ogg数据加密

当ogg走公网的时候，为了保证数据安全，需要对ogg进行加密

-- 生成ENCRYPT KEY

[oracle@dg ogg]$ keygen 256 2

0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B

0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D

-- 编辑ENCKEYS文件

[oracle@dg ogg]$ vi ENCKEYS

## encryption file

## Key name     Key value

scott   0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B

ogg     0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D

-- 设置ENCRYPT KEY

[oracle@dg ogg]$ ggsci

GGSCI (dg) 1> encrypt password tiger aes256 encryptkey scott

Encrypted password:  AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE

Algorithm used:  AES256

GGSCI (dg) 2> encrypt password oracle aes256 encryptkey ogg

Encrypted password:  AADAAAAAAAAAAAGALDQGRIAEZHSFHIXEAIUJBHFHECKDPDWCCDGHNALFKGQBWCMIZHPJTJGCNEXEOCEHYDSABJNBKAODQHPILEXFEDUAWHGCQCWF

Algorithm used:  AES256

-- 编辑参数文件，添加ENCRYPT KEY

GGSCI (dg) 3> edit param extdg

extract extdg

setenv(NLS_LANG="AMERICAN_AMERICA.ZHS16GBK")

setenv(ORACLE_SID="wailon")

userid scott,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &

AES256,ENCRYPTKEY scott

--tranlogoptions excludeuser scott

-- 提取文件加密

ENCRYPTTRAIL AES256 KEYNAME scott

exttrail /u01/app/ogg/dirdat/dg

dynamicresolution

gettruncates

getbeforecols

table scott.*;

GGSCI (dg) 4> edit param dgrac

extract dgrac

setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)

userid scott@wailon,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &

AES256,ENCRYPTKEY scott

rmthost 192.168.56.131,mgrport 7801

-- 发送前解密,对应提取进程的加密KEY

DECRYPTTRAIL AES256 KEYNAME scott

-- 加密后发送

ENCRYPTTRAIL AES256 KEYNAME ogg

rmttrail /u01/app/ogg/dirdat/dg

--NOPASSTHRU

PASSTHRU

gettruncates

table scott.*;

GGSCI (dg) 5> start extdg

Sending START request to MANAGER ...

EXTRACT EXTDG starting

GGSCI (dg) 6> start dgrac

Sending START request to MANAGER ...

EXTRACT DGRAC starting

GGSCI (dg) 7> info

Program     Status      Group       Lag at Chkpt  Time Since Chkpt

MANAGER     RUNNING                                          

EXTRACT     RUNNING     DGRAC       00:00:00      00:32:09    

EXTRACT     RUNNING     EXTDG       00:00:00      00:00:07    

REPLICAT    RUNNING     REP1        00:00:00      00:00:01  

-- 同时REPLICAT端需要解密

注意此时需要在

[ oracle@n2 OGG_MYSQL]$ vi ENCKEYS

ogg 0x7D790A460B9EA930E0E25860794DCC2713EEDE5BAA8E2B44209B2C13A2441124

然后才能启动备库解密进程

GGSCI (dgrac) 15> edit param dg

replicat dg

setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)

userid scott@ogg, password tiger

assumetargetdefs

reperror default,discard

discardfile /u01/app/ogg/dirout/dg.dsc,append,megabytes 100

gettruncates

-- 应用前解密，对应发送的加密KEY

DECRYPTTRAIL AES256 KEYNAME ogg

--batchsql

map scott.b, target scott.b,&

colmap(usedefaults, "USERNAME"="OWNER"),&

--resolve conflict insert into when update not found

RESOLVECONFLICT (UPDATEROWMISSING, (DEFAULT, OVERWRITE));

map scott.*,target scott.*;