Skip to content

KNOX-3326: Add TCPS support for Oracle DB#1237

Merged
hanicz merged 1 commit into
apache:masterfrom
hanicz:KNOX-3326
May 20, 2026
Merged

KNOX-3326: Add TCPS support for Oracle DB#1237
hanicz merged 1 commit into
apache:masterfrom
hanicz:KNOX-3326

Conversation

@hanicz
Copy link
Copy Markdown
Contributor

@hanicz hanicz commented May 20, 2026

KNOX-3326 - Add SSL configuration for Oracle DB support

What changes were proposed in this pull request?

Adds SSL configuration support to Oracle DB

How was this patch tested?

Tested with an actual Oracle DB that had TCPS setup

    <property>
        <name>gateway.service.tokenstate.impl</name>
        <value>org.apache.knox.gateway.services.token.impl.JDBCTokenStateService</value>
    </property>
    <property>
        <name>gateway.database.connection.url</name>
        <value>jdbc:oracle:thin:@tcps://host:2484/FREEPDB1?oracle.net.ssl_server_dn_match=false</value>
    </property>
    <property>
        <name>gateway.database.type</name>
        <value>oracle</value>
    </property>
    <property>
        <name>gateway.database.ssl.enabled</name>
        <value>true</value>
    </property>
    <property>
        <name>gateway.database.ssl.verify.server.cert</name>
        <value>true</value>
    </property>
    <property>
        <name>gateway.database.ssl.truststore.file</name>
        <value>/tmp/oracle_truststore.jks</value>
    </property>

install/knox-3.0.0-SNAPSHOT/bin/knoxcli.sh generate-jwk --saveAlias knox.token.hash.key

install/knox-3.0.0-SNAPSHOT/bin/knoxcli.sh create-aliases --alias gateway_database_user --value knox_user --alias gateway_database_password --value mypw23 --alias gateway_database_ssl_truststore_password --value mypw22

SQL> select * from KNOX_TOKENS;

TOKEN_ID
--------------------------------------------------------------------------------
ISSUE_TIME EXPIRATION MAX_LIFETIME
---------- ---------- ------------
6263c147-27cb-4ebd-970a-6c043a56e0e6
1.7793E+12 1.7793E+12	1.7799E+12

6fd0abee-5929-4c8e-946b-837651676a6f
1.7793E+12 1.7793E+12	1.7799E+12
image image

Integration Tests

N/A

UI changes

N/A

@github-actions
Copy link
Copy Markdown

Test Results

21 tests   21 ✅  1s ⏱️
 1 suites   0 💤
 1 files     0 ❌

Results for commit 7da2f13.

@hanicz hanicz merged commit 488e94a into apache:master May 20, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants