Uploaded image for project: 'Debezium'
  1. Debezium
  2. DBZ-8788

Document using TLS encryption of Oracle connectors using JKS instead of Oracle Wallet

XMLWordPrintable

      Feature request or enhancement

      For feature requests or enhancements, provide this information, please:

      Which use case/requirement will be addressed by the proposed feature?

      Currently the oracle connector only supports the EZConnect way to connect to oracle using TLS encryption using this format: 

      jdbc:oracle:thin:@<SERVICE_NAME>?TNS_ADMIN=<WALLET_LOCATION>

      Note: On a side note.... This format also didn't work

      jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=TCPS)(HOST=<HOST_NAME>)(PORT=<PORT_NUMBER>))(CONNECT_DATA=(SERVICE_NAME=<SERVICE_NAME>)))

      Since, we need to automate using containers and oracle wallet creation requires full oracle installation on container it will result in heavier container which we want to avoid by using JKS keystore.

      We need the oracle connector to connect using JKS keystore

      -Djavax.net.ssl.trustStore=truststore.jks
      -Djavax.net.ssl.trustStorePassword={}{}
      -Djavax.net.ssl.keyStore=keystore.jks
      -Djavax.net.ssl.keyStorePassword={}**{}

      Conversation regarding the same is recorded in here:

      https://debezium.zulipchat.com/#narrow/channel/348250-community-oracle/topic/What.20properties.20to.20use.20for.20TLS.20encryption.20for.20oracle.20source/with/505095594

              ccranfor@redhat.com Chris Cranford
              ranjit.norman Ranjit Norman (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: