Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How to check the Oracle database connection encryption type?(between Oracle database and other client applications)How do I assure between Oracle database and Toad the database connection is encrypted? (My Toad version is 9.5 and Oracle database version is 11g)

share|improve this question

migrated from stackoverflow.com Feb 28 '14 at 8:34

This question came from our site for professional and enthusiast programmers.

1  
kb.berkeley.edu/page.php?id=23274 – OldProgrammer Jan 18 '14 at 16:30

Unless you've done 'something' to encrypt the connection it is in the clear.

And if you want to encrypt this communication using an Oracle solution, you must be using the Enterprise Edition and you must purchase the Advanced Security addon.

If you the free way of doing this, use Stunnel https://www.stunnel.org/index.html

Amazingly enough, Stunnel and Advanced Security have many similarities. I've installed both, and like Stunnel.

Stunnel is great, especially when you want to make https connections from a stored procedure. Oracle requires all sorts of hoops like installing the client's certificate in the Wallet (which I think is now gone--finally--yet replaced with some other cumbersome idea. Where as, Stunnel just needs 3 lines of code in a setup file.

Anyway, unless you have a requirement to use Advanced Security Option, look into Stunnel.

And to see if you're running ASO, look in your sqlnet.ora file for strange entries this:

SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT = (MD5) 
SQLNET.ENCRYPTION_TYPES_CLIENT = (RC4_256) 
SQLNET.ENCRYPTION_CLIENT = required 
SQLNET.CRYPTO_CHECKSUM_CLIENT = required 

Look in both the client and the server's sqlnet.ora file.

share|improve this answer
    
Thank you soo much ... – sam_mit Jan 20 '14 at 3:25
    
@sam_mit, as it looks like you are new to StackOverFlow, when someone answers a question and you like it, you want to click the "check mark" beside the answer. – Brian McGinity Jan 20 '14 at 3:44
    
Also, you're welcome. You and (others) can save yourself $20k knowing this... – Brian McGinity Jan 20 '14 at 3:45

Don't confuse Oracle Advanced Security with encrypted SSL client connections to the database. The Advanced Security option is comprised of two main features, Data Radaction and Transparent Data Encryption. TDE is the encryption of data within tables, so that if someone captures the datafiles they won't be able to read table data in the clear inside the file.

An encrypted SSL connection between a client and the database is just part of the Oracle Net Services and is included with every version. The Oracle documentation explains how to set that up.

To answer your question, run this query:

SELECT sys_context('USERENV', 'NETWORK_PROTOCOL') as network_protocol FROM dual;

If you are connected via SSL you will get the response

NETWORK_PROTOCOL
----------------
tcps

If you get "tcp," then you are on a non-SSL connection.

share|improve this answer
    
It's really confusing because Native Encryption and SSL USED to be part of ASO. A few years ago Oracle changed it to make it available on all licenses. However, they (still!) haven't updated all their documentation, so it's still referenced as being part of ASO in many places. – Elezar Apr 21 at 23:55

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.