通过oracle wallet配置listener tcps加密

一 配置客户端和服务端的wallet

2端配置方法一致，相互添加证书

orapki wallet create -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD -auto_login_local

orapki wallet add -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD  -dn "CN=`hostname`" -keysize 1024 -self_signed -validity 3650

导出证书
orapki wallet export -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD  -dn "CN=`hostname`" -cert /tmp/`hostname`-certificate.crt

导入证书
orapki wallet add -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD   -trusted_cert -cert /tmp/ROCKY-20160621P-certificate.crt

验证
orapki wallet display -wallet "/u01/oracle/wallet" -pwd Wdkf984jkkgekj434FKFD

二监听配置

2端sqlnet一致添加

WALLET_LOCATION =
   (SOURCE =
     (METHOD = FILE)
     (METHOD_DATA =
       (DIRECTORY = /u01/app/oracle/wallet)
     )
   )
SQLNET.AUTHENTICATION_SERVICES = (TCPS,NTS,BEQ)
SSL_CLIENT_AUTHENTICATION = FALSE
SSL_CIPHER_SUITES = (SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA)

服务端netca配置listener

客户端添加tnsname

三验证

tnsping ok

sqlplus 登录ok