A
Encryption and Checksum Parameters

This appendix shows an example of a profile (SQLNET.ORA) generated after you perform the network configuration described in Chapter 2, "Configuring Encryption and Checksumming" of this guide. It includes the following:

• Section A.1, "SQLNET.ORA for a Single Community Set of Clients and Servers"

This section contains a sample SQLNET.ORA configuration file for a set of clients with similar characteristics and a set of servers with similar characteristics. Examples of the Oracle Advanced Networking Option encryption and checksumming parameters are included in the file.

A.1 SQLNET.ORA for a Single Community Set of Clients and Servers

Following is a sample SQLNET.ORA file.

################

# Filename......: sqlnet.ora

# Date..........: 12-MAY-97 13:12:17

################

AUTOMATIC_IPC = ON

TRACE_LEVEL_CLIENT = OFF

SQLNET.EXPIRE_TIME = 0

NAMES.DEFAULT_DOMAIN = world

SQLNET.CRYPTO_SEED = "-kdje83KKEP39487dvmlqEPTbxXe702M73"

SQLNET.ENCRYPTION_CLIENT = REQUESTED

SQLNET.ENCRYPTION_TYPES_CLIENT = (RC4_40,DES40)

SQLNET.CRYPTO_CHECKSUM_CLIENT = REQUESTED

SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT = (MD5)

SQLNET.CRYPTO_CHECKSUM_CLIENT = REQUESTED

SQLNET.CRYPTO_CHECKSUM_TYPES_CLIENT = (MD5)

SQLNET.ENCRYPTION_TYPES_SERVER = (RC4_40,DES40)

SQLNET.CRYPTO_CHECKSUM_SERVER = REQUESTED

NAMES.DIRECTORY_PATH = (TNSNAMES,ONAMES) 

SQLNET.AUTHENTICATION_SERVICES = (SECURID) 

Note the following:

• If you do not specify any values for Server Encryption, Client Encryption, Server Checksum, or Client Checksum, the corresponding configuration parameters will not appear in the SQLNET.ORA file. However,the Oracle Advanced Networking Option defaults the value to ACCEPTED.
• If no encryption or checksumming algorithm is specified on the Server Encryption, Client Encryption, Server Checksum, or Client Checksum pages, the server side of the connection uses the first algorithm in its own list of installed algorithms that also appears in the client's list of installed algorithms.
• Encryption and checksumming function independently of each other; encryption can be activated while checksumming is off, and vice versa.

---