Encrypts packets sent between the client application and the server.
NONE
If an Encryption value is not set, encryption is controlled by the setting on the server, which defaults to no encryption.
You can use this parameter if you are concerned about the security of network packets. Encryption does affect performance marginally. The Encryption (ENC) connection parameter accepts the following arguments:
accepts communication packets that are not encrypted. This value is equivalent to NO in previous versions of Sybase IQ.
accepts communication packets that are encrypted with simple encryption supported on all platforms and on pre-12.6 versions of Sybase IQ. This value is equivalent to YES in previous versions of Sybase IQ.
(formerly Certicom) accepts communication packets that are encrypted using Certicom encryption technology. To use this type of encryption, both the server and the client must be operating on Solaris, Linux, and all supported Windows operating systems, and the connection must be over the TCP/IP port. UNIX platforms, except for Solaris and Linux, do not recognize the client or server Certicom parameter. To authenticate the server, the Certicom software verifies that the server's certificate values match any values you supply about the client using the following arguments:
specify the certificate file the client uses to authenticate the server.
specify the value for the organization field. The server's value and the client's value must match.
specify the value for the organization unit field. The server's value and the client's value must match.
specify the certificate's common name. The server's value and the client's value must match.
accepts communication packets that are encrypted using RSA encryption technology. To use this type of encryption, both the server and the client must be operating on Solaris, Linux, and all supported Windows operating systems, and the connection must be over the TCP/IP port. UNIX platforms, except for Solaris and Linux, do not recognize the client or server RSA_TLS parameter. To authenticate the server, the Certicom software verifies that the server's certificate values match any values you supply about the client using the following arguments:
specify the certificate file the client uses to authenticate the server.
specify the value for the organization field. The server's value and the client's value must match.
specify the value for the organization unit field. The server's value and the client's value must match.
specify the certificate's common name. The server's value and the client's value must match.
The sample certificate should be used for testing purposes only. The sample certificate provides no security in deployed situations because it and the corresponding password are widely distributed with Sybase software. To protect your system, you must create your own certificate.
You can use the connection_property system function to retrieve the encryption settings for the current connection. The function returns one of three values: none, simple, or Certicom, depending which type of encryption is being used.
The following connection string fragment connects to a database server myeng with a TCP/IP link, using Certicom encryption and the sample trusted certificate:
"ENG=myeng; LINKS=tcpip; Encryption=ECC_TLS (trusted_certificates=sample.crt)"
The following connection string fragment connects to a database server myeng with a TCP/IP link, using RSA encryption and the sample trusted certificate:
"ENG=myeng; LINKS=tcpip; Encryption=RSA_TLS (trusted_certificates=sample.crt)"