To start the database server with transport-layer security, supply the server identity file name and the password protecting the server's private key.
Use the -ec database server option to specify the identity and identity_password parameters. To allow unencrypted connections over shared memory, you must also specify the -es option.
Following is the syntax of a partial dbsrv16 command line:
-ec tls( identity=server-identity-filename; identity_password=password ) -x tcpip
An identity file contains the public certificate and its private key. For certificates that are not self signed, the identity file also contains all the signing certificates.
password The password for the server private key. You specify this password when you create the server certificate.
You can also start the database server with simple encryption. Simple encryption makes it more difficult for someone using a packet sniffer to read the network packets sent between the client and the server, but does not assure data integrity or provide server authentication.
You specify the TCP/IP protocol using the -x database server option.
Discuter à propos de cette page dans DocCommentXchange.
|Copyright © 2013, SAP AG ou société affiliée SAP - SAP Sybase SQL Anywhere 16.0|