SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Hallo,

Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and SQLJ
type 4 ?
I want my NATIVE DB2 client to connect to DB2 server using SSL protocol (not
using SQLJ/JDBC)

Is this supported yet?
If yes, can someone point me to a HOWTO

I'm using Data Server 9.5 for Unix and Data Server Runtime Client 9.5 for
Windows

Grüße,

Christian Tanner

On Jul 22, 10:26 am, "Christian T" wrote:
> Hallo,
>
> Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and SQLJ
> type 4 ?
> I want my NATIVE DB2 client to connect to DB2 server using SSL protocol (not
> using SQLJ/JDBC)
>
> Is this supported yet?

Not that I'm aware of. In situations like yours I have used stunnel,
perhaps it is worth a look (http://www.stunnel.org/)?

/Lennart

[...]

Christian T wrote:

> Hallo,
>
> Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and SQLJ
> type 4 ?
> I want my NATIVE DB2 client to connect to DB2 server using SSL protocol
> (not using SQLJ/JDBC)
>
> Is this supported yet?

It appears to be, yes.

> If yes, can someone point me to a HOWTO

http://publib.boulder.ibm.com/infoce...searchWord=ssl

You should be able to set DB2COMM to SSL (or TCPIP,SSL if you want both).
At least, that's the server side. I'm pretty sure it's available for the
client side, too.

> I'm using Data Server 9.5 for Unix and Data Server Runtime Client 9.5 for
> Windows

You may need to get the GSKit to get the runtime client to do SSL (it's not
included by default as not many people need it and it's fairly large).

Darin,

That is just the point where i got stuck.
On the client side there is only SSL support for SQLJ and JDBC :-(

I think i have a look at STUNNEL, that might work i hope...

thanks,

Christian

"Darin McBride" wrote in message
news:LRohk.23379$nD.22873-at-pd7urf1no...
> Christian T wrote:
>
>> Hallo,
>>
>> Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and
>> SQLJ
>> type 4 ?
>> I want my NATIVE DB2 client to connect to DB2 server using SSL protocol
>> (not using SQLJ/JDBC)
>>
>> Is this supported yet?
>
> It appears to be, yes.
>
>> If yes, can someone point me to a HOWTO
>
> http://publib.boulder.ibm.com/infoce...searchWord=ssl
>
> You should be able to set DB2COMM to SSL (or TCPIP,SSL if you want both).
> At least, that's the server side. I'm pretty sure it's available for the
> client side, too.
>
>> I'm using Data Server 9.5 for Unix and Data Server Runtime Client 9.5 for
>> Windows
>
> You may need to get the GSKit to get the runtime client to do SSL (it's
> not
> included by default as not many people need it and it's fairly large).

Christian T wrote:

> Darin,
>
> That is just the point where i got stuck.
> On the client side there is only SSL support for SQLJ and JDBC :-(

After a bit of investigation, it seems that this should be added soon,
possibly as soon as 9.5FP2, due out in August.

> I think i have a look at STUNNEL, that might work i hope...

Good luck :-)

Christian T wrote:

> Darin,
>
> That is just the point where i got stuck.
> On the client side there is only SSL support for SQLJ and JDBC :-(

I found it... with a bit more help.

http://publib.boulder.ibm.com/infoce...c/t0053518.htm

Apparently, this is in v9.1FP5. You may need to upgrade a bit.

>>> On 7/23/2008 at 10:39 AM, in message ,
Darin McBride wrote:
> Christian T wrote:
>
>> Darin,
>>
>> That is just the point where i got stuck.
>> On the client side there is only SSL support for SQLJ and JDBC :-(
>
> I found it... with a bit more help.
>
> http://publib.boulder.ibm.com/infoce...om.ibm.db2.udb
> .uprun.doc/doc/t0053518.htm
>
> Apparently, this is in v9.1FP5. You may need to upgrade a bit.

This is a little weird. This link talks about cataloging a server like so:

catalog TCPIP NODE REMOTE SERVER SECURITY SSL


But in DB2 9.5 there does not appear to be an option of SECURITY SSL.

I'm not understanding how this has changed between version 9.1 and version
9.5. Anyone know? Is it just missing documentation in V9.5?

Thanks,
Frank

Frank Swarbrick wrote:

>>>> On 7/23/2008 at 10:39 AM, in message ,
> Darin McBride wrote:
>> Christian T wrote:
>>
>>> Darin,
>>>
>>> That is just the point where i got stuck.
>>> On the client side there is only SSL support for SQLJ and JDBC :-(
>>
>> I found it... with a bit more help.
>>
>> http://publib.boulder.ibm.com/infoce...om.ibm.db2.udb
>> .uprun.doc/doc/t0053518.htm
>>
>> Apparently, this is in v9.1FP5. You may need to upgrade a bit.
>
> This is a little weird. This link talks about cataloging a server like
> so:
>
> catalog TCPIP NODE REMOTE SERVER SECURITY
> SSL
>
>
> But in DB2 9.5 there does not appear to be an option of SECURITY SSL.
>
> I'm not understanding how this has changed between version 9.1 and version
> 9.5. Anyone know? Is it just missing documentation in V9.5?

9.5 is older than 9.1fp5 ;-) This should be there by 9.5fp2 as the feature
gets merged forward.

>>> On 7/23/2008 at 11:33 PM, in message
,
Darin McBride wrote:
> Frank Swarbrick wrote:
>
>>>>> On 7/23/2008 at 10:39 AM, in message
,
>> Darin McBride wrote:
>>> Christian T wrote:
>>>
>>>> Darin,
>>>>
>>>> That is just the point where i got stuck.
>>>> On the client side there is only SSL support for SQLJ and JDBC :-(
>>>
>>> I found it... with a bit more help.
>>>
>>> http://publib.boulder.ibm.com/infoce...om.ibm.db2.udb

>>> .uprun.doc/doc/t0053518.htm
>>>
>>> Apparently, this is in v9.1FP5. You may need to upgrade a bit.
>>
>> This is a little weird. This link talks about cataloging a server like
>> so:
>>
>> catalog TCPIP NODE REMOTE SERVER SECURITY
>> SSL
>>
>>
>> But in DB2 9.5 there does not appear to be an option of SECURITY SSL.
>>
>> I'm not understanding how this has changed between version 9.1 and
> version
>> 9.5. Anyone know? Is it just missing documentation in V9.5?
>
> 9.5 is older than 9.1fp5 ;-) This should be there by 9.5fp2 as the
> feature
> gets merged forward.

Oh!

Where would be the best place to check for the newest fixpacks, so that I
can look for it when it comes out for 9.5?

Thanks,
Frank

I can't tell if this does or does not address .NET clients. Does it?

Thanks,
Frank