Re: List of Cipher Suites

https://docs.oracle.com/en/database/oracle/oracle-database/12.2/dbseg/configuring-secure-sockets-layer-authentication.html#GUID-EFF4B2C9-2D25-473D-B718-A42754252347 is the equivalent page for 12.2

On Wed, Jul 17, 2019 at 6:17 AM manikandan <pvmanikandan_at_gmail.com> wrote:

> Hi,
>
> Is there anyway i can identify the supported Cipher suites from RDBMS
> Oracle Home?
>
> Env Details:-
>
> AIX 7
> RDBMS 12.2
> GI 12.2
>
> Little Background on the requirement:-
>
> Vendor application is using ODBC to connect to Database using TLS 1.2. If
> we dont specify cipher suites in sqlnet.ora, the connection is
> happening in database using Cipher TLS_RSA_WITH_AES_256_GCM_SHA384
> (confirmed from tcpdump trace).
>
> As per Enterprise Security policy, we can only use the below Cipher suites
>
> TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256
>
> TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384
>
> TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256
>
> TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384
>
> TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
>
> TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
>
> TLS_DHE_RSA_WITH_AES_128_GCM_SHA256
>
> TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
>
> TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384
>
> TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
>
>
> Security team is suggesting to use the Cipher
> "TLS_DHE_RSA_WITH_AES_256_GCM_SHA384" and Vendor also confirmed that ODBC
> supports the mentioned Cipher.
> But when we test the Cipher by adding to the Cipher list in sqlnet.ora ,
> the connection is failing with Code 5 error in Client side. It seems
> like the connection is establishing to listener (could see in listener
> log) and then fails (may be failing in Handshake). I did a sqlnet trace
> but could not find any clue.
>
> I am trying to find what are the 12.2 supported Cipher suites.
>
> The below 12.1 Oracle Doc lists bunch of Cipher suites.
>
> https://docs.oracle.com/database/121/DBSEG/asossl.htm#GUID-D496F6A9-BD28-4B4D-BD77-991F49F036A7
>
>
> Are those only supported list of Ciphers by Oracle Database?. Please
> suggest.
>
> Thanks,
> Mani
>
>
>

-- 
Niall Litchfield
Oracle DBA
http://www.orawin.info

--
http://www.freelists.org/webpage/oracle-l