ogg数据加密

男娘i 2022-09-23 08:08 352阅读 0赞

当ogg走公网的时候,为了保证数据安全,需要对ogg进行加密

-- 生成ENCRYPT KEY

[oracle@dg ogg]$ keygen 256 2

0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B

0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D

-- 编辑ENCKEYS文件

[oracle@dg ogg]$ vi ENCKEYS

## encryption file

## Key name Key value

scott 0x7612CE0771DAD633F407780225655F6B5D5E315CD0B5611AA21EA36DF052954B

ogg 0xF4E2F622755B8A135D311325D98056656A470E2419D8CC1F4B9C8975F6A64F1D

-- 设置ENCRYPT KEY

[oracle@dg ogg]$ ggsci

GGSCI (dg) 1> encrypt password tiger aes256 encryptkey scott

Encrypted password: AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE

Algorithm used: AES256

GGSCI (dg) 2> encrypt password oracle aes256 encryptkey ogg

Encrypted password: AADAAAAAAAAAAAGALDQGRIAEZHSFHIXEAIUJBHFHECKDPDWCCDGHNALFKGQBWCMIZHPJTJGCNEXEOCEHYDSABJNBKAODQHPILEXFEDUAWHGCQCWF

Algorithm used: AES256

-- 编辑参数文件,添加ENCRYPT KEY

GGSCI (dg) 3> edit param extdg

extract extdg

setenv(NLS_LANG=”AMERICAN_AMERICA.ZHS16GBK”)

setenv(ORACLE_SID=”wailon”)

userid scott,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &

AES256,ENCRYPTKEY scott

--tranlogoptions excludeuser scott

-- 提取文件加密

ENCRYPTTRAIL AES256 KEYNAME scott

exttrail /u01/app/ogg/dirdat/dg

dynamicresolution

gettruncates

getbeforecols

table scott.*;

GGSCI (dg) 4> edit param dgrac

extract dgrac

setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)

userid scott@wailon,password AADAAAAAAAAAAAFAGGEABJSJPGLFOHDGXAWBWHUGLEHJYFYCDCIFXCKBOAEBJJMASCWDMHDIYBWHACSFPIJFJJICSFUJPCDDVENHFJRDIJUCRCFE, &

AES256,ENCRYPTKEY scott

rmthost 192.168.56.131,mgrport 7801

-- 发送前解密,对应提取进程的加密KEY

DECRYPTTRAIL AES256 KEYNAME scott

-- 加密后发送

ENCRYPTTRAIL AES256 KEYNAME ogg

rmttrail /u01/app/ogg/dirdat/dg

--NOPASSTHRU

PASSTHRU

gettruncates

table scott.*;

GGSCI (dg) 5> start extdg

Sending START request to MANAGER …

EXTRACT EXTDG starting

GGSCI (dg) 6> start dgrac

Sending START request to MANAGER …

EXTRACT DGRAC starting

GGSCI (dg) 7> info

Program Status Group Lag at Chkpt Time Since Chkpt

MANAGER RUNNING

EXTRACT RUNNING DGRAC 00:00:00 00:32:09

EXTRACT RUNNING EXTDG 00:00:00 00:00:07

REPLICAT RUNNING REP1 00:00:00 00:00:01

-- 同时REPLICAT端需要解密

注意此时需要在

[ oracle@n2 OGG_MYSQL]$ vi ENCKEYS

ogg 0x7D790A460B9EA930E0E25860794DCC2713EEDE5BAA8E2B44209B2C13A2441124

然后才能启动备库解密进程

GGSCI (dgrac) 15> edit param dg

replicat dg

setenv(NLS_LANG=AMERICAN_AMERICA.ZHS16GBK)

userid scott@ogg, password tiger

assumetargetdefs

reperror default,discard

discardfile /u01/app/ogg/dirout/dg.dsc,append,megabytes 100

gettruncates

-- 应用前解密,对应发送的加密KEY

DECRYPTTRAIL AES256 KEYNAME ogg

--batchsql

map scott.b, target scott.b,&

colmap(usedefaults, “USERNAME”=”OWNER”),&

--resolve conflict insert into when update not found

RESOLVECONFLICT (UPDATEROWMISSING, (DEFAULT, OVERWRITE));

map scott.*,target scott.*;

发表评论

表情:
评论列表 (有 0 条评论,352人围观)

还没有评论,来说两句吧...

相关阅读

    相关 OGG

    1、Manager进程 Manager进程是GoldenGate的控制进程,运行在源端和目标端上。它主要作用有以下几个方面:启动、监控、重启Goldengate的其他进程,

    相关 OGG

    Oracle Golden Gate软件是一种基于日志的结构化数据复制备份软件,它通过解析源数据库在线日志或归档日志获得数据的增量变化,再将这些变化应用到目标数据库,从而实现源

    相关 ogg数据加密

    当ogg走公网的时候,为了保证数据安全,需要对ogg进行加密 \-- 生成ENCRYPT KEY \[oracle@dg ogg\]$ keygen 256 2 0x76