Configuring SSL from a Client to Replication Agent Server

Enable or disable SSL using the ra_config with the use_ssl option.

1. Enable ra_config, enter:

   ra_config use_ssl, true

   Set use_ssl to false to disable SSL. By default, SSL is not enabled on Replication Agent. When use_ssl is set to false, Replication Agent does not accept SSL connections.
   use_ssl is a static option. You must restart Replication Agent after you change its value.
2. Update the interfaces file (sql.ini) to include ssl.
   For example:

   [RAO_SERVER1]
   master=NLWNSCK,localhost,13010,ssl
   query=NLWNSCK,localhost,13010,ssl

3. Add the CA root certificate that issues the Replication Agent certificate to:
   • UNIX – $SYBASE/config/trusted.txt
   • Windows – %SYBASE%/ini/trusted.txt

   The isql utility reads the trusted.txt for server authentication when establishing SSL connection.