Merge pull request #449 from ministryofjustice/DBA-590

Dba 590
ministryofjustice · Dec 18, 2023 · f8f897f · f8f897f
2 parents 3a14552 + 93ae91d
commit f8f897f
Show file tree

Hide file tree

Showing 2 changed files with 16 additions and 0 deletions.
diff --git a/ansible/group_vars/environment_name_delius_core_development_dev_all.yml b/ansible/group_vars/environment_name_delius_core_development_dev_all.yml
@@ -40,3 +40,11 @@ high_availability_count:
 # Establish the vars here as a temporary measure
 spg_document_rest_service_admin_url: "https://alfresco.mis-dev.delius.probation.hmpps.dsd.io/alfresco/service/admin-spg"
 spg_document_rest_service_public_url: "https://alfresco.mis-dev.delius.probation.hmpps.dsd.io/alfresco/service/noms-spg"
+# Enable Oracle Native Network Encryption (ignored for TCPS connections)
+# Note that these parameters must be set in the database sqlnet.ora file, not the grid one
+sqlnet_parameters:
+  database:
+    SQLNET.ENCRYPTION_SERVER: REQUIRED
+    SQLNET.ENCRYPTION_TYPES_SERVER: (AES256)
+    SQLNET.ALLOW_WEAK_CRYPTO: "FALSE"
+    IGNORE_ANO_ENCRYPTION_FOR_TCPS: "TRUE"
diff --git a/ansible/group_vars/environment_name_delius_core_development_test_all.yml b/ansible/group_vars/environment_name_delius_core_development_test_all.yml
@@ -42,3 +42,11 @@ high_availability_count:
 # Establish the vars here as a temporary measure
 spg_document_rest_service_admin_url: "https://alfresco.test.delius.probation.hmpps.dsd.io/alfresco/service/admin-spg"
 spg_document_rest_service_public_url: "https://alfresco.test.delius.probation.hmpps.dsd.io/alfresco/service/admin-spg"
+# Enable Oracle Native Network Encryption (ignored for TCPS connections)
+# Note that these parameters must be set in the database sqlnet.ora file, not the grid one
+sqlnet_parameters:
+  database:
+    SQLNET.ENCRYPTION_SERVER: REQUIRED
+    SQLNET.ENCRYPTION_TYPES_SERVER: (AES256)
+    SQLNET.ALLOW_WEAK_CRYPTO: "FALSE"
+    IGNORE_ANO_ENCRYPTION_FOR_TCPS: "TRUE"