How Ssl Works In An Oracle Environment: The Ssl Handshake - Oracle Database B10772-01 Administrator's Manual

SSL and TLS in an Oracle Environment

How SSL Works in an Oracle Environment: The SSL Handshake

When a network connection over SSL is initiated, the client and server perform an
SSL handshake that includes the following steps:
The authentication process consists of the following steps:
1.
2.
3.
7-4 Oracle Database Advanced Security Administrator's Guide
The client and server establish which
encryption algorithms are used for data transfers.
The server sends its certificate to the client, and the client verifies that the
server's certificate was signed by a trusted CA. This step verifies the identity of
the server.
Similarly, if client authentication is required, the client sends its own certificate
to the server, and the server verifies that the client's certificate was signed by a
trusted CA.
The client and server exchange key information using public key cryptography.
Based on this information, each generates a
communications between the client and the server is encrypted and decrypted
by using this set of session keys and the negotiated cipher suite.
On a client, the user initiates an Oracle Net connection to the server by using
SSL.
SSL performs the handshake between the client and the server.
If the handshake is successful, the server verifies that the user has the
appropriate authorization
suites to use. This includes which
cipher
session
to access the database.
key. All subsequent