salesforce Dreamforce On-Demand
Contact Us 1-800-596-4880
  1. Homepage
  2. Database Connector (1.11)
  3. Database Connector Examples

  4. Configure an Oracle TLS Database Connection

All Connectors

Configure an Oracle TLS Database Connection

Anypoint Connector for Database (Database Connector) enables you to connect to an Oracle database in a secure way through its dedicated Oracle connection.

You can configure the following levels of security for an Oracle connection:

  • TCPS - connection through secure TCP tunnel (not recommended)

  • TLS - with Truststore validation only

  • mTLS - with Truststore and Keystore validations

  • mTLS - without user and password (role is given by certificates)

Configure a Secure Oracle Connection

The following example shows how to configure a secure Oracle connection in Anypoint Studio:

  1. In Studio, navigate to the Global Elements view.

  2. Click Create to open the Choose Global Type view.

  3. In the Filter field, type database, select Database Config and click OK.

  4. In the Database Config window, for the Connection field, select Oracle Connection.

  5. Click Configure to add the required Oracle JDBC driver and select either:

    • Use local file
      Install the library using a local file.

    • Add Maven dependency
      Install a Maven dependency to add to the project.

  6. Set Host to localhost, Port to 1522, User to system, Password to oracle, and Instance/Service Name to xe.

  7. Click TLS.

  8. In the Trust Store Configuration section, set the following fields:

    • Path: <somePath>/client-truststore.jks

    • Password: somepassword

    • Type: JKS

  1. In the Key Store Configuration section, set the following fields:

    • Path: <somePath>/client-keystore.jks

    • Password: somepassword

    • Key Password: somepassword

    • Type: JKS

  2. Click Test Connection to confirm that Mule can connect to the database.

  3. Click OK.

The following screenshots show the secure Oracle connection General and TLS configuration windows in Studio:

Secure Oracle Connection General configuration window
Secure Oracle Connection TLS configuration window

In the Configuration XML editor, the tls:context configuration looks like this:

	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>

Secure Oracle Connection Levels Examples

The following examples show the XML configuration for each secure Oracle connection level:

TCPS Connection Through Secure TCP Tunnel

In the Configuration XML editor, the configuration looks like this:

	<db:config name="oracle-tcps">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE" >
			<tls:context>
				<tls:trust-store insecure="true"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>

TLS with Truststore Validation Only

In the Configuration XML editor, the configuration looks like this:

	<db:config name="oracle-tls-with-truststore-only">
		<db:oracle-connection host="localhost" port="1522" user="system" password="oracle" serviceName="XE" >
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>

mTLS with Truststore and Keystore Validations

In the Configuration XML editor, the configuration looks like this:

	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" user="system" password="oracle" port="1522" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>

mTLS without User and Password

Note that for this configuration the role is given by certificates. In the Configuration XML editor, the configuration looks like this:

	<db:config name="oracle-mtls-with-user-pass">
		<db:oracle-connection host="localhost" port="1522" serviceName="XE">
			<tls:context>
				<tls:trust-store path="<somePath>/client-truststore.jks" password="<somePassword>" type="jks"/>
				<tls:key-store path="<somePath>/client-keystore.jks" password="<somePassword>" keyPassword="<somePassword>" type="jks"/>
			</tls:context>
		</db:oracle-connection>
	</db:config>

See Also

Back to top
View on GitHub