Configuring Transport Layer Security Authentication

You can configure Oracle Database to use Transport Layer Security authentication.

• Transport Layer Security and Secure Sockets Layer
  Netscape Communications Corporation designed Transport Layer Security (TLS), previously called Secure Sockets Layer (SSL), to secure network connections.

• How Oracle Database Uses Transport Layer Security for Authentication
  Transport Layer Security works with the core Oracle Database features such as encryption and data access controls.

• How Transport Layer Security Works in an Oracle Environment: The TLS Handshake
  When a network connection over Transport Layer Security is initiated, the client and server perform a TLS handshake before performing the authentication.

• Public Key Infrastructure in an Oracle Environment
  A public key infrastructure (PKI) is a substrate of network components that provide a security underpinning, based on trust assertions, for an entire organization.

• Transport Layer Security Combined with Other Authentication Methods
  You can configure Oracle Database to use TLS concurrently with database user names and passwords, RADIUS, and Kerberos.

• Transport Layer Security and Firewalls
  Oracle Database supports two application proxy-based and stateful packet inspection of firewalls.

• Transport Layer Security Usage Issues
  You should be aware of TLS usage issues, such as communication with other Oracle products and types of supported authentication and encryption methods.

• Transport Layer Security Connection without a Client Wallet
  A Transport Layer Security (TLS) connection that uses a common root certificate for the database server does not require a client wallet.

• Transport Layer Security Connection with a Client Wallet
  You must configure Transport Layer Security on the server, and then the client.

• Oracle Wallet Search Order
  Oracle Database provides several routes for finding the wallet on a server in a Transport Layer Security (TLS) environment.

• Transport Layer Security Connections in an Oracle Real Application Clusters Environment
  You can configure Transport Layer Security (TLS) connections in an Oracle Real Application Clusters (Oracle RAC) environment by using Oracle RAC tools and modifying Oracle Database configuration files.

• Configuring Transport Layer Security for Client Authentication and Encryption Using Microsoft Certificate Store
  To perform this configuration with Microsoft Certificate Store (MCS), you use the orapki command-line tool to generate certificates and manipulate the Oracle wallets.

• Troubleshooting the Transport Layer Security Configuration
  Common errors may occur while you use the Oracle Database SSL adapter.

• Certificate Validation with Certificate Revocation Lists
  Oracle provides tools that enable you to validate certificates using certificate revocation lists.

• Configuring Your System to Use Hardware Security Modules
  Oracle Database supports hardware security modules that use APIs that conform to the RSA Security, Inc., PKCS #11 specification.