Package oracle.jdbc.spi

Interface TlsConfigurationProvider

All Superinterfaces:

OracleResourceProvider

public interface TlsConfigurationProvider
extends OracleResourceProvider

A provider of keys and/or certificates for TLS communication with Oracle Database.

The oracle.jdbc.provider.tlsConfiguration connection property identifies the name of a TlsConfigurationProvider implementation. Connection properties under the namespace of oracle.jdbc.provider.tlsConfiguration configure any parameters that an implementation defines. To illustrate, the connection properties below would identify a provider named "example-provider", and configure a parameter named "vaultId":

  oracle.jdbc.provider.tlsConfiguration=example-provider
  oracle.jdbc.provider.tlsConfiguration.vaultId=9999-8888-7777

ServiceLoader locates implementations of TlsConfigurationProvider declared by a META-INF/services/oracle.jdbc.spi.TlsConfigurationProvider file in the class path, or by a module-info.java file with a "provides oracle.jdbc.spi.TlsConfigurationProvider" directive in the module path. Typically, these files are distributed within a jar file that contains a TlsConfigurationProvider implementation.

Since:

23

Nested Class Summary

Nested classes/interfaces inherited from interface oracle.jdbc.spi.OracleResourceProvider

OracleResourceProvider.Parameter

Method Summary

Modifier and Type	Method	Description
SSLContext	getSSLContext(Map<OracleResourceProvider.Parameter,CharSequence> parameterValues)	Returns an SSLContext that has been initialized with keys and/or certificates for TLS communication with Oracle Database.

Methods inherited from interface oracle.jdbc.spi.OracleResourceProvider

getName, getParameters

Method Details

getSSLContext

SSLContext getSSLContext(Map<OracleResourceProvider.Parameter,CharSequence> parameterValues)

Returns an SSLContext that has been initialized with keys and/or certificates for TLS communication with Oracle Database. Oracle JDBC will invoke this method when Driver.connect(String, java.util.Properties) is called to open a new Connection, with TLS/SSL/TCPS enabled, and no keys and/or certificates for TLS have been configured.

The parameterValues passed to this method is a Map comprised as follows:

• The key set is the same as, or a subset of, the Parameter objects returned by an invocation of OracleResourceProvider.getParameters() on this provider.
• If no value is configured for a parameter, then the Map contains the default value of that Parameter, if any. If the parameter has no default value, then the map does not contain an entry for that Parameter.
• The Map does not contain entries having null values.

The parameterValues Map may contain a CharSequence having a security sensitive value. After this method returns, the caller may wipe the contents of these CharSequence values from memory. Implementations of this method should not retain a reference to these CharSequence objects.

Parameters:

parameterValues - Parameters configured by connection properties . Not null. May be empty.

Returns:

An initialized SSLContext. Not null.

Throws:

IllegalArgumentException - If the value of a parameter can not be parsed or interpreted.

IllegalStateException - If an implementation-specific failure prevents a resource from being provided.