My environment is as below -
Server: Oracle 12C 126.96.36.199.v17 ( AWS RDS Service)
Client: Windows 2012 machine with Oracle 19C 64 bit full client
Tools : SQL Developer and Toad on the client machine
I have configured native network encryption for the RDS service by following the instructions in https://docs.oracle.com/en/cloud/paas/database-dbaas-cloud/csdbi/use-network-encryption-and-integrity.html
I set following options on the RDS -
The client Oracle 19c 64 bit home is C:\oracle\product\19.0.0\client_1\network\admin\sqlnet.ora
Both client tools using the TNS name in the above path; I verified this by using tnsping
The sqlnet.ora in client has following options -
After the above configurations, I restarted my windows machine(just to make sure) and am able to establish connection to the RDS with Toad and SQL Developer tool.
MY question: How do I verify if my connection is encrypted ?
I tried executing below query -
select NETWORK_SERVICE_BANNER from v$session_connect_info where SID = sys_context('USERENV','SID');
The output I am seeing is
TCP/IP NT Protocol Adapter for Linux: Version 188.8.131.52.0 - Production
Encryption service for Linux: Version 184.108.40.206.0 - Production
Crypto-checksumming service for Linux: Version 220.127.116.11.0 - Production
SHA1 Crypto-checksumming service adapter for Linux: Version 18.104.22.168.0 - Production
I do not see "AES256 Encryption" in the NETWORK_SERVICE_BANNER output.
Related question: I need all the client connections from this machine to my server use encryption. Is there a way I can enforce this by using logon trigger ?