Database Software

Announcement

For appeals, questions and feedback about Oracle Forums, please email oracle-forums-moderators_us@oracle.com. Technical questions should be asked in the appropriate category. Thank you!

Interested in getting your voice heard by members of the Developer Marketing team at Oracle? Check out this post for AppDev or this post for AI focus group information.

USE SSL FOR ENCRYPTION ONLY in Oracle12c failed

JijoACJul 12 2019 — edited Jul 17 2019

We are trying to implement SSL encryption between the oracle12c server and java thin client. we followed the steps described in https://www.oracle.com/technetwork/database/enterprise-edition/wp-oracle-jdbc-thin-ssl-130128.pdf

we are trying CASE #1: USE SSL FOR ENCRYPTION ONLY, when we implement

First, we got error

java.sql.SQLRecoverableException: IO Error: No appropriate protocol (protocol is disabled or cipher suites are inappropriate)

So we updated cipher suite list

props.setProperty("oracle.net.ssl_cipher_suites", "(" + "SSL_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, " + "SSL_ECDHE_ECDSA_WITH_AES_128_CBC_SHA, " + "SSL_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 )");

Now we are getting "java.sql.SQLRecoverableException: IO Error: The Network Adapter could not establish the connection"

In the listener.log

(ADDRESS=(PROTOCOL=tcps)(HOST=192.168.0.153)(PORT=10023)) * * 542 TNS-00542: SSL Handshake failed TNS-12560: TNS:protocol adapter error

Is there any difference in the Oracle12c?

Added on Jul 12 2019

#database-security, #database-security-general

7 comments

2,839 views