10-11-13, 04:55 #1Registered User
- Join Date
- Oct 2013
Unanswered: Encrypted Database connection using thin JDBC Driver
I am trying to connect to a Oracle DB using a thin JDBC Driver in a client(a Java Application)
i added below code to my java DB connection program
int level = AnoServices.REQUIRED;
Properties props = new Properties();
props.put("oracle.net.encryption_types_client", "(RC4_256,RC4_56,RC4_128,RC4_40,3DES168,3DES112)") ;
props.put("oracle.net.crypto_checksum_types_client ", "(MD5)");
props.put( "user", "user" );
props.put( "password", "password" );
Connection conn = DriverManager.getConnection("jdbcracle:thin:@HOSTNAME:PORT/DB", props);
Using this i am able to connect to DB but when the security tester analyze the network traffic he can see the connection string in plain text.
But the queries going to server and the result coming from server are in encrypted form.
Can anyone plz suggest wat can i do into it, do i need to add few more properties in props?
Do i need to make some configuration in server side as well? Currently in server side all configuration is default ( i.e. ACCEPTED)
10-11-13, 10:34 #2Registered User
- Join Date
- Jun 2003
- West Palm Beach, FL
Perhaps you need to setup an ssh connection.
The person who says it can't be done should not interrupt the person doing it. -- Chinese proverb