oracle - 如何在 Apache Tomcat 8 中为 Oracle 数据库连接池配置加密

Question

我有一个配置了 Oracle 数据库连接池(使用 context.xml 文件)的 Apache Tomcat 8。我还有一个在此服务器上运行的网络应用程序。现在我需要为从 Oracle 数据库连接池获取的连接添加加密。

如何在 Tomcat 中为 Oracle 数据库连接池配置添加属性？

我的 context.xml 文件:

<Context>
  <Resource maxWait="-1" 
            maxIdle="10" 
            maxActive="20" 
            password="password " 
            username="username" 
            url="jdbc:oracle:thin:@(DESCRIPTION =
                 (ADDRESS_LIST =
                 (ADDRESS = 
                 (PROTOCOL = TCP)
                 (HOST = host.ttt.intranet)
                 (PORT = 2000))
                 )
                 (CONNECT_DATA =
                 (SERVICE_NAME = TEST)
                 )
                 )" 
            driverClassName="oracle.jdbc.OracleDriver"         
            type="javax.sql.DataSource" 
            auth="Container" 
            name="jdbc/Ora"/>
</Context>

对于独立应用程序，我只是将属性添加为方法的参数java.sql.DriverManager.getConnection(String url, Properties info)

Properties info= new Properties();
info.setProperty(oracle.jdbc.OracleConnection.CONNECTION_PROPERTY_THIN_NET_ENCRYPTION_LEVEL, oracle.net.ano.AnoServices.ANO_REQUIRED);
info.setProperty(oracle.jdbc.OracleConnection.CONNECTION_PROPERTY_THIN_NET_ENCRYPTION_TYPES, "( "+ oracle.net.ano.AnoServices.ENCRYPTION_AES256 + ","+ oracle.net.ano.AnoServices.ENCRYPTION_AES192 + ","+  oracle.net.ano.AnoServices.ENCRYPTION_AES128 + ")");

Answer 1

我认为您只需添加 connectionProperties 属性即可。例如:

<Context>
  <Resource maxWait="-1" 
            maxIdle="10" 
            maxActive="20" 
            password="password " 
            username="username" 
            url="jdbc:oracle:thin:@(DESCRIPTION =
                 (ADDRESS_LIST =
                 (ADDRESS = 
                 (PROTOCOL = TCP)
                 (HOST = host.ttt.intranet)
                 (PORT = 2000))
                 )
                 (CONNECT_DATA =
                 (SERVICE_NAME = TEST)
                 )
                 )" 
            driverClassName="oracle.jdbc.OracleDriver"         
            type="javax.sql.DataSource" 
            auth="Container" 
            name="jdbc/Ora"
            connectionProperties="oracle.net.encryption_client=REQUESTED"/>
</Context>

See https://tomcat.apache.org/tomcat-8.5-doc/api/org/apache/tomcat/dbcp/dbcp2/BasicDataSource.html#setConnectionProperties-java.lang.String-

有关如何设置connectionProperties的详细信息