Configure Oracle to accept SSL connections from Replication
Agent.
- Configure listener.ora to use TCPS
protocol.
LISTENER = (ADDRESS_LIST=
(ADDRESS=(PROTOCOL=tcps)(HOST=servername)(PORT=2484)))
- Create an Oracle wallet and configure a certificate and its associated private
key into the wallet.
See the Oracle documentations for details.
- Provide the wallet location in sqlnet.ora and
listener.ora.
WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/server/wallet/path/)))
- Configure SSL_CLIENT_AUTHENTICATION in sqlnet.ora and
listener.ora to turn on or off the client
authentication.
SSL_CLIENT_AUTHENTICATION=FALSE or
SSL_CLIENT_AUTHENTICATION=TRUE
- If
you turn on the client authentication, add the CA root certificate of the
Replication Agent certificate to the Oracle wallet.