Home » RDBMS Server » Security » How to connect Oracle 8 client to 11gR2 when using network data encryption (net80, forms6i and 11gr2)
How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657082] Thu, 27 October 2016 09:58 Go to next message
joy_division
Messages: 4803
Registered: February 2005
Location: East Coast USA
Senior Member
I am at a client site who has modern databases of 11gR2 and 12c, but they are using Forms 6i, which surprisingly works with these database no problem.

They are looking to implement Network Data Encryption. When the server uses the parameter sqlnet.encryption_server=REQUIRED, they can use sqlnet.encryption_server=ACCEPTED with an 11g client to connect, but with the 8 client (and forms 6i) they get ORA-12660 Encryption or crypto-checksumming parameters incompatible.

Completely unsupported, but is there any way they can implement encryption so that they can continue to use forms 6i? Is there a way maybe to get forms 6i to use the 11g client?

I feel like I was knocked back into the stone age, but want to see if I can help them out a little instead of telling them they have to upgrade their forms to 11g or greater.
Re: How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657083 is a reply to message #657082] Thu, 27 October 2016 10:27 Go to previous messageGo to next message
John Watson
Messages: 7186
Registered: January 2010
Location: Global Village
Senior Member
The problem could be the encryption algorithm. IIRC, Forms 6i is built on the 8i libraries, and 8i could do only DES encryption. The database is probably asking for AES.
Re: How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657084 is a reply to message #657083] Thu, 27 October 2016 10:37 Go to previous messageGo to next message
joy_division
Messages: 4803
Registered: February 2005
Location: East Coast USA
Senior Member
Thanks John. I had an inkling that the encryption method would be the issue since there have been new encryption methods since back then. Like you said, DES used to be the default and now it is AES. I'll ask them what they have setup on their servers. I cannot check myself. I am sure that is it. I should have checked with them first.
Re: How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657085 is a reply to message #657084] Thu, 27 October 2016 11:49 Go to previous messageGo to next message
Michel Cadot
Messages: 65255
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

I wrote a page in the wiki: Network Encryption, and among data encryption algorithms, 8i knows only DES or 3DES algorithm (and the old DES40 but the later is no more supported since 10g). But both knows RC4 network encryption with keys up to 256 bits.
As far as I know there is no default algorithm, at least one needs to be mentioned on both side and at least one must be common among them to be applied.

Re: How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657089 is a reply to message #657085] Thu, 27 October 2016 12:24 Go to previous messageGo to next message
Michel Cadot
Messages: 65255
Registered: March 2007
Location: Nanterre, France, http://...
Senior Member
Account Moderator

Quote:
As far as I know there is no default algorithm, at least one needs to be mentioned on both side
And I was wrong:
http://docs.oracle.com/cd/A87860_01/doc/network.817/a76933/params.htm#437509
http://docs.oracle.com/cd/E11882_01/network.112/e10835/sqlnet.htm#NETRF207

Quote:
Default: All [available] algorithms are used if none are specified.
[And DES40 is still supported.]

Maybe you could explicitly specify a common algorithm (for instance RC4_128) or maybe there is an error in protocol level during negotiation. You could then activate a trace at level SUPPORT to see where the error comes from.

Re: How to connect Oracle 8 client to 11gR2 when using network data encryption [message #657090 is a reply to message #657089] Thu, 27 October 2016 12:27 Go to previous message
joy_division
Messages: 4803
Registered: February 2005
Location: East Coast USA
Senior Member
Thanks Michel, this is great info. I'll check those 8.1.7 docs out.
Previous Topic: Configure Oracle database to display a warning banner
Next Topic: Prevent any query that makes simultaneous references to mutually exclusive columns.
Goto Forum:
  


Current Time: Fri Dec 15 18:10:09 CST 2017

Total time taken to generate the page: 0.01919 seconds