Re: Oracle SSL Authentication

On 14 Jun 2002 17:51:28 -0700, os.tony_at_bridgeagency.com (Tony) wrote:

>I have a webserver (Netscape Enterprise) with which I want to add a
>shopping cart using SSL. Can I authenticate users using an Oracle db
>securely? Does the db connection have to be SSL as well?
>
>Thanks,
>Tony

I'm not sure if I understand the problem. I see two possibilities: 1. Do you want to authenticate the user via SSL and then use that identity to connect to the database?
In that case, the answer is "no." An OCI interface exists for doing that, but Netscape doesn't use it (at least as far as I know).

2. Do you want to authenticate the user via SSL and connect to the database using a separate user ID and password? Yes. SSL is not required, although I would suggest using some sort of encryption.

                                                                Rick