Encrypt listener connection to DB?

Question

I have an installation that works fine. However, I need to encrypt traffic from the ORDS/TOMCAT server to the Oracle DB on the back-end (the traffic that is normally over port 1521).. passwords etc from apex applications are sent over the wire in clear-text on the LAN (I have SSL on the browser->tomcat configured okay).. Does anyone have any experience with how to configure SSL like this? I've found docs on configuring a wallet on the DB server, as well as how to configure the tnsnames etc with TCPS (all DB configs) -- but I cannot find anything at all about configuring the Apex Listener (ORDS) to complement it (except changing to the new TCPS port).
Thoughts? Thank you for anything you can share on this subject.

Answer 1

I haven't gotten that far yet.  (I just have my app servers <-> DB servers communication on a separate vLAN)
A quick google search, it looks like you just need to use the "Adv. Settings" with a "Custom JDBC URL"
source:   http://www.oracle.com/technetwork/database/enterprise-edition/wp-oracle-jdbc-thin-ssl-130128.pdf
jdbc:oracle:thin:@(DESCRIPTION=(ADDRESS=(PROTOCOL=tcps)(HOST=servername)(PORT=2484))(CONNECT_DATA=(SERVICE_NAME=servicename)))
In SQL*Developer, connect to the ORDS/APEX Listener server.
Listener -> Administration -> Database Settings -> {database service} -> Connections:
set the Connection Type to "Advanced"
and fill out the appropriate jdbc setting as above.
let us know if this worked.
MK