ogg数据加密
当ogg走公网的时候,为了保证数据安全,需要对ogg进行加密
-- 生成ENCRYPT KEY
[oracle@dg ogg]$ keygen 256 2
0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B
0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D
-- 编辑ENCKEYS文件
[oracle@dg ogg]$ vi ENCKEYS
## encryption file
## Key name Key value
scott 0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B
ogg 0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D
-- 设置ENCRYPT KEY
[oracle@dg ogg]$ ggsci
GGSCI (dg) 1> encrypt password tiger aes256 encryptkey scott
Encrypted password: AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE
Algorithm used: AES256
GGSCI (dg) 2> encrypt password oracle aes256 encryptkey ogg
Encrypted password: AADAAAAAAAAAAAGALDQGRIAEZHSFHIXEAIUJBHFHECKDPDWCCDGHNALFKGQBWCMIZHPJTJGCNEXEOCEHYDSABJNBKAODQHPILEXFEDUAWHGCQCWF
Algorithm used: AES256
-- 编辑参数文件,添加ENCRYPT KEY
GGSCI (dg) 3> edit param extdg
extract extdg
setenv(NLS_LANG=”AMERICAN_AMERICA.ZHS16GBK”)
setenv(ORACLE_SID=”wailon”)
userid scott,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &
AES256,ENCRYPTKEY scott
--tranlogoptions excludeuser scott
-- 提取文件加密
ENCRYPTTRAIL AES256 KEYNAME scott
exttrail /u01/app/ogg/dirdat/dg
dynamicresolution
gettruncates
getbeforecols
table scott.*;
GGSCI (dg) 4> edit param dgrac
extract dgrac
setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)
userid scott@wailon,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &
AES256,ENCRYPTKEY scott
rmthost 192.168.56.131,mgrport 7801
-- 发送前解密,对应提取进程的加密KEY
DECRYPTTRAIL AES256 KEYNAME scott
-- 加密后发送
ENCRYPTTRAIL AES256 KEYNAME ogg
rmttrail /u01/app/ogg/dirdat/dg
--NOPASSTHRU
PASSTHRU
gettruncates
table scott.*;
GGSCI (dg) 5> start extdg
Sending START request to MANAGER …
EXTRACT EXTDG starting
GGSCI (dg) 6> start dgrac
Sending START request to MANAGER …
EXTRACT DGRAC starting
GGSCI (dg) 7> info
Program Status Group Lag at Chkpt Time Since Chkpt
MANAGER RUNNING
EXTRACT RUNNING DGRAC 00:00:00 00:32:09
EXTRACT RUNNING EXTDG 00:00:00 00:00:07
REPLICAT RUNNING REP1 00:00:00 00:00:01
-- 同时REPLICAT端需要解密
注意此时需要在
[ oracle@n2 OGG_MYSQL]$ vi ENCKEYS
ogg 0x7D790A460B9EA930E0E25860794DCC2713EEDE5BAA8E2B44209B2C13A2441124
然后才能启动备库解密进程
GGSCI (dgrac) 15> edit param dg
replicat dg
setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)
userid scott@ogg, password tiger
assumetargetdefs
reperror default,discard
discardfile /u01/app/ogg/dirout/dg.dsc,append,megabytes 100
gettruncates
-- 应用前解密,对应发送的加密KEY
DECRYPTTRAIL AES256 KEYNAME ogg
--batchsql
map scott.b, target scott.b,&
colmap(usedefaults, “USERNAME”=”OWNER”),&
--resolve conflict insert into when update not found
RESOLVECONFLICT (UPDATEROWMISSING, (DEFAULT, OVERWRITE));
map scott.*,target scott.*;
还没有评论,来说两句吧...