SSL connection to oracle using DBI?

[Joe User]

Has anyone done this before? If so, please let me know. Just
remove the "nospam" and put in oracle in my email. Or, just reply
to my post.

Thanks,
Bill

 

[Nicholas Erkert]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Joe User wrote:
| Has anyone done this before? If so, please let me know. Just
| remove the "nospam" and put in oracle in my email. Or, just reply
| to my post.
|
| Thanks,
| Bill
I'm not sure if DBI has native support for oracle over SSL but you can
use stunnel to provide a local port which makes it appear as if there's
an unencrypted connection to the database on the localhost.

Take a look at the following stunnel configuration file to get a head start.

client = yes
output = /dev/null
[snpp]
accept = localhost:lport
connect = SSLORACLE:rport

lport should be the local port you're binding to.
SSLORACLE is the hostname or IP of the Oracle server running SSL.
rport is the port the SSL Oracle server is running on.

Notes
- -----------------------------
This assumes that you only want plain text connections from localhost.
If this is not the case change the accept line to bind to whatever
IPort you like.

the service description "[snpp]", although not meaningful is necessary
to get stunnel to run correctly.

If you want any logging change the output line to a file, otherwise the
output just gets tossed into the bit-bucket.
- ------------------------------
Once you have stunnel running properly you should be able to build an
ordinary DBI connection to an oracle server on localhost:lport.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFAvO9dR6L8l18VQqsRAuqrAJ4wtI3tgSPnzpFhmSylohYosg0+1gCfS0Oq
X+zUgXL5ZWjQNTTdfBq0NhA=
=yL0F
-----END PGP SIGNATURE-----

 

[Juha Laiho]

Has anyone done this before? If so, please let me know. Just
remove the "nospam" and put in oracle in my email. Or, just reply
to my post.

Note that if you're using Oracle MTS (multithreaded server)
functionality, this'll become difficult (I'm not certain if
impossible, but difficult at least). Without MTS (so, with
traditional dedicated-server setup) this might be doable with
stunnel, as described in another response.