NULL, 'filepath-to-certificate'

NULL

Can only be set for PUBLIC. You must have the SET ANY SECURITY OPTION system privilege to set this option. The setting takes effect immediately.

An incoming TLS connection to SQL Anywhere uses certificate settings set by the -ec server option. For SQL Anywhere to act as a client to another server—for example when SQL Anywhere connects to an LDAP server—the Certificate Authority (CA) that signed the TLS certificate must be known.

For client connections, the trusted_certificates connection option is set with the path to a file containing a list of trusted CA certificates. Similarly, the trusted_certificates_file database option is used to specify trusted CA certificates when SQL Anywhere acts as a client.

When this option is set to NULL, no outbound TLS connections can be started because there are no trusted Certificate Authorities.

• -ec database server option
• trusted_certificates protocol option

In this example, the list of trusted certificate authorities that sign server certificates is found in a local file called trusted.txt:

SET OPTION PUBLIC.trusted_certificates_file = 'C:\\sybase\\shared\\trusted.txt';