sqlnet.ora Changes Causing Issues
Date: Thu, 20 Oct 2022 12:45:51 +0000
Message-ID: <MN2PR16MB29733C1767A8B728AC3D5207C52A9_at_MN2PR16MB2973.namprd16.prod.outlook.com>
We are in the process of tightening our security by changing the crypto_checksum_type from SHA1/MD5 to SHA512 and making that and encryption required in the sqlnet.ora. In one application, when we make this change on the database server, they get an ORA-12650 error, which states that there is no matching checksum between the client and server.
On the app server (client), I can connect to the database via SQL*Plus, so the configuration works from a base install perspective. The vendor says that since we changed the environment, it's our fault that their code no longer works. They sent me this piece of code:
<?php
return [
'oracle' => [
'driver' => 'oracle',
'tns' => '(DESCRIPTION = (ADDRESS_LIST = (ADDRESS = (PROTOCOL = TCP)(HOST = ' . env('ORCL_HOST') . ')(PORT = 1521))) (CONNECT_DATA = (SID = ' . env('ORCL_SERVICE_NAME') . ')))',
// 'host' => env('ORCL_HOST', ''),
// 'port' => env('ORCL_PORT', '1521'),
'database' => env('ORCL_DATABASE', ''),
'username' => env('ORCL_USERNAME', ''),
'password' => env('ORCL_PASSWORD', ''),
'charset' => env('ORCL_CHARSET', 'AL32UTF8'),
'prefix' => env('ORCL_PREFIX', ''),
// 'service_name' => env('ORCL_SERVICE_NAME', ''),
],
];
Is there anything that can be added to this to support using encryption and SHA512 for crypto_checkumming?
Scott Canaan '88
Sr Database Administrator
Information & Technology Services
Finance & Administration
Rochester Institute of Technology
o: (585) 475-7886 | f: (585) 475-7520
srcdco_at_rit.edu<mailto:srcdco_at_rit.edu> | c: (585) 339-8659
CONFIDENTIALITY NOTE: The information transmitted, including attachments, is intended only for the person(s) or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and destroy any copies of this information.
--
http://www.freelists.org/webpage/oracle-l
Received on Thu Oct 20 2022 - 14:45:51 CEST