sslconfig

Syntax

sslconfig [parameter_name [parameter_value]]

Parameters

parameter_name – the SSL parameter to be set.

parameter_value – the value of the SSL parameter.

parameter_name	parameter_value
dts_client_ssl_required	A comma- or semicolon-delimited list of DA agent host names. When DA server connects to a DA agent data transfer socket, it checks the DA agent host name against this list. If the DA agent host name is found, DA server connects using an SSL socket. You must restart DA server for this parameter to take effect.
keypair_passwd	The password to grant access to the public/private key pair within the keystore. This value is encrypted on disk. When this value is displayed in the command line tool (CLT), a ******** placeholder indicates it is set to a nonblank value. You must restart DA server for this parameter to take effect.
keystore	The absolute path to the keystore (flat file) that contains the public/private key pair to use. You must restart DA server for this parameter to take effect.
keystore_passwd	The password to grant access to the keystore. This value is encrypted on disk. When this value is displayed in the CLT, a ******** placeholder indicates it is set to a nonblank value. You must restart DA server for this parameter to take effect.
rmi_client_ssl_required	A comma- or semicolon-delimited list of DA agent host names. When DA server creates an RMI connection to a DA agent, it checks the DA agent host name against this list. If the DA agent host name is found, DA server connects using an SSL socket. You must restart DA server for this parameter to take effect.
rmi_server_ssl_enabled	Whether to connect all RMI clients using SSL. If this value is set to true, DA server requires all RMI clients to connect using SSL. Default: false. This parameter requires a restart of DA server to take effect.
truststore	The absolute path to the truststore (flat file) that contains the trusted certificate. You must restart DA server for this parameter to take effect.
truststore_passwd	The password to grant access to the truststore. This value is encrypted on disk. When this value is displayed in the CLT, a ******** placeholder indicates it is set to a nonblank value. You must restart DA server for this parameter to take effect.

Examples

Example 1 – shows all SSL configuration parameters:

sslconfig 
go

The returned result is:

 NAME                     VALUE               PENDING  REQUIRE RESTART
 -----------------------  ------------------- -------  --------------- 
 dts_client_ssl_required  venus,pluto                        true 
 keypair_passwd           ********                           true
 keystore                 C:/SSL/mars_trust.ks               true 
 keystore_passwd          ********                           true
 rmi_client_ssl_required  venus,pluto                        true 
 rmi_server_ssl_enabled   true                               true
 truststore               C:/SSL/mars_trust.ks               true 
 truststore_passwd        ********                           true

(0 rows affected)

Example 2 – shows the current value and its description of a SSL parameter:

sslconfig keystore
go

The returned result is:

 NAME                  VALUE                PENDING  REQUIRE RESTART
 ------------------    -------------------- -------  --------------- 
 keystore              C:/SSL/mars_trust.ks               true 
 
(0 rows affected)

 DEFAULT MINIMUM MAXIMUM EXPLANATION
 ------- ------- ------- -------------------------------
                         The absolute path to a keystore 
                         (server-side configuration).
  
 (0 rows affected)

Example 3 – changes the default value of an SSL parameter:
```
sslconfig rmi_server_ssl_enabled false
go
```