mkdir /home/oracle/wallet

    orapki wallet create -wallet "/home/oracle/wallet" -pwd WalletPasswd123 -auto_login_local

    创建一个自签名证书并将其加载到

    $ orapki wallet add -wallet "/home/oracle/wallet" -pwd WalletPasswd123 -dn "CN=`hostname`" -keysize 1024 -self_signed -validity 3650

    检查wallet的内容，需要注意的是自签名证书既是用户也是可信证书

    $ orapki wallet display -wallet "/home/oracle/wallet" -pwd WalletPasswd123

    导出证书，以便稍后将其加载到客户的wallet中

    $ orapki wallet export -wallet "/home/oracle/wallet" -pwd WalletPasswd123 -dn "CN=`hostname`" -cert /tmp/`hostname`-certificate.crt

    检查证书是否已按预期导出

    $ cat /tmp/`hostname`-certificate.crt

1、在服务器上，将以下内容添加到“$ORACLE_HOME/network/admin/sqlnet.ora”文件中

NAMES.DIRECTORY_PATH= (TNSNAMES, EZCONNECT)

WALLET_LOCATION =

   (SOURCE =

     (METHOD = FILE)

     (METHOD_DATA =

       (DIRECTORY = /home/oracle/wallet)

     )

   )

SQLNET.AUTHENTICATION_SERVICES = (TCPS,NTS,BEQ)

#SSL_CLIENT_AUTHENTICATION = FALSE

SSL_CLIENT_AUTHENTICATION = TRUE

DIAG_ADR_ENABLED = OFF

SSL_CIPHER_SUITES = (SSL_RSA_WITH_AES_256_CBC_SHA, SSL_RSA_WITH_3DES_EDE_CBC_SHA)

ADR_BASE = /opt/app/oracle


2、将监听配置为接受SSL/TLS加密连接。编辑“$ORACLE_HOME/network/admin/listener.ora”文件，添加wallet信息以及TCPS内容

SSL_CLIENT_AUTHENTICATION = FALSE

WALLET_LOCATION =

    (SOURCE =

        (METHOD = FILE)

        (METHOD_DATA =

        (DIRECTORY = /home/oracle/wallet)

        )

    )

LISTENER =

    (DESCRIPTION_LIST =

        (DESCRIPTION =

        (ADDRESS = (PROTOCOL = TCP)(HOST = 192.168.132.13)(PORT = 1521))

        (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC1521))

        (ADDRESS = (PROTOCOL = TCPS)(HOST = 192.168.132.13)(PORT = 2484))

        (ADDRESS = (PROTOCOL = IPC)(KEY = EXTPROC2484))

    )

    )

DIAG_ADR_ENABLED_LISTENER = OFF

ADR_BASE_LISTENER = /opt/app/oracle

TRACE_LEVEL_LISTENER=user

[oracle@db2 ~]$ cat /opt/app/oracle/product/11.2.0/dbhome_1/network/admin/tnsnames.ora

ORA11N =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCP)(HOST =192.168.132.13)(PORT = 1521))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = orcl11g.us.oracle.com)

      (SID = icdc)

    )

    )

TCPS1 =

    (DESCRIPTION =

    (ADDRESS = (PROTOCOL = TCPS)(HOST = 192.168.132.13)(PORT = 2484))

    (CONNECT_DATA =

      (SERVER = DEDICATED)

      (SERVICE_NAME = orcl11g.us.oracle.com)

      (SID = icdc)

    )

    )

　　重启监听　

　　　　$ lsnrctl stop

　　　　$ lsnrctl start

　　　　```好像是 lsnrctl reload 也可以的，不用stop再start```

1、tcps登录测试
[oracle@db2 ~]$ sqlplus bjxq/bjxqww2sq2z@TCPS1
2、日志监控
[oracle@db2 ~]$ tail -f  /opt/app/oracle/product/11.2.0/dbhome_1/network/log/listener.log