Is it possible to use Oracle Wallet for node connection to its vault?

Is it possible to start an enterprise node, using an Oracle 12c backed up
vault configured via Oracle Wallet (i.e., configure the node.conf using only a
dataSource.url="jdbc:oracle:thin:@host:port:@SOME_ORACLE_WALLET_TNS" without
specifying any dataSource.username or dataSource.password parameters ) ?

In this case, please inform which additional oracle .jar files should be
added to the node drivers dir.

asked Nov 21 '18 at 16:36

vfalcao

8418

add a comment |

In this case, please inform which additional oracle .jar files should be
added to the node drivers dir.

asked Nov 21 '18 at 16:36

vfalcao

8418

add a comment |

In this case, please inform which additional oracle .jar files should be
added to the node drivers dir.

asked Nov 21 '18 at 16:36

vfalcao

8418

In this case, please inform which additional oracle .jar files should be
added to the node drivers dir.

corda

asked Nov 21 '18 at 16:36

vfalcao

8418

asked Nov 21 '18 at 16:36

vfalcao

8418

asked Nov 21 '18 at 16:36

vfalcao

8418

asked Nov 21 '18 at 16:36

vfalcao

8418

asked Nov 21 '18 at 16:36

vfalcao

8418

add a comment |

2 Answers
2

active

oldest

votes

Oracle wallet is supported in Corda Enterprise. Below is a working configuration with Oracle Wallet, and has been tested with Oracle 11g and Oracle 12c.

Prerequisites

Oracle wallet is configured with auto login (-auto_login_local) for the node's database

Assuming that the node's database connection URL is configured in tnsnames.ora, with alias "db11g":

$ echo 'For JDBC URL ==> "jdbc:oracle:thin:@localhost:1521/xe" ==> below is an example of tnsnames.ora'

$ cat ~/oracle_experiment/tnsnames.ora 

db11g =

  (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = xe)

    )

  )

Wallet location is configured in sqlnet.ora:

$ cat ~/oracle_experiment/sqlnet.ora

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /Users/corda/oracle_wallet/)

     )

   )



SQLNET.WALLET_OVERRIDE = TRUE

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 0

Sqlplus should be able to login without a password challenge:

sqlplus /@db11g     

    SQL*Plus: Release 12.2.0.1.0 Production on Tue Nov 27 15:17:00 2018 

    Copyright (c) 1982, 2017, Oracle.  All rights reserved. 

    Last Successful login time: Tue Nov 27 2018 14:46:09 +08:00 

    Connected to:   

    Oracle Database 12c Standard Edition Release 12.1.0.2.0 - 64bit Production  

    SQL>

Necessary steps

Change the database-specific configuration from:

$ cat dbconfig_oracle11g.conf

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:@localhost:1521/xe"

    dataSource.user = corda_es_user

    dataSource.password = corda_es_passwd

}

$ cat dbconfig_oracle_wallet.conf 

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:/@db11g"

    dataSource.user=null

    dataSource.password=null   // user and password can't be ignored and can't be left blank.

}

Download and copy the following JARs into the node's drivers folder:

]$ ls <corda>/drivers/

ojdbc8.jar

osdt_cert.jar

osdt_core.jar

oraclepki.jar

Start the node with the oracle.net.wallet_location and oracle.net.tns_admin options:

]$ java -Doracle.net.wallet_location=/Users/corda/oracle_wallet/ -Doracle.net.tns_admin=/Users/corda/oracle_experiment/ -jar corda.jar

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

add a comment |

Refer to the SSL with JDBC blog for more details.

answered Nov 30 '18 at 19:31

Nirmala

649510

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

add a comment |

Your Answer

StackExchange.ifUsing("editor", function () {
StackExchange.using("externalEditor", function () {
StackExchange.using("snippets", function () {
StackExchange.snippets.init();
});
});
}, "code-snippets");

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "1"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});

}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fstackoverflow.com%2fquestions%2f53416683%2fis-it-possible-to-use-oracle-wallet-for-node-connection-to-its-vault%23new-answer', 'question_page');
}
);

Post as a guest

Name

Required, but never shown

2 Answers
2

active

oldest

votes

2 Answers
2

active

oldest

votes

Oracle wallet is supported in Corda Enterprise. Below is a working configuration with Oracle Wallet, and has been tested with Oracle 11g and Oracle 12c.

Prerequisites

Oracle wallet is configured with auto login (-auto_login_local) for the node's database

Assuming that the node's database connection URL is configured in tnsnames.ora, with alias "db11g":

$ echo 'For JDBC URL ==> "jdbc:oracle:thin:@localhost:1521/xe" ==> below is an example of tnsnames.ora'

$ cat ~/oracle_experiment/tnsnames.ora 

db11g =

  (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = xe)

    )

  )

Wallet location is configured in sqlnet.ora:

$ cat ~/oracle_experiment/sqlnet.ora

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /Users/corda/oracle_wallet/)

     )

   )



SQLNET.WALLET_OVERRIDE = TRUE

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 0

Sqlplus should be able to login without a password challenge:

sqlplus /@db11g     

    SQL*Plus: Release 12.2.0.1.0 Production on Tue Nov 27 15:17:00 2018 

    Copyright (c) 1982, 2017, Oracle.  All rights reserved. 

    Last Successful login time: Tue Nov 27 2018 14:46:09 +08:00 

    Connected to:   

    Oracle Database 12c Standard Edition Release 12.1.0.2.0 - 64bit Production  

    SQL>

Necessary steps

Change the database-specific configuration from:

$ cat dbconfig_oracle11g.conf

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:@localhost:1521/xe"

    dataSource.user = corda_es_user

    dataSource.password = corda_es_passwd

}

$ cat dbconfig_oracle_wallet.conf 

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:/@db11g"

    dataSource.user=null

    dataSource.password=null   // user and password can't be ignored and can't be left blank.

}

Download and copy the following JARs into the node's drivers folder:

]$ ls <corda>/drivers/

ojdbc8.jar

osdt_cert.jar

osdt_core.jar

oraclepki.jar

Start the node with the oracle.net.wallet_location and oracle.net.tns_admin options:

]$ java -Doracle.net.wallet_location=/Users/corda/oracle_wallet/ -Doracle.net.tns_admin=/Users/corda/oracle_experiment/ -jar corda.jar

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

add a comment |

Oracle wallet is supported in Corda Enterprise. Below is a working configuration with Oracle Wallet, and has been tested with Oracle 11g and Oracle 12c.

Prerequisites

Oracle wallet is configured with auto login (-auto_login_local) for the node's database

Assuming that the node's database connection URL is configured in tnsnames.ora, with alias "db11g":

$ echo 'For JDBC URL ==> "jdbc:oracle:thin:@localhost:1521/xe" ==> below is an example of tnsnames.ora'

$ cat ~/oracle_experiment/tnsnames.ora 

db11g =

  (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = xe)

    )

  )

Wallet location is configured in sqlnet.ora:

$ cat ~/oracle_experiment/sqlnet.ora

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /Users/corda/oracle_wallet/)

     )

   )



SQLNET.WALLET_OVERRIDE = TRUE

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 0

Sqlplus should be able to login without a password challenge:

sqlplus /@db11g     

    SQL*Plus: Release 12.2.0.1.0 Production on Tue Nov 27 15:17:00 2018 

    Copyright (c) 1982, 2017, Oracle.  All rights reserved. 

    Last Successful login time: Tue Nov 27 2018 14:46:09 +08:00 

    Connected to:   

    Oracle Database 12c Standard Edition Release 12.1.0.2.0 - 64bit Production  

    SQL>

Necessary steps

Change the database-specific configuration from:

$ cat dbconfig_oracle11g.conf

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:@localhost:1521/xe"

    dataSource.user = corda_es_user

    dataSource.password = corda_es_passwd

}

$ cat dbconfig_oracle_wallet.conf 

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:/@db11g"

    dataSource.user=null

    dataSource.password=null   // user and password can't be ignored and can't be left blank.

}

Download and copy the following JARs into the node's drivers folder:

]$ ls <corda>/drivers/

ojdbc8.jar

osdt_cert.jar

osdt_core.jar

oraclepki.jar

Start the node with the oracle.net.wallet_location and oracle.net.tns_admin options:

]$ java -Doracle.net.wallet_location=/Users/corda/oracle_wallet/ -Doracle.net.tns_admin=/Users/corda/oracle_experiment/ -jar corda.jar

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

add a comment |

Oracle wallet is supported in Corda Enterprise. Below is a working configuration with Oracle Wallet, and has been tested with Oracle 11g and Oracle 12c.

Prerequisites

Oracle wallet is configured with auto login (-auto_login_local) for the node's database

Assuming that the node's database connection URL is configured in tnsnames.ora, with alias "db11g":

$ echo 'For JDBC URL ==> "jdbc:oracle:thin:@localhost:1521/xe" ==> below is an example of tnsnames.ora'

$ cat ~/oracle_experiment/tnsnames.ora 

db11g =

  (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = xe)

    )

  )

Wallet location is configured in sqlnet.ora:

$ cat ~/oracle_experiment/sqlnet.ora

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /Users/corda/oracle_wallet/)

     )

   )



SQLNET.WALLET_OVERRIDE = TRUE

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 0

Sqlplus should be able to login without a password challenge:

sqlplus /@db11g     

    SQL*Plus: Release 12.2.0.1.0 Production on Tue Nov 27 15:17:00 2018 

    Copyright (c) 1982, 2017, Oracle.  All rights reserved. 

    Last Successful login time: Tue Nov 27 2018 14:46:09 +08:00 

    Connected to:   

    Oracle Database 12c Standard Edition Release 12.1.0.2.0 - 64bit Production  

    SQL>

Necessary steps

Change the database-specific configuration from:

$ cat dbconfig_oracle11g.conf

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:@localhost:1521/xe"

    dataSource.user = corda_es_user

    dataSource.password = corda_es_passwd

}

$ cat dbconfig_oracle_wallet.conf 

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:/@db11g"

    dataSource.user=null

    dataSource.password=null   // user and password can't be ignored and can't be left blank.

}

Download and copy the following JARs into the node's drivers folder:

]$ ls <corda>/drivers/

ojdbc8.jar

osdt_cert.jar

osdt_core.jar

oraclepki.jar

Start the node with the oracle.net.wallet_location and oracle.net.tns_admin options:

]$ java -Doracle.net.wallet_location=/Users/corda/oracle_wallet/ -Doracle.net.tns_admin=/Users/corda/oracle_experiment/ -jar corda.jar

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

Oracle wallet is supported in Corda Enterprise. Below is a working configuration with Oracle Wallet, and has been tested with Oracle 11g and Oracle 12c.

Prerequisites

Oracle wallet is configured with auto login (-auto_login_local) for the node's database

Assuming that the node's database connection URL is configured in tnsnames.ora, with alias "db11g":

$ echo 'For JDBC URL ==> "jdbc:oracle:thin:@localhost:1521/xe" ==> below is an example of tnsnames.ora'

$ cat ~/oracle_experiment/tnsnames.ora 

db11g =

  (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST = localhost)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = xe)

    )

  )

Wallet location is configured in sqlnet.ora:

$ cat ~/oracle_experiment/sqlnet.ora

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /Users/corda/oracle_wallet/)

     )

   )



SQLNET.WALLET_OVERRIDE = TRUE

SSL_CLIENT_AUTHENTICATION = FALSE

SSL_VERSION = 0

Sqlplus should be able to login without a password challenge:

sqlplus /@db11g     

    SQL*Plus: Release 12.2.0.1.0 Production on Tue Nov 27 15:17:00 2018 

    Copyright (c) 1982, 2017, Oracle.  All rights reserved. 

    Last Successful login time: Tue Nov 27 2018 14:46:09 +08:00 

    Connected to:   

    Oracle Database 12c Standard Edition Release 12.1.0.2.0 - 64bit Production  

    SQL>

Necessary steps

Change the database-specific configuration from:

$ cat dbconfig_oracle11g.conf

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:@localhost:1521/xe"

    dataSource.user = corda_es_user

    dataSource.password = corda_es_passwd

}

$ cat dbconfig_oracle_wallet.conf 

dataSourceProperties = {

    dataSourceClassName = "oracle.jdbc.pool.OracleDataSource"

    dataSource.url = "jdbc:oracle:thin:/@db11g"

    dataSource.user=null

    dataSource.password=null   // user and password can't be ignored and can't be left blank.

}

Download and copy the following JARs into the node's drivers folder:

]$ ls <corda>/drivers/

ojdbc8.jar

osdt_cert.jar

osdt_core.jar

oraclepki.jar

Start the node with the oracle.net.wallet_location and oracle.net.tns_admin options:

]$ java -Doracle.net.wallet_location=/Users/corda/oracle_wallet/ -Doracle.net.tns_admin=/Users/corda/oracle_experiment/ -jar corda.jar

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

edited Nov 27 '18 at 17:18

answered Nov 23 '18 at 8:46

Joel

11k11329

answered Nov 23 '18 at 8:46

Joel

11k11329

answered Nov 23 '18 at 8:46

Joel

11k11329

add a comment |

Refer to the SSL with JDBC blog for more details.

answered Nov 30 '18 at 19:31

Nirmala

649510

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

add a comment |

Refer to the SSL with JDBC blog for more details.

answered Nov 30 '18 at 19:31

Nirmala

649510

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

add a comment |

Refer to the SSL with JDBC blog for more details.

answered Nov 30 '18 at 19:31

Nirmala

649510

Refer to the SSL with JDBC blog for more details.

answered Nov 30 '18 at 19:31

Nirmala

649510

answered Nov 30 '18 at 19:31

Nirmala

649510

answered Nov 30 '18 at 19:31

Nirmala

649510

answered Nov 30 '18 at 19:31

Nirmala

649510

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

add a comment |

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

This suggestion is highly generic. It does not give more details than Joel's answer regarding Oracle Wallet use with Corda.

– vfalcao
Feb 5 at 22:52

add a comment |

draft saved

draft discarded

Thanks for contributing an answer to Stack Overflow!

Please be sure to answer the question. Provide details and share your research!

But avoid …

Asking for help, clarification, or responding to other answers.

Making statements based on opinion; back them up with references or personal experience.

To learn more, see our tips on writing great answers.

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Post as a guest

Name

Required, but never shown

Name

Required, but never shown

Name

Required, but never shown

This page is only for reference, If you need detailed information, please check here

Search This Blog

Ufyukyu