Re: dbaccess with onsocssl

On Nov 6, 2:33 pm, "red_val...@yahoo.com" <red_val...@yahoo.com> wrote: > Can dbaccess use an onsocssl connection? > > Running IDS 11.50.FC4 on hpux11.23 To use dbaccess with IDS ssl protocol, dbaccess must be set up like any other client tool i.e., a client key db file must be created in $INFORMIXDIR/etc using the gsk7capicmd application, etc. RTFM for SSL use with (Windows) client applications and adjust for Unix/Linux.

On Nov 10, 3:33 pm, "red_val...@yahoo.com" <red_val...@yahoo.com> wrote: > On Nov 6, 2:33 pm, "red_val...@yahoo.com" <red_val...@yahoo.com> > wrote: > > > Can dbaccess use an onsocssl connection? > > > Running IDS 11.50.FC4 on hpux11.23 > > To use dbaccess with IDS ssl protocol, dbaccess must be set up like > any other client tool i.e., a client key db file must be created in > $INFORMIXDIR/etc using the gsk7capicmd application, etc.  RTFM for SSL > use with (Windows) client applications and adjust for Unix/Linux. Also, every single individual user must use the SAME client keystore for root certificates, defaulting to location ${INFORMIXDIR}/etc. But when the repository is created by user 'informix', its permissions are read/write by user 'informix' only, so it needs to be chmod'ed. I wasn't able to find an alternative in the documentation (IBM Informix Security Guide Version 11.50, Ch. 2 "Network Data Encryption," Sect. "Secure Sockets Layer Protocol"), though the location can be specified in the conssl.cfg file which, in turn, must be located in ${INFORMIXDIR}/etc. I'd be exceedingly happy to be corrected on this last. Should every client user reference the same keystore?