trusted_certificate=filename

• TLS, HTTPS

None

When synchronization occurs through a TLS synchronization stream, the MobiLink server sends its certificate to the client, and the certificate of the entity that signed it, and so on up to a self-signed root.

The client checks that the chain is valid and that it trusts the root certificate in the chain. This feature allows you to specify which root certificates to trust.

Certificates are used according to the following rules of precedence:

For information about how to set network protocol options with dbmlsync, see CommunicationAddress (adr) extended option.

For information about how to set network protocol options with UltraLite, see Network protocol options for UltraLite synchronization streams.

• UltraLite file path formats in connection parameters
• MobiLink client/server communications encryption
• -x mlsrv12 option
• tls_type
• certificate_company
• certificate_name
• certificate_unit

The following example sets up RSA encryption for an HTTPS protocol. This requires setup on the server and client. Each command must be written on one line.

The server implementation is:

mlsrv12 
   -c "DSN=SQL Anywhere 12 Demo;UID=DBA;PWD=sql" 
   -x https(
     identity=c:\%SQLANY12%\bin32\rsaserver.id;
     identity_password=test)

On a SQL Anywhere client, the implementation is:

dbmlsync 
   -c "DSN=mydb;UID=DBA;PWD=sql" 
   -e "ctp=https;
       adr='trusted_certificate=c:\%SQLANY12%\bin32\rsaroot.crt;
          certificate_name=RSA Server"
          certificate_company=test;
          certificate_unit=test'"

On an UltraLite client, the implementation is:

info.stream = "https";
    info.stream_parms = 
       "trusted_certificate=\%SQLANY12%\bin32\rsaroot.crt;"
       "certificate_name=RSA Server;"
       "certificate_company=test;"
       "certificate_unit=test";