Re: Oracle wallet and jdbc thin driver

From: Igor Racic <igor.racic_at_gmail.com>
Date: Tue, 19 Jan 2016 13:24:50 +0100
Message-ID: <CAGjkCBYCYWgep7c=1+F0bRA1sSUXUHKw2WFcesU8pnC6nMdJWQ_at_mail.gmail.com>



Hi Peter,

No need to be world readable, just readable for user running the Java process.

Regards,
Igor

2016-01-15 17:08 GMT+01:00 Peter Hitchman <pjhoraclel_at_gmail.com>:
> Hi
> Oracle Database 11.2.0.4
> on OEL 6.5
>
> I wss trying out some test code with the wallet and JDBC thin driver written
> when we were using 11.1.0.6.
>
> My CLASSPATH contains:
>
> /oracle/app/oracle/product/11.2.0/client_1/jdbc/lib/ojdbc6.jar
> /oracle/app/oracle/product/11.2.0/client_1/rdbms/jlib/xdb.jar
> /oracle/app/oracle/product/11.2.0/client_1/lib/xmlparserv2.jar
> /oracle/app/oracle/product/11.2.0/client_1/jlib/oraclepki.jar
>
> I kept getting this error:-
>
> "java.sql.SQLException: encountered a problem with the Secret Store. Check
> the wallet location for the presence of an open wallet (cwallet.sso) and
> ensure that this wallet contains the correct credentials using the mkstore
> utility: java.io.IOException: PKI-02002: Unable to open the wallet. Check
> password."
>
> Eventually I managed to fix this by changing the permissions of the
> ewallet.p12 so that it is world readable, the same as the cwallet.sso file.
>
> I do not like doing this because it means anyone can now copy both the .sso
> and .p12 files.
>
> I do not understand why this is required when using the thin driver. Any
> ideas?
>
> Thanks
>
> Pete

--
http://www.freelists.org/webpage/oracle-l
Received on Tue Jan 19 2016 - 13:24:50 CET

Original text of this message