17. Generating encryption keys

使用默认的加密key加密用户密码，得到密码密值：

su - oracle
cd /ggs
./ggsci
encrypt password ggs,ENCRYPTKEY default
-- Using default key...
-- Encrypted password:  AACAAAAAAAAAAADAFHJEXBKHIDHHAGIC
-- Algorithm used:  BLOWFISH
dblogin userid ggs, password AACAAAAAAAAAAADAFHJEXBKHIDHHAGIC, ENCRYPTKEY default
-- Successfully logged into database.
exit

生成新的key，进行加密登录：

su - oracle
cd /ggs
./keygen 128 1
./keygen 128 2
./keygen 256 1
./keygen 256 2
# 使用命令生成AES128或者AES256的1个或2个key的密值
# 将该值保存到文件中即可作为key文件使用
echo "testkey $(/ggs/keygen 128 1)">/ggs/ENCKEYS
./ggsci
encrypt password ggs,ENCRYPTKEY testkey
-- Encrypted password:  AADAAAAAAAAAAADAIEFEYBRIKAZIFDHBUALJZCMBWFRCSGKARGJFYABJMGQIAFQFMIGBOGUERGEBDJQJ
-- Algorithm used:  AES128
dblogin userid ggs, password AADAAAAAAAAAAADAIEFEYBRIKAZIFDHBUALJZCMBWFRCSGKARGJFYABJMGQIAFQFMIGBOGUERGEBDJQJ, ENCRYPTKEY testkey
-- Successfully logged into database.
-- 如果key是AES256算法生成的，则需要指定，默认为AES128
-- dblogin userid ggs, password ... , AES256, ENCRYPTKEY testkey
exit

建议生成新的加密key并保存该文件，不建议使用默认key，OGG支持的加密算法有：

AES128   uses the AES-128 cipher, which has a key size of 128 bits
AES192   uses the AES-192 cipher, which has a key size of 192 bits
AES256   uses the AES-256 cipher, which has a key size of 256 bits
BLOWFISH uses Blowfsh encryption with a 64-bit block size 
         and a variable length key size from 32 bits to 128 bits

[TOC]