Re: IDS 9.40.UC2, Encryption

Just to give you an update on this: After several additional tests the problem for the esql/c part has been isolated. The reason for the undefined results (i.e. sometimes it worked, sometimes error -5010 and -25582) was the installed CSDK version. It was a CSDK 2.81.UC1G2. I assume that it was a version received thru the 9.40 beta program. After downloading and installing the original, newest CSDK 2.81.UC2, the esql/c program works without problems, even without re-compilation. The exchange of the encryption library <IFXDIR>/lib/client/csm/iencs09a.so was enough. However I'm still confused about the error-code when trying to connect via dbaccess (14504: unsupported CSM version 3: ENCCSM). My question is: Must the programs which should communicate with the IDS 9.40.UC2 databaseserver thru an encrypted connection be compiled with a an Esql/C version not less than than a certain version ? What is the minimal Esql/C version required ? What seems to work is CSDK 2.40 (Esql/C 9.30), CSDK 2.70 (Esql/C 9.51) and CSDK 2.81 (Esql/C 9.53). However what is with the old esql/c versions, for example 7.24 or even 7.2 based esql/cobol programs ? Thank you in advance. Best regards Eric Eric Herber wrote: > I try to configure encryption with IDS 9.40.UC2 > on an AIX platform and I'm a little bit confused > about the different error messages I receive. > > Server-Platform: > ---------------- > AIX 5.1 > IDS 9.40.UC2 > > Server-SQLHOSTS: > ---------------- > ids940 onsoctcp defx0db0 ids940 csm=(ENCCSM) > > Server-CONCSMCFG: > ----------------- > ENCCSM("/usr/inf_version/9.40.UC2/lib/csm/iencs09a.so", "cipher[all]", ""); > > Client-Platform: > ---------------- > AIX 4.3.3 > Client SDK 2.81 > dbaccess 7.31.UD6 > > Client-SQLHOSTS: > ---------------- > ids940 onsoctcp defx0db0 ids940 csm=(ENCCSM) > > Client-CONCSMCFG: > ----------------- > ENCCSM("/usr/inf_version/7.31.UD6/lib/client/csm/iencs09a.so", > "cipher[all]", ""); > > > When trying to connect via dbaccess (7.31.UD6) 'connection-connect' > option in the menu I receive the following error: > > 14504: CSS: unsupported CSM version 3: ENCCSM> > When executing 'finderr 14504' it tells me: > > "Make sure thethat databaseserver and client application support the CSM > interface version in question." > > This is not very helpful.I really found nothing in the documentation > (IDS AdminGuide, ClientSDK-Installation, ESQL/C-Manual) that shows which > versions work together. Also there seems to be no further information in > the releasenotes. > > The next test I made was a small Esql/C compiled on the client platform > with CSDK 2.81 (Esql/C 9.53.UC1). > When running the Esql/C program I sometime receive an -25582 SQL > errorcode (Network connection broken) and sometimes an -5010 (CSM: > internal processing error) code and sometimes it runs just fine and > is able to connect to the remote server and reading some rows. > > The same Esql/C program works perfectly against an IDS 9.40.UC1 > (previous IDS version) databaseserver which is installed on the same > host as the 9.40.UC2 server. > > My questions are: > > 1) The beta webcast said: 'no need to recompile client programs' > -> Why does dbaccess get error 14504 then ? > > 2) Is there a compatibility matrix for client/server versions > available ? > > > Thank you in advance. > > Best regards > > Eric > -- > IT-Consulting Herber > WWW: http://www.herber-consulting.de > Email: eric@herber-consulting.de > > *********************************************** > Download the IFMX Database-Monitor for free at: > http://www.herber-consulting.de/BusyBee > *********************************************** > -- Best regards Eric -- IT-Consulting Herber WWW: http://www.herber-consulting.de Email: eric@herber-consulting.de *********************************************** Download the IFMX Database-Monitor for free at: http://www.herber-consulting.de/BusyBee ***********************************************

Encryption went into the last drop of beta. The issue with dbaccess is the CSDK that dbaccess was built with. The CSS is contained within the network code in CSDK and in the engine. CSS is the component that interfaces, loads, and manages the CSM routine. enccsm is one of the CSM routines. The APIs between the CSM and CSS layers are tightly related and thus are versioned so that we can ensure that the correct protocols are maintained. 9.x is using CSS version 3. 7.3 is using version 2. They are not compatable. "Eric Herber" <eric@herber-consulting.de> wrote in message news:3F9534B6.1090603@herber-consulting.de... > Just to give you an update on this: > > After several additional tests the problem for the esql/c part has been > isolated. > > The reason for the undefined results (i.e. sometimes it worked, > sometimes error -5010 and -25582) was the installed CSDK version. > It was a CSDK 2.81.UC1G2. I assume that it was a version received thru > the 9.40 beta program. > After downloading and installing the original, newest CSDK 2.81.UC2, the > esql/c program works without problems, even without re-compilation. The > exchange of the encryption library <IFXDIR>/lib/client/csm/iencs09a.so > was enough. > > However I'm still confused about the error-code when trying to connect > via dbaccess (14504: unsupported CSM version 3: ENCCSM). > > My question is: > > Must the programs which should communicate with the IDS 9.40.UC2 > databaseserver thru an encrypted connection be compiled with a > an Esql/C version not less than than a certain version ? > What is the minimal Esql/C version required ? > > What seems to work is CSDK 2.40 (Esql/C 9.30), CSDK 2.70 (Esql/C 9.51) > and CSDK 2.81 (Esql/C 9.53). > However what is with the old esql/c versions, for example 7.24 or > even 7.2 based esql/cobol programs ? > > Thank you in advance. > > Best regards > > Eric > > > Eric Herber wrote: > > I try to configure encryption with IDS 9.40.UC2 > > on an AIX platform and I'm a little bit confused > > about the different error messages I receive. > > > > Server-Platform: > > ---------------- > > AIX 5.1 > > IDS 9.40.UC2 > > > > Server-SQLHOSTS: > > ---------------- > > ids940 onsoctcp defx0db0 ids940 csm=(ENCCSM) > > > > Server-CONCSMCFG: > > ----------------- > > ENCCSM("/usr/inf_version/9.40.UC2/lib/csm/iencs09a.so", "cipher[all]", ""); > > > > Client-Platform: > > ---------------- > > AIX 4.3.3 > > Client SDK 2.81 > > dbaccess 7.31.UD6 > > > > Client-SQLHOSTS: > > ---------------- > > ids940 onsoctcp defx0db0 ids940 csm=(ENCCSM) > > > > Client-CONCSMCFG: > > ----------------- > > ENCCSM("/usr/inf_version/7.31.UD6/lib/client/csm/iencs09a.so", > > "cipher[all]", ""); > > > > > > When trying to connect via dbaccess (7.31.UD6) 'connection-connect' > > option in the menu I receive the following error: > > > > 14504: CSS: unsupported CSM version 3: ENCCSM> > > > When executing 'finderr 14504' it tells me: > > > > "Make sure thethat databaseserver and client application support the CSM > > interface version in question." > > > > This is not very helpful.I really found nothing in the documentation > > (IDS AdminGuide, ClientSDK-Installation, ESQL/C-Manual) that shows which > > versions work together. Also there seems to be no further information in > > the releasenotes. > > > > The next test I made was a small Esql/C compiled on the client platform > > with CSDK 2.81 (Esql/C 9.53.UC1). > > When running the Esql/C program I sometime receive an -25582 SQL > > errorcode (Network connection broken) and sometimes an -5010 (CSM: > > internal processing error) code and sometimes it runs just fine and > > is able to connect to the remote server and reading some rows. > > > > The same Esql/C program works perfectly against an IDS 9.40.UC1 > > (previous IDS version) databaseserver which is installed on the same > > host as the 9.40.UC2 server. > > > > My questions are: > > > > 1) The beta webcast said: 'no need to recompile client programs' > > -> Why does dbaccess get error 14504 then ? > > > > 2) Is there a compatibility matrix for client/server versions > > available ? > > > > > > Thank you in advance. > > > > Best regards > > > > Eric > > -- > > IT-Consulting Herber > > WWW: http://www.herber-consulting.de > > Email: eric@herber-consulting.de > > > > *********************************************** > > Download the IFMX Database-Monitor for free at: > > http://www.herber-consulting.de/BusyBee > > *********************************************** > > > > -- > > Best regards > > Eric > -- > IT-Consulting Herber > WWW: http://www.herber-consulting.de > Email: eric@herber-consulting.de > > *********************************************** > Download the IFMX Database-Monitor for free at: > http://www.herber-consulting.de/BusyBee > *********************************************** >