SSL Encryption - Informix 11.50
Poster enabled SSL (onsocssl) on an 11.50 64-bit server, but ISQL/forms failed with error -25507 "unknown service name or protocol", and she wondered whether Client SDK tools simply can't use SSL. Answer: CSDK components (ESQL/C, ODBC, JDBC, .NET) at 3.50 do support SSL; the problem was her old ISQL 7.32UC3, built against CSDK 2.90 which predates SSL support. Fix is to upgrade to the latest ISQL (and 4GL) 7.51 patch releases, which also resolve library/INFORMIXDIR conflicts with newer engine and CSDK versions.
Auto-generated by DrWatson from the posts below — may be imperfect; read the full thread.
We are running on a 64-bit server and I am trying to enable the SSL protocol for encryption. The installation and configuration of gsk was a success; however we are also running with the Client SDK package as we utilize the ISQL and ESQL/C. The problem I am encountering is that "Forms" will not run and I cannot perform isql command line commands without receiving "-25507 You specified an unknow service name or protocol" error message. The sqlhosts file has been changed to use nettype onsocssl and the onconfig NETTYPE has been set to socssl along with setting the SSL keystore parameters. In further research I found in the Client SDK release notes a note that indicates "If you are using 64bit servers: Remote 32-bit applications/tools (example: ESQL/C, 4GL, ISQL) can only connect to the IBM Informix Dynamic Server using the TCP/IP protocol." Is it safe to assume if I want to continue to use the Client SDK package I will not be able to utilize SSL (onsocssl protocol)?
The CSDK (meaning ESQL/C, ODBC, JDBC, .NET, etc) will work fine with SSL encryption. You may have trouble with ISQL & 4GL if you are not using the latest release of these. IB you need to install the latest patch releases of ISQL & 4GL v7.51. Note that earlier releases of these had trouble being installed in the same INFORMIXDIR as engine versions later than 11.50.xC4 and CSDK versions later than 3.50.xC4 due to some reshuffling of library contents after those releases. The problem is fixed in the latest ISQL and 4GL releases. Art Art S. Kagel, President and Principal Consultant ASK Database Management www.askdbmgt.com Blog: http://informix-myview.blogspot.com/ Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on the IIUG, nor any other organization with which I am associated either explicitly, implicitly, or by inference. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. On Thu, Jan 8, 2015 at 9:12 AM, KATHY DUCHENE <kathy.duchene@state.mn.us> wrote: > We are running on a 64-bit server and I am trying to enable the SSL > protocol > for encryption. The installation and configuration of gsk was a success; > however we are also running with the Client SDK package as we utilize the > ISQL > and ESQL/C. > > The problem I am encountering is that "Forms" will not run and I cannot > perform isql command line commands without receiving "-25507 You specified > an > unknow service name or protocol" error message. The sqlhosts file has been > changed to use nettype onsocssl and the onconfig NETTYPE has been set to > socssl along with setting the SSL keystore parameters. > > In further research I found in the Client SDK release notes a note that > indicates "If you are using 64bit servers: Remote 32-bit applications/tools > (example: ESQL/C, 4GL, ISQL) can only connect to the IBM Informix Dynamic > Server using the TCP/IP protocol." Is it safe to assume if I want to > continue > to use the Client SDK package I will not be able to utilize SSL (onsocssl > protocol)? > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --001a11c34b64a6fca3050c24c301
Thank you for the information
What version of ISQL are you using? isql -V Regards On Thu, Jan 8, 2015 at 2:12 PM, KATHY DUCHENE <kathy.duchene@state.mn.us> wrote: > We are running on a 64-bit server and I am trying to enable the SSL > protocol > for encryption. The installation and configuration of gsk was a success; > however we are also running with the Client SDK package as we utilize the > ISQL > and ESQL/C. > > The problem I am encountering is that "Forms" will not run and I cannot > perform isql command line commands without receiving "-25507 You specified > an > unknow service name or protocol" error message. The sqlhosts file has been > changed to use nettype onsocssl and the onconfig NETTYPE has been set to > socssl along with setting the SSL keystore parameters. > > In further research I found in the Client SDK release notes a note that > indicates "If you are using 64bit servers: Remote 32-bit applications/tools > (example: ESQL/C, 4GL, ISQL) can only connect to the IBM Informix Dynamic > Server using the TCP/IP protocol." Is it safe to assume if I want to > continue > to use the Client SDK package I will not be able to utilize SSL (onsocssl > protocol)? > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... --90e6ba614ee4896d54050c24f455
I am running ISQL version 7.32UC3
You can check in the product machine notes, but that version was compiled with CSDK 2.90.x which AFAIK didn't support SSL. So, as Art answered, you'd need a newer version of the tools. Regards On Thu, Jan 8, 2015 at 2:41 PM, KATHY DUCHENE <kathy.duchene@state.mn.us> wrote: > I am running ISQL version 7.32UC3 > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > -- Fernando Nunes Portugal http://informix-technology.blogspot.com My email works... but I don't check it frequently... --001a1140f54e20168a050c255213
But to be clear on your response; ESQL/C will be okay, but ISQL will need to be updated correct?
The ESQL or CSDK that is associated with the engine version 11.50, which is 3.50, will work with SSL encryption, yes. Art Art S. Kagel, President and Principal Consultant ASK Database Management www.askdbmgt.com Blog: http://informix-myview.blogspot.com/ Disclaimer: Please keep in mind that my own opinions are my own opinions and do not reflect on the IIUG, nor any other organization with which I am associated either explicitly, implicitly, or by inference. Neither do those opinions reflect those of other individuals affiliated with any entity with which I am affiliated nor those of the entities themselves. On Thu, Jan 8, 2015 at 10:27 AM, KATHY DUCHENE <kathy.duchene@state.mn.us> wrote: > But to be clear on your response; ESQL/C will be okay, but ISQL will need > to > be updated correct? > > > > ******************************************************************************* > Forum Note: Use "Reply" to post a response in the discussion forum. > > --001a1134d228fdb1fa050c25df4e