This section shows you how to configure SQL Anywhere clients to use transport-layer security over HTTPS or TCP/IP.

Using transport-layer security over TCP/IP and HTTPS

MobiLink transport-layer security is an inherent feature of the MobiLink HTTPS and TCP/IP protocols. To use transport-layer security over HTTPS, specify the trusted_certificates connection parameter using the ADR extended option. Following is the syntax for a partial dbmlsync command line.

-e "ctp=protocol;
   adr=[ fips={ y | n }; ]
   trusted_certificates=public-certificate;
   ..."

See also

• Client security options
• Creating digital certificates
• CommunicationAddress (adr) extended option
• MobiLink client network protocol option summary
• CREATE SYNCHRONIZATION SUBSCRIPTION statement [MobiLink]
• ALTER SYNCHRONIZATION SUBSCRIPTION statement [MobiLink]

Examples

The following example specifies RSA security over HTTPS. It must all be written on one line:

dbmlsync -c "eng=rem1;uid=dba;pwd=mypwd"
  -e "ctp=https;
      adr='trusted_certificates=c:\temp\public_cert.crt;
      certificate_company=Sybase, Inc.;
      certificate_unit=IAS;
      certificate_name=MobiLink'"

Alternatively, you can specify the CommunicationAddress extended option using the CREATE SYNCHRONIZATION SUBSCRIPTION or ALTER SYNCHRONIZATION SUBSCRIPTION statement. This method provides the same information, but stores it in the database.

CREATE SYNCHRONIZATION SUBSCRIPTION 
 TO pub1 
 FOR user1 
 ADDRESS 'trusted_certificates=c:\temp\public_cert.crt;
    certificate_company=Sybase, Inc.;
    certificate_unit=IAS;
  certificate_name=MobiLink';

The following example specifies RSA security and TCP/IP. It must all be written on one line:

dbmlsync -c "eng=rem1;uid=myuid;pwd=mypwd"
   -e "ctp=tls;
       adr='port=3333;
           tls_type=rsa;
           trusted_certificates=c:\test\public_cert.crt;
           certificate_company=Sybase, Inc.;
           certificate_unit=IAS;
           certificate_name=MobiLink'"

Alternatively, you can specify the CommunicationAddress extended option using the CREATE SYNCHRONIZATION SUBSCRIPTION or ALTER SYNCHRONIZATION SUBSCRIPTION statement:

CREATE SYNCHRONIZATION SUBSCRIPTION 
 TO pub1 
 FOR user1 
 ADDRESS 'port=3333;
    tls_type=rsa;trusted_certificates=public_cert.crt;
       certificate_company=Sybase, Inc.;
       certificate_unit=IAS;
       certificate_name=MobiLink';