Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature - SSL/TLS connection support #107

Open
Bisk1 opened this issue Sep 6, 2018 · 0 comments
Open

Feature - SSL/TLS connection support #107

Bisk1 opened this issue Sep 6, 2018 · 0 comments

Comments

@Bisk1
Copy link

Bisk1 commented Sep 6, 2018

I need to have a port open with SSL configured. I have successfully done it on Enterprise Edition of 12c and 11g, but I have problem with doing it with this image. I think it may be a useful general improvement.
Parameters (in form of environment variables):

  • port for TCPS
  • wallet files (if none provided, use pre-generated wallet with self-signed certificate)

I already started working on it:

  • XE 11g license allows using SSL, but it does not provide orapki to generate necessary wallet
  • I have used another instance to create a wallet and then moved it to this one on startup
  • I have modified listener.ora, tnsnames.ora and sqlnet.ora to setup connector on desired port and link wallet

Sadly, for some reasons unbeknown to me I can't get it working - I'm seeing this kind of error in trace files:
ntzlogin:Wallet open failed with error 29106
Looks like for some reason this database can't read my generated wallet.

If you want, I can share my work and elaborate about what I learned about SSL in Oracle. The biggest problem is that I am not an Oracle expert so I don't have enough knowledge to debug and fix issues I stumbled upon, so I am both willing to contribute and looking for help.

@wnameless Do you think it is possible to add this kind of feature?

@Bisk1 Bisk1 changed the title Feature - SSL port Feature - SSL/TLS connection support Sep 6, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant