Secure Oracle Database connections with one-way Transport Layer Security (TLS)
Вставка
- Опубліковано 10 вер 2024
- Join us for April's Database Security Office Hours where we will cover the basics of encrypting your client-server data in-transit with one-way TLS. This presentation will explain the basics of how Oracle implements TLS with wallets, where to store the wallets, how to use a self-signed root CA to sign your Oracle Database certificates, and how to deploy your root CA-signed certificates so any user on a Windows or Linux system can use one-way TLS encryption to the Oracle Database without using a client wallet.
Join the Database Security product management team on the second Wednesday of the month at 10:00 am US Central time for Database Security Office hours. We hold these sessions each month to keep you updated on what's new with Oracle Database security. We cover announcements about new features, products, and capabilities followed by a discussion of some technical topic. Each session ends with an opportunity for open Q&A about database security.
Here is a guide to the recording;
00:10 Alan admires Rich’s blue shirt
01:25 Announcements
02:32 Migrate from traditional to unified auditing
03:28 Data Safe enhancements
04:50 Oracle support notes on TLS
06:00 New LiveLab - Successfully protect tour database communication using one-way TLS
06:50 Oracle Database World Events - free to attend
07:44 Oracle Database 23c FREE Developer Release
08:25 Encrypt your database client-server connection with TLS
10:50 Network encryption standards
12:22 TLS utilities from Oracle and OpenSSL
13:23 TLS decisions and trade-offs
14:14 Native network encryption or TLS
15:45 Self-signed root certificates or common root cert
18:22 Self-signed root certificates or common root cert diagraph
20:38 TLS or mutual TLS (mTLS)
21:31 Client with and without a wallet
22:55 Example of configuring TLS: common CA root trust
25:17 Example of configuring TLS: self-signed CA root trust
27:24 TLS
30:12 Demonstration
45:00 Using root CA certificate to connect from Oracle Instant Client on Windows
48:36 Troubleshooting TLS errors
55:35 Thanks, see you next month!
This video emphasize too much on certificate, should focus on how to configure oracle server not educate how ssl worked.