|
You need digital certificates to set up transport-layer security. You can obtain certificates from a certificate authority, or you can create them using SQL Anywhere functionality.
You can use the SQL Anywhere Certificate Creation utility, createcert, to generate X.509 certificate files using RSA or ECC. See Certificate creation utility [createcert].
You can use the SQL Anywhere Certificate Viewer utility, viewcert, to read X.509 certificates using RSA or ECC. See Certificate viewer utility [viewcert].
You can follow the same process to create certificate files for server authentication. In each case, you create an identity file and a certificate file.
For server authentication, you create a server identity file and a certificate file to distribute to clients.
The certificate can be self-signed or signed by a commercial or enterprise Certificate Authority.
Self-signed certificates Self-signed server certificates can be used for simple setups. See Self-signed root certificates.
Enterprise root certificates An enterprise root certificate can be used to sign server certificates to improve data integrity and extensibility for multi-server deployments.
Commercial Certificate Authorities You can use a third-party Certificate Authority instead of an enterprise root certificate. Commercial Certificate Authorities have dedicated facilities to store private keys and create high-quality server certificates.
See Certificate chains and Globally-signed certificates.Self-signed root certificates
Certificate chains
Globally-signed certificates