Database Networking (MOSC)

MOSC Banner

Disable TLSv1.0 and TLSv1.1 from TCPS listener.

The database and grid version is 19.10

In the sqlnet.ora file there are the entries below

....

# activate Native Network Encryption (NNE)

SQLNET.ENCRYPTION_SERVER = REQUIRED  ### REQUIRED : It means that the client or server is necessarily trying to establish an encrypted connection

SQLNET.ENCRYPTION_TYPES_SERVER = (AES256)

#

# activate SSL/TLS

SSL_VERSION = 1.2

WALLET_LOCATION =

 (SOURCE =

  (METHOD = FILE)

  (METHOD_DATA =

   (DIRECTORY = /u01/app/oracle/admin/xyz/wallet/tlsnet)

  )

 )

SSL_CLIENT_AUTHENTICATION = FALSE

#

SSL_CIPHER_SUITES = (SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA)

#

# to allow Native Network Encrypion + SSL/TLS

SQLNET.IGNORE_ANO_ENCRYPTION_FOR_TCPS = TRUE

Howdy, Stranger!

Log In

To view full details, sign in to My Oracle Support Community.

Register

Don't have a My Oracle Support Community account? Click here to get started.

Category Leaderboard

Top contributors this month

New to My Oracle Support Community? Visit our Welcome Center

MOSC Help Center