Oracle Database B10772-01 Manuale Utente Scaricare il pdf (Pagina 170)

100

101

SSL and TLS in an Oracle Environment

7-4 Oracle Database Advanced Security Administrator's Guide

How SSL Works in an Oracle Environment: The SSL Handshake

When a network connection over SSL is initiated, the client and server perform an

SSL handshake that includes the following steps:

■ The client and server establish which cipher suites to use. This includes which

encryption algorithms are used for data transfers.

■ The server sends its certiﬁcate to the client, and the client veriﬁes that the

server's certiﬁcate was signed by a trusted CA. This step veriﬁes the identity of

the server.

■ Similarly, if client authentication is required, the client sends its own certiﬁcate

to the server, and the server veriﬁes that the client's certiﬁcate was signed by a

trusted CA.

■ The client and server exchange key information using public key cryptography.

Based on this information, each generates a session key. All subsequent

communications between the client and the server is encrypted and decrypted

by using this set of session keys and the negotiated cipher suite.

The authentication process consists of the following steps:

1. On a client, the user initiates an Oracle Net connection to the server by using

SSL.

2. SSL performs the handshake between the client and the server.

3. If the handshake is successful, the server veriﬁes that the user has the

appropriate authorization to access the database.

1 2 ... 165 166 167 168 169 170 171 172 173 174 175 ... 517 518

Commenti su questo manuale

Nessun commento

Oracle Database B10772-01 Manuale Utente Pagina 170

Commenti su questo manuale

Prodotti e manuali riguardandi Software di database Oracle Database B10772-01