Encryption over Database Link
- From: "Deas, Scott" <Scott.Deas@xxxxxxx>
- To: "oracle-l@xxxxxxxxxxxxx" <oracle-l@xxxxxxxxxxxxx>
- Date: Thu, 5 Jun 2014 16:29:16 +0000
Hello,
We have a requirement that we create database links to a database at an
external site. The network will be public, meaning we need to ensure all
communication across said network needs to be encrypted.
We have no control over the destination database, we are passing SQL to the
destination database and pulling back results, but need to make sure that all
transmissions across the link will be encrypted (not just user authentication).
The local databases will be 10.2.0.4 on AIX and 11.2.0.4 on Linux. The
destination database will be 11.2.0.3 on AIX. All are Enterprise Edition.
I've read through some of the documentation for Advanced Security, and we do
have some licenses available, so if that's the best solution, we can implement
it at the local databases, but destination database will not have Advanced
Security installed, so any solutions that require it on both sides would not
work.
Additionally (and most obviously), we want to avoid any changes to the code
utilizing these links, so any suggestions creating views on top of tables using
DBMS_CRYPTO to encrypt and then decrypt at the local database won't work. We
really just need to implement a secure way to transfer packets been the two
sites.
Thanks,
Scott
Notice of Confidentiality: **This E-mail and any of its attachments may contain
Lincoln National Corporation proprietary information, which is privileged,
confidential,
or subject to copyright belonging to the Lincoln National Corporation family of
companies. This E-mail is intended solely for the use of the individual or
entity to
which it is addressed. If you are not the intended recipient of this E-mail,
you are
hereby notified that any dissemination, distribution, copying, or action taken
in
relation to the contents of and attachments to this E-mail is strictly
prohibited
and may be unlawful. If you have received this E-mail in error, please notify
the
sender immediately and permanently delete the original and any copy of this
E-mail
and any printout. Thank You.**
Other related posts:
