Enhancing Security - Expert Oracle and Java Security - page 275

Install the Oracle Client
The Oracle client is included with the Oracle database installation, but you can also download and
install the Oracle client separately. Having the Oracle client installed on a separate computer is the best
way to test your client applications, rather than running them on the Oracle database, which you can
also do. In the following discussions, we will assume that you have set your ORACLE_HOME environment
variable to something that resembles one of these:
SET ORACLE_HOME=D:\app\oracle\product\11.2.0\dbhome_1
SET ORACLE_HOME=C:\app\oracle\product\11.2.0\client_1
Create the Wallet
The first thing you will do when you decide to place your connection passwords in a client wallet is pick
a location for the wallet. While there is no restriction on where wallets can be created, when you go to
use the wallet to connect to Oracle database, the presumed location is within the current OS user's home
directory. You can create your client wallet in any secure location, but you might as well create it where
it needs to be for your own use. Otherwise, you'll need to copy it to your home directory for your use and
testing.
The expected wallet location is in a subdirectory with the same name as the OS user ID in the user's
home directory. For example, if the user's OS user ID is FredF, then we will create a fredf directory in his
home directory and create or copy the wallet files there. We will use FredF as the OS username in our
examples. Create a directory for your client wallet.
mkdir C:\Users\FredF\fredf
 Note In Windows XP, you will substitute Documents and Settings for Users in these commands.
To create your password store, you will issue commands to the mkstore utility. One command will
create the store and one will create the password credential. In each of these commands, you will point
to the directory location for your wallet files. The first mkstore command creates the wallet. It will
prompt you to enter a wallet password that meets certain complexity rules.
%ORACLE_HOME%\bin\mkstore -wrl C:\Users\FredF\fredf -create
The second command creates the encrypted password/credential. The command will prompt you
to enter the password for the appver user twice; then it will prompt you to enter the password for the
wallet—that is the same password you entered for the first mkstore command. While we are here, let's
also create an entry in the client wallet for the appusr user:
mkstore -wrl C:\Users\FredF\fredf -createCredential orcl_appver appver
mkstore -wrl C:\Users\FredF\fredf -createCredential orcl_appusr appusr
There are several commands you may use to view the contents of your client wallet. You will need to
enter the wallet password to use these commands:
mkstore -wrl C:\Users\FredF\fredf -list
mkstore -wrl C:\Users\FredF\fredf -listCredential