It's all about the answers!

Ask a question
QuestionsTagsUsersBadges
Guidelines | FAQ
Follow this question
Question details

×7,480
×2,352

question asked: Mar 08 '18, 6:46 a.m.
question was seen: 3,101 times
last updated: Mar 21 '23, 5:07 a.m.

Related questions

How to enable WLP SSL connection with Oracle database

0
Tojan John (117●28●82) | asked Mar 08 '18, 6:46 a.m.

 We have CLM 6.0.3 environment with bundled Liberty profile. Our requirement is to have SSL connection between the application and Oracle database.


In this case, what shall be the database connection string format? 
What all settings to be done in Websphere Liberty profile?

Any help to achieve SSL Connection between CLM application and Oracle database is appreciated.

Accepted answer

0
permanent link
Susan Wu (471●21●16) | answered Jun 25 '21, 6:03 p.m.

There is way to establish secure db connection with Oracle.  The detailed steps can found in Missing documentation on how to establish secure Oracle DB connection with ELM (537626)

Ralph Schoon selected this answer as the correct answer
Comments
Ian Barnard commented Mar 21 '23, 4:51 a.m. | edited Mar 21 '23, 5:07 a.m.
FORUM ADMINISTRATOR / FORUM MODERATOR / JAZZ DEVELOPER

This is now documented https://www.ibm.com/docs/en/elm/7.0.2?topic=server-establishing-secure-oracle-database-connection-liberty 

One other answer

Most liked answers ↑|Newest answers|Oldest answers

1
permanent link
Donald Nong (14.5k●6●14) | answered Mar 08 '18, 10:00 p.m.

This old post gives a pretty good example, for WebSphere Application Server that is.
https://jazz.net/forum/questions/214634/how-can-i-use-a-secure-oracle-port-for-my-clm-repositories

For the equivalent in WLP, notice the first sentence in the answer - you can pass the necessary configuration parameters through the JVM using Java parameters. If you open the server.startup script, you will see many lines containing "JAVA_OPTS", and that's where you add the Java parameters.

Note that with the "javax.net.ssl.trustStore" parameter, the JVM uses a non-default truststore, and you may need to re-import certificates from other servers if you did cross-server SSL certificate import before.

Comments
Tojan John commented Mar 09 '18, 5:33 a.m.

 Hi Donald,

Even after following the steps in the link, getting err msg. Connection fails with tcps and with port 2482. Connection works with tcp and port 1521

Below properties are added in JTS server.startup file

JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStore=/opt/truststore/clienttrststre.jks"
JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStoreType=JKS"
JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.trustStorePassword=xx"
JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.keyStore=/opt/keystre/clit.jks"
JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.keyStoreType=JKS"

JAVA_OPTS="$JAVA_OPTS -Djavax.net.ssl.keyStorePassword=xx"

Error on database test connection while running JTS setup 
Caused by: oracle.net.ns.NetException: The Network Adapter could not establish the connection
Caused by: oracle.net.ns.NetException: The ssl protocol specified is not supported
Caused by: java.lang.IllegalArgumentException: SSLv2Hello is not a recognized protocol

Donald Nong commented Mar 12 '18, 1:56 a.m.

It appears that you have the exact same error as the other user did.
https://jazz.net/forum/questions/250527/sslv2hello-is-not-a-recognized-protocol

Check my answer there, and you may have to take it up to Oracle Support if the Tech Doc cannot resolve your issue.

Your answer

Register or to post your answer.


Dashboards and work items are no longer publicly available, so some links may be invalid. We now provide similar information through other means. Learn more here.