!s$eed2'

SQLNET.ENCRYPTION_TYPES_CLIENT= (AES256)

SQLNET.ENCRYPTION_TYPES_SERVER= (AES256)

WALLET_LOCATION =

(SOURCE =

(METHOD = FILE)

(METHOD_DATA =

(DIRECTORY = C:\Users\engenhariasoftware\Downloads\ORACLE\admin\EXEMPLO1\Wallet)

)

SQLNET.AUTHENTICATION_KERBEROS5_SERVICE = exemplo1

ADR_BASE = C:\Users\engenhariasoftware\Downloads\ORACLE\log

TNSNAMES.ORA

# tnsnames.ora Network Configuration File: C:\Users\engenhariasoftware\Downloads\ORACLE\network\admin\tnsnames.ora

# Generated by Oracle configuration tools.

# SECURITY = (SSL_SERVER_CERT_DN = "cn=totvs,cn=totvs,c=totvs,o=totvs")

EXEMPLO1 =

(DESCRIPTION =

(ADDRESS_LIST =

(ADDRESS = (PROTOCOL = TCPS)(HOST = BH-ENG-VM05)(PORT = 1521))

)

(CONNECT_DATA =

(SERVICE_NAME = EXEMPLO1)

)

LISTENER_EXEMPLO1 =

(ADDRESS = (PROTOCOL = TCP)(HOST = BH-ENG-VM05)(PORT = 1521))

WALLET

Image Removed

Habilitando a criptografia SSL.

Listener

Image Added

Service

Image Added

Profile - Authentication

Image Added

Profile - Other Params

Image Added

Profile - Integrity

Image Added

Profile - Encryption

Image Added

Profile - SSL

Image Added

*Colocar no campo Wallet Directory: O diretório da wallet com o certificado.

WALLET

Criar uma pasta e colocar o certificado dentro dela.

Indicar nos comandos de criação de KEY esta mesma pastaDeletar o ewallet.p12 e recriar via comando.

ADMINISTER KEY MANAGEMENT CREATE KEYSTORE 'C:\Users\engenhariasoftware\Downloads\ORACLE\admin\EXEMPLO1\Wallet' IDENTIFIED BY TOTVS12345;
ADMINISTER KEY MANAGEMENT SET KEYSTORE OPEN IDENTIFIED BY TOTVS12345; (comando para abrir a WALLET, ela deve estar aberta o tempo todo para que a criptografia funcione).

Com o comando: select * from v$encryption_wallet; É possivel checar o status da wallet.

Abrir e configurar a Wallet no pc cliente: