19c的TDE wallet的設(shè)置是在數(shù)據(jù)庫(kù)中設(shè)置的，也就是粒度為數(shù)據(jù)庫(kù)，因此不會(huì)有沖突。

而11g的設(shè)置是在sqlnet.ora中，因此有可能產(chǎn)生沖突。

這里先將一個(gè)重要概念，按照文檔的說(shuō)法，wallet是不能被數(shù)據(jù)庫(kù)共享的。

If there are multiple Oracle databases installed on the same server (for example, databases sharing the same Oracle binary but using different data files), then each database must access its own Transparent Data Encryption wallet. Wallets are not designed to be shared between databases. By design, there must be one wallet per database. You cannot use the same wallet for more than one database.

方法也很簡(jiǎn)單，就是利用環(huán)境變量。

假設(shè)1個(gè)數(shù)據(jù)庫(kù)服務(wù)器上有2個(gè)11g數(shù)據(jù)庫(kù)：orcl和orcl2。

sqlnet.ora的內(nèi)容為：

ENCRYPTION_WALLET_LOCATION=(SOURCE=(METHOD=FILE)(METHOD_DATA=(DIRECTORY=/home/oracle/app/oracle/wallet/$ORACLE_SID)))

接下來(lái)創(chuàng)建目錄：

mkdir /home/oracle/app/oracle/wallet
mkdir /home/oracle/app/oracle/wallet/orcl
mkdir /home/oracle/app/oracle/wallet/orcl2

然后在各種數(shù)據(jù)庫(kù)中創(chuàng)建wallet和master key即可：

-- ORCL
ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "Easy2rem";-- ORCL2
ALTER SYSTEM SET ENCRYPTION KEY IDENTIFIED BY "Easy2rem";

然后可以看到不同的wallet文件：

$ md5sum /home/oracle/app/oracle/wallet/orcl/ewallet.p12
b417fcbc78e36d00f9fbc9f791dd073c  /home/oracle/app/oracle/wallet/orcl/ewallet.p12$ md5sum /home/oracle/app/oracle/wallet/orcl2/ewallet.p12
4ec6259c904023ace23127f00b8645c9  /home/oracle/app/oracle/wallet/orcl2/ewallet.p12

接下來(lái)，也就沒(méi)什么可說(shuō)的啦。