How to check the Oracle database connection encryption type?(between Oracle database and other client applications)How do I assure between Oracle database and Toad the database connection is encrypted? (My Toad version is 9.5 and Oracle database version is 11g)
- Anybody can ask a question
- Anybody can answer
- The best answers are voted up and rise to the top
migrated from stackoverflow.com Feb 28 '14 at 8:34
This question came from our site for professional and enthusiast programmers.
Unless you've done 'something' to encrypt the connection it is in the clear.
And if you want to encrypt this communication using an Oracle solution, you must be using the Enterprise Edition and you must purchase the Advanced Security addon.
If you the free way of doing this, use Stunnel https://www.stunnel.org/index.html
Amazingly enough, Stunnel and Advanced Security have many similarities. I've installed both, and like Stunnel.
Stunnel is great, especially when you want to make https connections from a stored procedure. Oracle requires all sorts of hoops like installing the client's certificate in the Wallet (which I think is now gone--finally--yet replaced with some other cumbersome idea. Where as, Stunnel just needs 3 lines of code in a setup file.
Anyway, unless you have a requirement to use Advanced Security Option, look into Stunnel.
And to see if you're running ASO, look in your sqlnet.ora file for strange entries this:
Look in both the client and the server's sqlnet.ora file.
Don't confuse Oracle Advanced Security with encrypted SSL client connections to the database. The Advanced Security option is comprised of two main features, Data Radaction and Transparent Data Encryption. TDE is the encryption of data within tables, so that if someone captures the datafiles they won't be able to read table data in the clear inside the file.
An encrypted SSL connection between a client and the database is just part of the Oracle Net Services and is included with every version. The Oracle documentation explains how to set that up.
To answer your question, run this query:
If you are connected via SSL you will get the response
If you get "tcp," then you are on a non-SSL connection.