Release Automation

 View Only

 Enhancement Request - Oracle Automation Integrations - SHA256 support

Patrik Wittstrom's profile image
Patrik Wittstrom posted Nov 17, 2022 06:08 AM
Hi.
Seems the Oracle Automation Integration is using an old implementation of jdbc (ojdbc6.jar).
This jdbc client cannot handle higher encryption levels than SHA1.
So if we enable higher encryption on our database server (19c), the Nolio Agent throws a ORA-12650 error at us.

ORA-12650: No Common Encryption Or Data Integrity Algorithm When Using SQLNET.CRYPTO_CHECKSUM_TYPES_SERVER=sha256

This can be worked around by adding sha1 to the list of allowed checksum types, but this does not fulfill our security requirements on the DB Server.

According to your support ojdbc8.jar (which has support for sha256) is not yet tested and ca approved, instead we would need an enhancement request.
Assaf Shlomi's profile image
Broadcom Employee Assaf Shlomi
Hi Patrik,

Are you referring to an Oracle action pack or Nolio servers?
If this is for an action pack, can you please specify which action pack? 

You can also send me the information via email to assaf.shlomi@broadcom.com

Thanks,
Assaf Shlomi
Principal Product Manager | Continuous Delivery Director / Nolio Release Automation
Assaf Shlomi's profile image
Broadcom Employee Assaf Shlomi
Hi Patrik,

The Action Packs for Oracle is relying on the driver binary provided by the Nolio Core. in version 6.8 the driver was updated to ojdbc8. Nolio 6.8 will be available in a few weeks.

Thanks,
Assaf