Open topic with navigation

TIBCO BusinessEvents® Enterprise Edition 6.3.1

# Configuring SSL for JDBC Connection

Using the Secure Sockets Layer (SSL) protocol, you can establish a secure communication between the JDBC client and DBMS servers. You can use TIBCO BusinessEvents Studio to configure SSL for a JDBC connection.

Refer theTIBCO BusinessEvents Configuration Guide for more information on JDBC backing store and database connections.

Before you begin

- Configure a database server for SSL. Refer to the respective DBMS documentation for server-side configuration steps.
- Copy the appropriate JDBC driver file to BE_HOME/lib/ext/tpcl.

Procedure
1. In TIBCO BusinessEvents Studio, open the JDBC shared resource for editing.

   See JDBC Connection Wizard and Configuration Tab for more details about JDBC fields.

2. Select the Use SSL checkbox for activating the SSL protocol for the JDBC connection.
   The Configure SSL button is activated.
3. Click Configure SSL.
   The SSL Configuration for JDBC window is displayed.
4. Enter the values for the SSL parameters and click OK.
   See JDBC SSL Configuration Reference for more details about these parameters.
5. Save the JDBC shared resource.
   The JDBC connection is now configured to use the SSL protocol.

Oracle Database Configuration

6. (Oracle database only) When using the Oracle wallet or .p12 file as keystore or truststore type, copy the following JAR files from the jlib directory in the Oracle installation to BE_HOME/lib/ext/tpcl:
   oraclepki.jar
   osdt_cert.jar
   osdt_core.jar
   Note: If you get the following exceptions when using JKS as a keystore or truststore type:
   java.security.cert.CertPathValidatorException: Algorithm constraints check failed: MD5withRSA
   then perform the following steps:
   Oracle 11g
   - Remove `MD5` from the following property value in the java.security file:

          jdk.certpath.disabledAlgorithms=MD2,MD5,RSA
         keySize < 1024

   - Remove `MD5withRSA` from the following property value in the java.security file:

           jdk.tls.disabledAlgorithms=SSLv3, RC4,
         MD5withRSA, DH keySize < 768

   - Store the root certificate in the truststore folder.
   Oracle 12c

   Create wallets and certificates with SHA-256 or other than MD5withRSA as signing algorithm. Now create the JKS keystore and truststore using these wallets.

   See SSL Connection to Oracle DB for more information.

Did you find this helpful?

YesNo
Great!
Thanks for taking the time to give us some feedback.
Sorry about that

Why wasn't this helpful? (check all that apply)

Could not find what I was looking for
Instructions confusing or unclear
Instructions did not work

Want to tell us more?

Please select at least one option or provide details about the issue!!

Error occurred while submitting feedback.

Error2 occurred while submitting feedback.

TIBCO BusinessEvents® Enterprise Edition

Copyright © 2004-2024. Cloud Software Group, Inc. All Rights Reserved.