Setting the TLS Connection Trusted Relationship

Define the location and file name that contains the trusted relationship to be used for the Transport Layer Security (TLS) connections to the external LDAP server for user authentication.

Prerequisites
Requires the SET ANY SECURITY OPTION system privilege.
Task

During LDAP user authentication, SAP Sybase IQ acts as a client to the LDAP server, and must have access to the file that contains the name of the certificate authority (CA) that signed the TLS certificate. The path and file name to the CA are stored in the public-only TRUSTED_CERTIFICATES_FILE database security option. By default, this option is set to NULL (disabled), meaning that no outbound connections can be started because there are no trusted CA. Once set, this value takes effect immediately.

The list of trusted CAs that sign server certificates may be shared in a location in a Windows environment on the local C: drive for all SAP Sybase applications on that machine.

To set the TRUSTED_CERTIFICATES_FILE database security option, execute:
SET OPTION PUBLIC.TRUSTED_CERTIFICATES_FILE = ‘path/filename’

Example

This example sets the path to the trusted certificates file to C:\sybase\shared, in a file called \trusted.txt:

SET OPTION PUBLIC.TRUSTED_CERTIFICATES_FILE = ‘C:\sybase\shared\trusted.txt’
Related reference
TRUSTED_CERTIFICATES_FILE Option