SSL and Informix
A DBA needed encrypted (SSL) JDBC access to an IDS 7.31.UD7 instance on AIX 5.2, with no option to upgrade since the app was being migrated to Oracle within months. Replies said SSL is native only in IDS 11.5, and encrypted communication via the ENCCSM Communication Support Module exists from 9.40 onward, so nothing is available in 7.31. The suggested workaround was to tunnel the connections (ssh/SSL tunnelling), which is free though regarded as a hack. No vendor-supported fix for 7.31 was identified.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
IDS Guys, I have supported Informix for many years, but I have never had to deal with security issues - until now. We have an application (AppA) running IDS 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access AppA's database to retrieve data that must be secured as it is returned. AppB wants to use SSL with a JDBC connection. As I say, I have never worked with this aspect of IDS connections before. Has anyone had to provide this sort of thing? I have combed through the documentation and googled around a bit, but I cannot find anything definitive. It appears we may have to purchase a third-party product. Any advice will be appreciated. Thanks Rob Schmitz Embarq Data Management
Schmitz, Rob B [EQ] wrote: > IDS Guys, > > I have supported Informix for many years, but I have never had to deal with > security issues - until now. We have an application (AppA) running IDS > 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access AppA's > database to retrieve data that must be secured as it is returned. AppB wants > to use SSL with a JDBC connection. As I say, I have never worked with this > aspect of IDS connections before. Has anyone had to provide this sort of > thing? I have combed through the documentation and googled around a bit, but I > cannot find anything definitive. It appears we may have to purchase a > third-party product. Any advice will be appreciated. > It's built into IDS 11.5. What is AIX 4.5 and is it still supported? -- Cheers, Obnoxio the Clown http://obotheclown.blogspot.com
IDS Supports encrypted communication post 9.40 relase via Communication= Support Module (CSM) called ENCCSM and in the 11.50 and higher releases IDS also supports native SS= L communication. However, I don't think any such solution exist in 7.31 IDS. Regards, Manoj = "Schmitz, Rob B = [EQ]" = <Rob.B.Schmitz@Em = To barq.com> ids@iiug.org = Sent by: = cc ids-bounces@iiug. = org Subj= ect SSL and Informix [13325] = = 09/10/2008 10:44 = AM = = = Please respond to = ids@iiug.org = = = IDS Guys, I have supported Informix for many years, but I have never had to deal = with security issues - until now. We have an application (AppA) running IDS 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access Ap= pA's database to retrieve data that must be secured as it is returned. AppB wants to use SSL with a JDBC connection. As I say, I have never worked with t= his aspect of IDS connections before. Has anyone had to provide this sort o= f thing? I have combed through the documentation and googled around a bit= , but I cannot find anything definitive. It appears we may have to purchase a third-party product. Any advice will be appreciated. Thanks Rob Schmitz Embarq Data Management ***********************************************************************= ******** Forum Note: Use "Reply" to post a response in the discussion forum. =
OTC, Sorry about the AIX version - I should have typed 5.2. Unfortunately, AppA is in the process of being converted to Oracle, so this requirement is for only about six to nine months. We will not be given the opportunity to upgrade to IDS 11.5 for AppA. I read with interest your note regarding Informix v. Oracle pricing. The special pricing Oracle negotiated with our company is such that Oracle is slightly less than half the cost of Informix - and that pricing is locked in for several more years. Rob Schmitz Embarq Data Management -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Obnoxio The Clown Sent: Wednesday, September 10, 2008 10:48 AM To: ids@iiug.org Subject: Re: SSL and Informix [13326] Schmitz, Rob B [EQ] wrote: > IDS Guys, > > I have supported Informix for many years, but I have never had to deal with > security issues - until now. We have an application (AppA) running IDS > 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access AppA's > database to retrieve data that must be secured as it is returned. AppB wants > to use SSL with a JDBC connection. As I say, I have never worked with this > aspect of IDS connections before. Has anyone had to provide this sort of > thing? I have combed through the documentation and googled around a bit, but I > cannot find anything definitive. It appears we may have to purchase a > third-party product. Any advice will be appreciated. > It's built into IDS 11.5. What is AIX 4.5 and is it still supported? -- Cheers, Obnoxio the Clown http://obotheclown.blogspot.com ******************************************************************************* Forum Note: Use "Reply" to post a response in the discussion forum.
If you tell IBM sales rep that you're going to replace an Oracle application you probably can get a nice price. That's competition... What you should also consider is the real but uncovered costs of change. As for SSL... in IDS 7.31 I don't think it can be done. Unless you tunnel your connections through ssh connections... dirty tricks... Regards. On Wed, Sep 10, 2008 at 5:01 PM, Schmitz, Rob B [EQ] < Rob.B.Schmitz@embarq.com> wrote: > OTC, > > Sorry about the AIX version - I should have typed 5.2. Unfortunately, AppA > is > in the process of being converted to Oracle, so this requirement is for > only > about six to nine months. We will not be given the opportunity to upgrade > to > IDS 11.5 for AppA. > > I read with interest your note regarding Informix v. Oracle pricing. The > special pricing Oracle negotiated with our company is such that Oracle is > slightly less than half the cost of Informix - and that pricing is locked > in > for several more years. > > Rob Schmitz > Embarq Data Management > > -----Original Message----- > From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of > Obnoxio > The Clown > Sent: Wednesday, September 10, 2008 10:48 AM > To: ids@iiug.org > Subject: Re: SSL and Informix [13326] > > Schmitz, Rob B [EQ] wrote: > > IDS Guys, > > > > I have supported Informix for many years, but I have never had to deal > with > > security issues - until now. We have an application (AppA) running IDS > > 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access > AppA's > > database to retrieve data that must be secured as it is returned. AppB > wants > > to use SSL with a JDBC connection. As I say, I have never worked with > this > > aspect of IDS connections before. Has anyone had to provide this sort of > > thing? I have combed through the documentation and googled around a bit, > but > I > > cannot find anything definitive. It appears we may have to purchase a > > third-party product. Any advice will be appreciated. > > > > It's built into IDS 11.5. > > What is AIX 4.5 and is it still supported? > > -- > Cheers, > Obnoxio the Clown > > http://obotheclown.blogspot.com > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently...
How about SSL tunelling? It is free. HTH Hrvoje -----Original Message----- From: ids-bounces@iiug.org [mailto:ids-bounces@iiug.org] On Behalf Of Schmitz, Rob B [EQ] Sent: Wednesday, September 10, 2008 5:45 PM To: ids@iiug.org Subject: SSL and Informix [13325] IDS Guys, I have supported Informix for many years, but I have never had to deal with security issues - until now. We have an application (AppA) running IDS 7.31.UD7 on AIX 4.5. Another application (AppB) would like to access AppA's database to retrieve data that must be secured as it is returned. AppB wants to use SSL with a JDBC connection. As I say, I have never worked with this aspect of IDS connections before. Has anyone had to provide this sort of thing? I have combed through the documentation and googled around a bit, but I cannot find anything definitive. It appears we may have to purchase a third-party product. Any advice will be appreciated. Thanks Rob Schmitz Embarq Data Management **************************************************************************** *** Forum Note: Use "Reply" to post a response in the discussion forum.