Setting up SSL security

Before setting up SSL services on Replication Server review the SSL Plus user documentation and documentation for any third-party SSL security software you are using.

To set up SSL services on Replication Server, follow these steps:

  1. Edit $SYBASE/$SYBASE_OCS/config/libtcl.cfg to include SSL driver location.

  2. Edit $SYBASE/config/trusted.txt to include trusted CA certificates.

  3. Obtain a certificate from a trusted CA for each Replication Server accepting SSL connections.

  4. Create the identity file that concatenates a certificate and its private key.

  5. Use rs_init to enable SSL on Replication Server and to add an encrypted SSL password to the Replication Server configuration file.

    NoteYou can also enable and disable SSL on Replication Server using configure replication server and the use_ssl option.

  6. Create an SSL entry in the Replication Server interfaces file or directory service.

  7. Restart Replication Server.

See the Replication Server Configuration Guide for detailed instructions for each of these steps.