Using OAS SSL network encryption for securing data in motion

In Oracle you also have the possibility to use SSL based encrypted transmission between clients and servers. In this recipe we will introduce Oracle wallets. As its name suggests, an Oracle wallet is a container that can hold certificates, keys, and passwords. These are used primarily for network security operations and in implementing transparent data encryption, a subject that we will cover in Chapter 3, Securing Data at Rest.

Getting ready

In this recipe we will use nodeorcl1 and nodeorcl5.

How to do it...

In this recipe we will introduce Oracle wallets created and managed with the orapki utility.

1. As the user root the create directories for wallets and assign oracle as the owner on the nodeorcl1 and nodeorcl5 hosts:

   [root@nodeorcl1 ~]# mkdir -p /security/wallets/ssl
   [root@nodeorcl1 ~]# chown -R oracle:oinstall /security/wallets/ssl
   
   [root@nodeorcl5 ~]# mkdir -p /security/wallets/ssl
   [root@nodeorcl5 ~]# chown oraclient:oinstall ...