服务器端“dbhome_1\NETWORK\ADMIN\”sqlnet.ora文件中添加
SQLNET.ENCRYPTION_SERVER = requested
SQLNET.ENCRYPTION_TYPES_SERVER= (RC4_256)
添加后新的链接即刻生效,服务器无需重新启动。
也可以通过Net manager管理工具添加
各个参数含义如下:
是否加密(ENCRYPTION_SERVER)取值包含REJECTED、ACCEPTED、REQUESTED、REQUIRED
客户端(ENCRYPTION_Client参数)和服务器端(ENCRYPTION_SERVER)设置不同的的实际结果如下表
Client Setting | Server Setting | Encryption and Data Negotiation |
---|---|---|
REJECTED | REJECTED | OFF |
ACCEPTED | REJECTED | OFF |
REQUESTED | REJECTED | OFF |
REQUIRED | REJECTED | Connection fails |
REJECTED | ACCEPTED | OFF |
ACCEPTED | ACCEPTED | OFF |
REQUESTED | ACCEPTED | ON |
REQUIRED | ACCEPTED | ON |
REJECTED | REQUESTED | OFF |
ACCEPTED | REQUESTED | ON |
REQUESTED | REQUESTED | ON |
REQUIRED | REQUESTED | ON |
REJECTED | REQUIRED | Connection fails |
ACCEPTED | REQUIRED | ON |
REQUESTED | REQUIRED | ON |
REQUIRED | REQUIRED | ON |
加密方法(ENCRYPTION_TYPES_SERVER)有如下选项:
Algorithm Name | Legal Value |
---|---|
RC4 256-bit key | RC4_256 |
RC4 128-bit key | RC4_128 |
RC4 56-bit key | RC4_56 |
RC4 40-bit key | RC4_40 |
AES 256-bit key | AES256 |
AES 192-bit key | AES192 |
AES 128-bit key | AES128 |
3-key 3DES | 3DES168 |
2-key 3DES | 3DES112 |
DES 56-bit key | DES |
DES 40-bit key | DES40 |