I have to enable network encryption on a specific instance. We have a single DB machine runnning one listener from
/etc/listener.ora and several instances.
TNS_ADMIN is set to
/etc. Oracle 11.2g is installed once and the Advanced Security is installed too.
Following properties have to be set by me:
SQLNET.ENCRYPTION_TYPES_SERVER = (AES256) SQLNET.ENCRYPTION_SERVER = REQUIRED SQLNET.CRYPTO_CHECKSUM_SERVER = REQUIRED SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER = (SHA1)
Even eventually the client counterpart.
Now, I have read the docs and realized that I have to set that in the
sqlnet.ora but which one? For the client only? In
TNS_ADMIN? Which would force all instance to require encryption. On the server?
Who is actually enforcing the encryption? I guess the listener, right? If so, can I set up a second listener for that?