Monday, April 13, 2015

How to encrypt the SQL connection string passwords in WebCenter Forms Recognition

This walkthrough will show an example of using WFR's INI File Encryption features as described in section 5.14 of the 11.1.1.8 installation guide.

The Install guide has a good walkthrough of the steps, but it's not 100% specific to the AP Solution. It does require a few decisions not included in the document.

1. You should have your own XML-formate RSA key pair. Brainware states to receive this keypair directly from Brainware support, but Oracle's doc does not include that statement. I've found that the easiest way to generate the key is to use a simple java app to format it as needed. I'll attach a link to the java app at the bottom. Note that this is using java.security, but BouncyCastle should be usable as well, if desired. You can also use the sample keypair provided in the doc, but this should not be used for production as it it not secure (the private key is published in the doc!)

2. Take your ini file and remove the password from the SQL_VL_##_ConnectionString   . The way the encryption works is to decrypt the password, then it will append it back to the ConnectionString before the script actually attempts to create a db connection with it

3. Create a matching SQL_VL_##_ConnectionPassword=<my encrypted password> entry in the ini file. we'll cover how to create the encrypted password a few steps down

4. Open your sdp in Designer. Show Scripts. Go to Sheet #2.

5. Enable the CdrCrypt Reference (figure 5-3 in the install doc)

6. Take the supplied sample script and update to your Private key (be sure to remove any line feeds!), or use the supplied if POC/DEV

7. Paste the script into the fnSetDBConnection (or create your own function and call the function from this location); place it as follows:

On Error GoTo lbl_error

<ADD SCRIPT HERE>

fnSetDBConnection =1
blFoundEmptyConnection = False

8. In a command prompt, cd to <wfr_home>/bin/bin

9. Run the following command to get the encrypted string used in step #3:

DstCrypt.exe /text "MyClearTextPassword" /key "<myPUBLICkey>" >> my_enc_password.txt

10. find your encrypted string at the end of the output:

Text <cleartextpassword> encoded to XBj9I3tuiu+f/XZBH1qIENWGFdoNkmFdtvc3L8LMdBH[...]

11. Paste your enc password into the ini file as stated in #3

12. Save and verify your sdp changes

13. Test!

Troubleshooting tips:
** You can use the script to place file outputs to verify each step of the way.
** If you notice nothing is happening, comment out the "On Error GoTo lbl_error" line; this will allow the errors to output to the RTS console
** If you're getting object errors on the .decrypt function call; make sure you have patched your WFR 11g instance with the two Web Verifier patches; the name of the patch states "Web Verifier", but Patch #2 contains patches for the core products. Also, be sure to deploy both patches since they are not cumulative. Even if you're not using Web Verifier, go ahead and apply these patches.


Oracle may be providing a script sample for this in the future. I'll be sure to update to reflect the supported method. But, as of 2015/04/12, nothing has been published.


Hope that helps!
-ryan

71 comments:

  1. This comment has been removed by a blog administrator.

    ReplyDelete
  2. This comment has been removed by a blog administrator.

    ReplyDelete
  3. Thank you for the tutorial! It's very useful!
    json formatter

    ReplyDelete
  4. Nerds support provides high quality IT Services and cloud computing services in Miami and South Florida. Find award-winning VoIP service and its experts in Miami today!

    ReplyDelete
  5. If you are in Jaipur and need beautiful Jaipur Call Girl or white skin Jaipur Call Girls then you can simply book call girls in Jaipur from one of the best escort agency named Jaipur Call Girls. It is No.1 premier escort agency and provide both incall or outcall facility to clients.Please click on the following link to check the official websites Jaipur Call Girl

    ReplyDelete
  6. insect control company door.
    Insects, which are a major source of inconvenience to individuals and they also pose a great danger to them where they are found and spread in various places and institutions and often difficult to control and it becomes Egypt anxiety and large pollution شركة مكافحة حشرات
    شركة مكافحه النمل الابيض بالمجمعة
    شركة مكافحه حشرات بالمجمعة

    ReplyDelete
  7. thanks for sharing such a wonderful information from this post
    digital marketing

    ReplyDelete
  8. I love programming, but sometimes it is very tiring. After work, I relax playing online games. I can always choose an interesting game on Nightrush and enjoy.

    ReplyDelete
  9. I admire this article for the well-researched content and excellent wording. I got so involved in this material that I couldn’t stop reading. I am impressed with your work and skill. Thank you so much.


    mobile phone repair in Louisville
    mobile phone repair in Beachwood
    mobile phone repair in Bensalem
    mobile phone repair in Dubuque
    mobile phone repair in Winston-Salem

    ReplyDelete
  10. Thank you very much for publishing this kind of article. I like your article very much.
    I want to share my website details with you please give me some information to increase
    performance like as your website.

    ReplyDelete
  11. Why is it so important to buy instagram followers cheap? Well, it's because Instagram doesn't really care about the law. The rules on selling products on the internet don't apply, because no one is actually breaking them. Therefore, you should do everything you can to avoid getting arrested.

    ReplyDelete
  12. Choose One of the best viral buy tiktok followers uk programs. Whether you are someone who wants to get their name out there, your talent to be admired, and your social profile to be viewed, you've come to the right place!

    ReplyDelete
  13. The last thing you should remember is to take time to network, practice online marketing and try different strategies. This will make sure that you always have something that will work for your business. and keep on buy instagram followers australia

    ReplyDelete
  14. Encrypting the SQL connection string passwords in WebCenter Forms Recognition is not an easy job for novice man, thanks for creating such nice tutorial. Students may need programming help to solve this without this tutorial.

    ReplyDelete
  15. Thanks for sharing such a nice piece of information to us. This is very knowledgeable for me. I am an assignment expert and I am offering Assignment Help to students of Australia and all over the world. Edit my paper

    ReplyDelete
  16. I would like to be your pen friend...You can write me email on guwahaticallgirl@gmail.com for
    Guwahati Escort
    Guwahati Escort
    Guwahati Escort
    Guwahati Escort

    ReplyDelete
  17. I was very happy to find this site. I really enjoyed reading this article today and think it might be one of the best articles I have read so far. I wanted to thank you for this excellent reading !! I really enjoy every part and have bookmarked you to see the new things you post. Well done for this excellent article. Please keep this work of the same quality.
    Data Science Course in Bangalore

    ReplyDelete
  18. Very informative blog, and beautifully elaborating the complete information about the topic. We are from the same domain emerging as the top mobile app development company for versatile app creation services. You can email us at sales@appsquadz.com or Phone Number: +91-9717270746

    ReplyDelete
  19. Truly mind blowing blog went amazed with the subject they have developed the content. These kind of posts really helpful to gain the knowledge of unknown things which surely triggers to motivate and learn the new innovative contents. Hope you deliver the similar successive contents forthcoming as well.

    data science in bangalore

    ReplyDelete
  20. Thanks for taking the time to discuss and share it with us. If you want to hire android app developer, then you are at right place, we have a goal-oriented developers team that has managed carefully and punctual to deliver the project on time. hire android app developer

    ReplyDelete
  21. Most men are lonely, certainly men, but also need women's support because I know this personally. But as long as there is a lovely location, not all people are lost yet! Even I could find a good russian brides in my 30's, we met her, had coffee, and it's all very good! Many thanks for the service and the staff. They respond very rapidly and always support the latter.

    ReplyDelete
  22. Thanks for posting the best information and the blog is very helpful.data science institutes in hyderabad

    ReplyDelete

  23. MyAssignmenthelp.com is the best place where you can find exceptionally talented and qualified experts who are committed to provide high quality contract law assignment help to students in the U.S.,We provide all the solutions fors students If you need last minute assignment help, or Philosophy assignment help, We are here to help you, Just say to Our PhD-Qualified Writers Are Here To Help You With The Task book review writing. Our writers will cover all the elements for you

    ReplyDelete
  24. Very Nice Blog Thanks for sharing This Useful information write my essay

    ReplyDelete
  25. We provide academic services such as assignment help. Our online
    essay typer tool is more advanced and smarter than other web-based writing techniques. This will improve the accuracy of our free new essay to a great extent and the best essay will be ready in the fastest possible time when you use the instant essay rewriter. Our The best case-time complexity advanced algorithms run behind the scenes of Essay Typer, From processing input to accessing the database to displaying the results, everything happens at blurred speeds. Essay rewriter are primarily concerned to show a proper guidance to those students on how to make an assignment informative and attractive.

    ReplyDelete
  26. Thanks for posting the best information and the blog is very helpful.artificial intelligence course in hyderabad

    ReplyDelete
  27. I see some amazingly important and kept up to a length of your strength searching for in your on the site

    digital marketing courses in hyderabad with placement

    ReplyDelete
  28. Great post i must say and thanks for the information. Education is definitely a sticky subject. However, is still among the leading topics of our time. I appreciate your post and look forward to more.
    Data Science Course in Bangalore

    ReplyDelete
  29. I just got to this amazing site not long ago. I was actually captured with the piece of resources you have got here. Big thumbs up for making such wonderful blog page!
    data analytics course in bangalore

    ReplyDelete
  30. Thanks for posting the best information and the blog is very helpful.digital marketing institute in hyderabad

    ReplyDelete
  31. I am a new user of this site, so here I saw several articles and posts published on this site, I am more interested in some of them, hope you will provide more information on these topics in your next articles.
    data analytics training in bangalore

    ReplyDelete
  32. thanx for sharing this guides this is very helpful for us
    hire me as a expert and get the best result in your academic exam
    my assignment help
    custom writing
    assignment help

    essay writing
    essay writer

    ReplyDelete
  33. MyPerdiscohelp.com is the best provider of Myob assignment help For years, we have been delivering quality MYOB assignment help to students across the globe. Not just MYOB services, you can come to us if you have
    problems related to Perdisco too. Our writers are immensely talented and always to serve you with their knowledge and dedication.

    ReplyDelete

  34. Cheap Essay Writer

    Need cheap essay writers because you are unable to afford the expensive assignment services of the other sites? Come to best assignment experts for Cheap Essay Writer. We are a site well known among students because of our affordable range of services.

    ReplyDelete
  35. Our Call Girls in Goa service will provide oral and anal sex facilities also by trained and experienced girls.Call Girls in Goa We have also most of the clients who wish to take these girls for business purposes such that Call Girls in Goa business tour client meetings and presentations also where Call Girls in Goa they can enjoy each and every moment with confidence and they will make his dignity Call Girls in Goa against their business partner.

    ReplyDelete
  36. Really it was an amazing post and engaged the audience with your blog. keep writing more Blog. I also recommend visiting Driven Performance Chiropractic

    ReplyDelete
  37. Udaipur Escorts Model are highlighted with an exquisite look
    Looking to enjoy a romantic time at any fabulous place for the weekend with Udaipur Escorts. So many dashing females from other industries are also working in this field with whom you can get in touch if you avail Escort service in Udaipur.
    Udaipur Escorts
    Udaipur Escort Services

    ReplyDelete
  38. The premium categories of Delhi Escorts are very much popular with the clients because they can explore the top-notch services for sex purposes.

    ReplyDelete
  39. Thanks for posting the best information and the blog is very important.data science course in Lucknow

    ReplyDelete
  40. Thanks for providing a useful article containing valuable information.
    DevOps Training in Hyderabad
    DevOps Course in Hyderabad

    ReplyDelete

  41. howdy! This article couldn't be written lots better! Searching through this article rings a bell in my memory of
    my previous roommate! He usually kept preaching approximately this. I'm going to deliver this article to him.
    Fairly sure he could have a extraordinary observe. Thanks for sharing! Excellent day, i think your weblog may be having
    browser compatibility issues. As soon as i test your blog in safari, it looks wonderful but at the same time as starting in i. E., it has some
    overlapping issues. I just favored to present you a short heads up! Except that, high-quality web page! Spot on with this
    write-up, i definitely feel this top notch website desires a high-quality deal extra interest. I’ll probably be returning to look
    at via more, thank you for the statistics! Aw, this became a really proper publish. Taking the time and real try to create a
    very good article… however what am i able to say… i positioned topics off a whole lot and do now not manage to get nearly something performed.

    Click here to chceck my blog :: 대구오피
    (jk)

    ReplyDelete
  42. Thanks for your sharing great article, I am very happy to read this article and I like it very much!I would also recommend it to my friends.
    sun news live
    sun news
    sun tv live
    news 7 live
    sun news live today
    sun tv news
    sun tv news live
    sun tv live news
    சன் நியூஸ்
    thanthinews

    ReplyDelete
  43. Do you need for professional economics homework help service with affordable prices? Then contact world’s best assignment provider’s GoAssignmentHelp.com. We аrе thе bеѕt ѕеrvісе provider for paper аѕѕіgnmеnt hеlр іn the market fоr dіffеrеnt rеаѕоnѕ and you have checked reviews after visit our website. Many ѕtudеntѕ сhооѕе up bесаuѕе we have ѕо much to оffеr thеm. Our experts have been working from very long in this field and can create customized assignments and geometry homework answers for you. The main motive of this service is to provide 100%satisfaction to our customers. GoAssignmentHelp.com makes sure at any cost the students’ scores well and will always make sure the work is free from plagiarism and is well structured and referenced. We also offer a heavy discount to our first-time users as well as regular customers. So don’t waste your time and contact us for information about sas homework help and collect heavy discount each topic.

    ReplyDelete


  44. I've been looking for photos and articles on this topic over the past few days due to a school assignment,
    and I'm really happy to find a post with the material I was looking for! I bookmark and will come often! Thanks :D


    Check my page: 오피사이트
    (jk)

    ReplyDelete
  45. Welcome Jaipur Escorts Service. We offer Escort Service in All Locations of Jaipur Like, Bani Park, Bais Godam, Bhankrota, Sanganer, Vaishali Nagar, Near Airport, Malviya Nagar, Kukas, Raja Park and More. So Your Can Book Call Girls in Jaipur at Your Local Place.

    Durgapura Escorts Service
    Jagatpura Escorts Service
    Jhotwara Escorts Service
    Shastri Nagar Escorts Service
    Khatipura Escorts Service

    ReplyDelete
  46. The sales team had to be consistent with the bank's professional corporate image and philosophy. The outsourced sales professionals had to identify the prospects, introduce them to the products, and then turn them over to internal bank personnel to complete the deals, deploy, administer and manage onwards. learn salesforce

    ReplyDelete
  47. If You are Looking For Escorts Service in Your City? Ascorts Club Escorts Agency - Who Provide Independent Call Girls, Model Escort, Celebrity Escort and More Kind Escorts Girls in India. Just Call us and Book Your Dream Girl.

    Ascorts Club Jaipur Escorts Service
    Ascorts Club Mumbai Escorts Service
    Ascorts Club Ahmedabad Escorts Service
    Ascorts Club Goa Escorts Service

    ReplyDelete
  48. If Your Looking For Call Girls and Escorts Services in Your City? Schloka - Free Adult classifieds in India, Browse in our call girl category To Post Ads, Book Escorts and Find Contact No For Hire Call Girls.

    Schloka Escorts Coimbatore
    Schloka Escorts Udaipur
    Schloka Escorts Ganganagar
    Schloka Escorts Mount Abu
    Schloka Escorts jodhpur

    ReplyDelete
  49. I want to leave a little comment to support and wish you the best of luck.we wish you the best of luck in all your blogging enedevors.
    data science course

    ReplyDelete
  50. I am impressed by the useful information on this site. It is very helpful and makes me wonder why I didn't think of that!
    Data Science Training in Hyderabad
    Data Science Course in Hyderabad

    ReplyDelete
  51. I’m a huge fan of informative blogs because they help us become more knowledgeable about the goings-on in the world around us. Please keep writing articles like this. I really enjoy them and feel smarter every time I read one.
    Data Science Training in Hyderabad
    Data Science Course in Hyderabad

    ReplyDelete
  52. Your blog is filled with unique good articles! I was impressed how well you express your thoughts. You have a communicable and well-articulated writings . I enjoyed reading all of them.
    AWS Training in Hyderabad
    AWS Course in Hyderabad

    ReplyDelete
  53. I am impressed by the useful information on this site. It is very helpful and makes me wonder why I didn't think of that!
    Kitchen And Bath

    ReplyDelete
  54. I am glad to discover this page. I have to thank you for the time I spent on this especially great reading !! I really liked each part and also bookmarked you for new information on your site.
    Data Science Course Syllabus

    ReplyDelete
  55. Mind-blowing went amazed with the content posted. Containing the information in its unique format with fully loaded valid info, which ultimately grabs the folks to go through its content. Hope you to keep up maintaining the standards in posting the content further too.

    Data Science Course in Bangalore

    ReplyDelete