May 3, 2012 at 12:11 pm
need to transfer over user credentials from an Oracle db to SQL Server 2008 R2 db. There are passwords here. They are encrypted in Oracle and will be encrypted on SQL Server, but have to be decyrpted and sent in plain text, since SQL and Oracle encryption don't talk to each other.
So I want to use something like SSL or some means of securing the data as it crosses the network. If intercepted, I don't want the passwords to be viewable as plain text.
How can this be accomplished?
May 3, 2012 at 12:56 pm
The usual way is have your network people set up an encrypted VPN tunnel between the two servers, and use that for the connection.
- Gus "GSquared", RSVP, OODA, MAP, NMVP, FAQ, SAT, SQL, DNA, RNA, UOI, IOU, AM, PM, AD, BC, BCE, USA, UN, CF, ROFL, LOL, ETC
Property of The Thread
"Nobody knows the age of the human race, but everyone agrees it's old enough to know better." - Anon
May 3, 2012 at 1:02 pm
Is this a one shot? Is it in house? If so I think you *might* be worried about a fairly marginal risk.
However, if this will happen regularly.. Thats very differnt.
The connection to SQL can be encrypted, there are a couple keywords in the string to use. The connection to Oracle though I don't know. Doe you know of any SSL options?
CEWII
May 3, 2012 at 2:38 pm
This would run business daily. Oracle can have network encryption turned on, and I'm checking to see if that's the case here. As far as SQL Server, installing a certificate and using SSL looks like an option for some client connections. Not entirely certain about SSIS jobs. Seems an internal encryption feature in SSIS would be just the thing ...
May 3, 2012 at 3:11 pm
Depending on where the package runs wold make a difference. If it is ON the same box as the receiving SQL Server it would almost certainly use the Shared Memory provider which wouldn't even cross the network boundary. If it is a remote server then the connection string, whether its SSIS or another source will determine encryption. SQL Certs aren't terribly hard to make. I used OPENSSL when I built mine.
CEWII
Viewing 5 posts - 1 through 4 (of 4 total)
You must be logged in to reply to this topic. Login to reply