修改 OCI 的 Oracle 数据库适配器服务表单

如果要使用 JDBC OCI 驱动程序，并且要使用 SSL 通信，那么必须完成进一步的配置。 使用与 Oracle 之间的 SSL 通信复选框仅适用于 JDBC 瘦驱动程序。 要为 JDBC OCI 驱动程序启用 Oracle 适配器和 Oracle 数据库之间的 SSL 通信，必须在 Oracle Net Services 文件中包含 SSL 信息。

以下文件中的信息用作如何使用 SSL 配置 Transparent Application Failover 的示例：

sqlnet.ora:

SQLNET.AUTHENTICATION_SERVICES= (TCPS)
NAMES.DIRECTORY_PATH= (TNSNAMES)

SSL_VERSION = 3.0
SSL_CLIENT_AUTHENTICATION = FALSE
SSL_SERVER_DN_MATCH = YES

WALLET_LOCATION =
  (SOURCE =
    (METHOD = FILE)
    (METHOD_DATA =
      (DIRECTORY = C:\temp\client)
    )
  )

tnsnames.ora:

PRODONESSL =
(DESCRIPTION_LIST =
  (FAILOVER = true)
  (LOAD_BALANCE = false)
  (DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = TCPS)(HOST = YourFirstHost)(PORT = 2484))
    )
    (CONNECT_DATA =
      (SERVER = dedicated)
        (FAILOVER_MODE = 
           (BACKUP = PRODTWOSSL)
           (TYPE = select)
           (METHOD = basic)
           (RETRIES = 20)
           (DELAY = 3)
        )
      (SERVICE_NAME = ORCL)
    )
    (SECURITY =
      (SSL_SERVER_CERT_DN = "CN=client, C=US")
    )
  )
  (DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = TCPS)(HOST = YourSecondHost)(PORT = 2484))
    )
    (CONNECT_DATA =
      (SERVICE_NAME = ORCL)
    )
    (SECURITY =
      (SSL_SERVER_CERT_DN = "CN=client, C=US")
    )
  )
)

PRODTWOSSL =
(DESCRIPTION_LIST =
  (DESCRIPTION =
    (ADDRESS_LIST =
      (ADDRESS = (PROTOCOL = TCPS)(HOST = YourSecondHost)(PORT = 2484))
    )
    (CONNECT_DATA =
      (SERVICE_NAME = ORCL)
    )
    (SECURITY =
      (SSL_SERVER_CERT_DN = "CN=client, C=US")
    )
  )
)

有关为 JDBC OCI驱动程序配置 SSL 的更多信息，请参阅 “配置 SSL 连接 ”中的“客户端身份验证存储”小节。