informix SSL
Posted in 2019
Sergio Peres, running RSS and HDR servers on versions 11.50 to 14.10, wanted to use SSL for GDPR. Art Kagel said server-to-server replication needs no SSL connection type: set the ENCRYPT_* onconfig parameters (ENCRYPT_CYPHER, _HDR, _MAC, _MACFILE, _SMX, _SWITCH) and keep onsoctcp; SSL can still be used for clients. Sergio found this helpful.
Auto-generated by Claude from the posts below — may be imperfect; read the full thread.
Topics: High Availability & Replication, Installation, Setup & Upgrades
Hi, I have some RSS and HDR server installed over clients, concerning GDPR I need to convert my connection to SSL. I have done some tests but I have some doubts about the process, can someone give me some help? Thanks in advance, SP ------------------------------ Sergio Peres AIRC Coimbra ------------------------------ #Informix
Sergio:
You don't have to use an SSL connection type for communications with secondaries. That will work, but you can just turn on the encryption between the primary and secondary at the server level with the ENCRYPT_* onconfig parameters:
ENCRYPT_CYPHER
ENCRYPT_HDR
ENCRYPT_MAC
ENCRYPT_MACFILE
ENCRYPT_SMX
ENCRYPT_SWITCHArt
Art S. Kagel, President and Principal Consultant
ASK Database Management
www.askdbmgt.com
Blog:
http://informix-myview.blogspot.com/
Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on the IIUG, nor any other organization with which I am associated either explicitly, implicitly, or by inference. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves.
------Original Message------
Hi,
I have some RSS and HDR server installed over clients, concerning GDPR I need to convert my connection to SSL.
I have done some tests but I have some doubts about the process, can someone give me some help?
Thanks in advance,
SP
------------------------------
Sergio Peres
AIRC
Coimbra
------------------------------
#Informix
Thanks Art, That can help me a lot, I'll take a look over that parameters. Concerning protocol, I don't neeed to change it? I use onsoctcp now!? SP ------------------------------ Sergio Peres AIRC Coimbra ------------------------------
Correct. You may still want to use SSL connections for clients for the same reasons, but the connections between servers can be simple soctcp type because the servers can encrypt all their replication traffic before putting it on the net. Art Art S. Kagel, President and Principal Consultant ASK Database Management www.askdbmgt.com Blog: http://informix-myview.blogspot.com/ Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on the IIUG, nor any other organization with which I am associated either explicitly, implicitly, or by inference. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. ------Original Message------ Thanks Art, That can help me a lot, I'll take a look over that parameters. Concerning protocol, I don't neeed to change it? I use onsoctcp now!? SP ------------------------------ Sergio Peres AIRC Coimbra ------------------------------ #Informix
Hi Sergio. IMHO it would be more productive if if you tell te what step are you trying to complete, and what kind of error are you getting. That way we could help you much quicker to solve your issues or doubts, right? HTH ------------------------------ Alexandre Marini ------------------------------
Hi Alexandre, Well I don't have exactly problems, I am facing some doubts regarding all the different information I have searched ... Concerning I have several diferent versions over customers from 11.50 to 14.10, I am trying is to find one way that i can user over all of them! Thanks for your reply, SP ------------------------------ Sergio Peres AIRC Coimbra ------------------------------
Ok, I think Art has already helped you out on this. If you have some more doubt, just reply over this and we can help you further. Best regards ------------------------------ Alexandre Marini ------------------------------