Re: [Squirrel-sql-users] SSL With Oracle JDBC Thin Driver

[Dennis B. <Den...@gm...>]

Hello Stephen!

Am 23.07.2010 07:06, schrieb Stephen More:
> On Thu, Jul 22, 2010 at 11:20 AM, Dennis Benzinger
> <Den...@gm...>  wrote:
>>> I have been able to successfully connect to Oracle over SSL using
>>> squirrel.
>>>
>>> I did modify the start scrip to include:
>>> -Djavax.net.ssl.trustStore=/tmp/cwallet.sso
>>> -Djavax.net.ssl.trustStoreType=SSO
>>>
>>> The limitation is that I can only connect to 1 SSL Oracle at a time.
>>> This requires me to have multiple startup scripts.
>>> [...]
>>
>> <disclaimer>
>> I have no Oracle with SSL at hand and I didn't follow the whole thread!
>> </disclaimer>
>>
>> Wouldn't it work if you added the certificates for all SSL Oracles to
>> your cwallet.sso trust store?
>
> I am not very familiar with SSL Oracle....
> Would it be possible to combine all cwallet.sso after they have
> already been generated ?
>
> cat cwallet1.sso>>  cwalletAll.sso
> cat cwallet2.sso>>  cwalletAll.sso
> cat cwallet3.sso>>  cwalletAll.sso
> etc ?
>
> I guess I could try that and see what happens.

I don't know if simply concatenating the keystore files will work.
You can combine multiple keystores by using the -importkeystore command 
of the keytool program in the JDK or JRE. See:
http://download.oracle.com/docs/cd/E17409_01/javase/6/docs/technotes/tools/solaris/keytool.html


HTH,
Dennis Benzinger