SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Lennart

Guest

n/a Posts

July 22nd, 2008
01:05 PM
#2

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

On Jul 22, 10:26 am, "Christian T" <n...@spam.dewrote:

Quote:

Originally Posted by

Hallo,
>
Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and SQLJ
type 4 ?
I want my NATIVE DB2 client to connect to DB2 server using SSL protocol (not
using SQLJ/JDBC)
>
Is this supported yet?

Not that I'm aware of. In situations like yours I have used stunnel,
perhaps it is worth a look (http://www.stunnel.org/)?

/Lennart

[...]

Darin McBride

Guest

n/a Posts

July 22nd, 2008
05:35 PM
#3

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Christian T wrote:

Quote:

Originally Posted by

It appears to be, yes.

Quote:

Originally Posted by

If yes, can someone point me to a HOWTO

http://publib.boulder.ibm.com/infoc...&searchWord=ssl

You should be able to set DB2COMM to SSL (or TCPIP,SSL if you want both).
At least, that's the server side. I'm pretty sure it's available for the
client side, too.

Quote:

Originally Posted by

I'm using Data Server 9.5 for Unix and Data Server Runtime Client 9.5 for
Windows

You may need to get the GSKit to get the runtime client to do SSL (it's not
included by default as not many people need it and it's fairly large).

Christian T

Guest

n/a Posts

July 23rd, 2008
06:55 AM
#4

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Darin,

That is just the point where i got stuck.
On the client side there is only SSL support for SQLJ and JDBC :-(

I think i have a look at STUNNEL, that might work i hope...

thanks,

Christian

"Darin McBride" <dmcbride@naboo.to.org.no.spam.for.mewrote in message
news:LRohk.23379$nD.22873@pd7urf1no...

Quote:

Originally Posted by

Christian T wrote:
>

Quote:

Originally Posted by

>Hallo,
>>
>Is SSL protocol in LUW only supported for IBM DB2 Driver for JDBC and
>SQLJ
>type 4 ?
>I want my NATIVE DB2 client to connect to DB2 server using SSL protocol
>(not using SQLJ/JDBC)
>>
>Is this supported yet?

>
It appears to be, yes.
>

Quote:

Originally Posted by

>If yes, can someone point me to a HOWTO

>
http://publib.boulder.ibm.com/infoc...&searchWord=ssl
>
You should be able to set DB2COMM to SSL (or TCPIP,SSL if you want both).
At least, that's the server side. I'm pretty sure it's available for the
client side, too.
>

Quote:

Originally Posted by

>I'm using Data Server 9.5 for Unix and Data Server Runtime Client 9.5 for
>Windows

>
You may need to get the GSKit to get the runtime client to do SSL (it's
not
included by default as not many people need it and it's fairly large).

Darin McBride

Guest

n/a Posts

July 23rd, 2008
03:35 PM
#5

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Christian T wrote:

Quote:

Originally Posted by

Darin,
>
That is just the point where i got stuck.
On the client side there is only SSL support for SQLJ and JDBC :-(

After a bit of investigation, it seems that this should be added soon,
possibly as soon as 9.5FP2, due out in August.

Quote:

Originally Posted by

I think i have a look at STUNNEL, that might work i hope...

Good luck :-)

Darin McBride

Guest

n/a Posts

July 23rd, 2008
04:45 PM
#6

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Christian T wrote:

Quote:

Originally Posted by

Darin,
>
That is just the point where i got stuck.
On the client side there is only SSL support for SQLJ and JDBC :-(

I found it... with a bit more help.

http://publib.boulder.ibm.com/infoc...oc/t0053518.htm

Apparently, this is in v9.1FP5. You may need to upgrade a bit.

Frank Swarbrick

Guest

n/a Posts

July 24th, 2008
12:25 AM
#7

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

>>On 7/23/2008 at 10:39 AM, in message <a9Jhk.128399$gc5.8952@pd7urf2no>,
Darin McBride<dmcbride@naboo.to.org.no.spam.for.mewrote:

Quote:

Originally Posted by

Christian T wrote:
>

Quote:

Originally Posted by

>Darin,
>>
>That is just the point where i got stuck.
>On the client side there is only SSL support for SQLJ and JDBC :-(

>
I found it... with a bit more help.
>
http://publib.boulder.ibm.com/infoc...com.ibm.db2.udb
.uprun.doc/doc/t0053518.htm
>
Apparently, this is in v9.1FP5. You may need to upgrade a bit.

This is a little weird. This link talks about cataloging a server like so:

catalog TCPIP NODE <nodename REMOTE <ipaddr SERVER <portSECURITY SSL

But in DB2 9.5 there does not appear to be an option of SECURITY SSL.

I'm not understanding how this has changed between version 9.1 and version
9.5. Anyone know? Is it just missing documentation in V9.5?

Thanks,
Frank

Darin McBride

Guest

n/a Posts

July 24th, 2008
05:35 AM
#8

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Frank Swarbrick wrote:

Quote:

Originally Posted by

Quote:

Originally Posted by

Quote:

Originally Posted by

>>>On 7/23/2008 at 10:39 AM, in message <a9Jhk.128399$gc5.8952@pd7urf2no>,

Darin McBride<dmcbride@naboo.to.org.no.spam.for.mewrote:

Quote:

Originally Posted by

>Christian T wrote:
>>

Quote:

Originally Posted by

>>Darin,
>>>
>>That is just the point where i got stuck.
>>On the client side there is only SSL support for SQLJ and JDBC :-(

>>
>I found it... with a bit more help.
>>
>http://publib.boulder.ibm.com/infoc...com.ibm.db2.udb
>.uprun.doc/doc/t0053518.htm
>>
>Apparently, this is in v9.1FP5. You may need to upgrade a bit.

>
This is a little weird. This link talks about cataloging a server like
so:
>
catalog TCPIP NODE <nodename REMOTE <ipaddr SERVER <portSECURITY
SSL
>
>
But in DB2 9.5 there does not appear to be an option of SECURITY SSL.
>
I'm not understanding how this has changed between version 9.1 and version
9.5. Anyone know? Is it just missing documentation in V9.5?

9.5 is older than 9.1fp5 ;-) This should be there by 9.5fp2 as the feature
gets merged forward.

Frank Swarbrick

Guest

n/a Posts

July 24th, 2008
07:05 PM
#9

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

>>On 7/23/2008 at 11:33 PM, in message
<ruUhk.129910$gc5.114399@pd7urf2no>,
Darin McBride<dmcbride@naboo.to.org.no.spam.for.mewrote:

Quote:

Originally Posted by

Frank Swarbrick wrote:
>

Quote:

Originally Posted by

Quote:

Originally Posted by

>>>>On 7/23/2008 at 10:39 AM, in message

<a9Jhk.128399$gc5.8952@pd7urf2no>,

Quote:

Originally Posted by

Quote:

Originally Posted by

>Darin McBride<dmcbride@naboo.to.org.no.spam.for.mewrote:

Quote:

Originally Posted by

>>Christian T wrote:
>>>
>>>Darin,
>>>>
>>>That is just the point where i got stuck.
>>>On the client side there is only SSL support for SQLJ and JDBC :-(
>>>
>>I found it... with a bit more help.
>>>
>>http://publib.boulder.ibm.com/infoc...com.ibm.db2.udb

Quote:

Originally Posted by

Quote:

Originally Posted by

Quote:

Originally Posted by

>>.uprun.doc/doc/t0053518.htm
>>>
>>Apparently, this is in v9.1FP5. You may need to upgrade a bit.

>>
>This is a little weird. This link talks about cataloging a server like
>so:
>>
>catalog TCPIP NODE <nodename REMOTE <ipaddr SERVER <portSECURITY
>SSL
>>
>>
>But in DB2 9.5 there does not appear to be an option of SECURITY SSL.
>>
>I'm not understanding how this has changed between version 9.1 and

version

Quote:

Originally Posted by

>9.5. Anyone know? Is it just missing documentation in V9.5?

>
9.5 is older than 9.1fp5 ;-) This should be there by 9.5fp2 as the
feature
gets merged forward.

Oh!

Where would be the best place to check for the newest fixpacks, so that I
can look for it when it comes out for 9.5?

Thanks,
Frank

louisem

Guest

n/a Posts

July 25th, 2008
10:05 AM
#11

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

On Jul 24, 3:01 pm, "Frank Swarbrick" <Frank.Swarbr...@efirstbank.com>
wrote:

Quote:

Originally Posted by

I can't tell if this does or does not address .NET clients. Does it?
>
Thanks,
Frank

Hi,

That support is available on V91 FP5:

http://publib.boulder.ibm.com/infoc...oc/c0053516.htm

and will come out when FP2 is available.

Darin McBride

Guest

n/a Posts

July 25th, 2008
06:35 PM
#12

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

Frank Swarbrick wrote:

Quote:

Originally Posted by

Where would be the best place to check for the newest fixpacks, so that I
can look for it when it comes out for 9.5?

http://www-933.ibm.com/eserver/support/fixes/

Select "Information Management", then "DB2", then "9.5.*", then your
platform, and hit continue. Then select "Recommended", "continue" (this
selects the most current fix pack). Then select the group (there should
only be one, I think) - you should be able to just hit "select all". Now
you have a choice - use Download Director (IBM's Java applet that can
download a file in a swarm mode similar to peer-to-peer, but all
connections will be to IBM, not to others, so it's not really peers - can
help maximise your bandwidth usage to get the file as fast as possible),
or, if Java doesn't work well for you, regular HTTP mode. Select one (DD
is default), and hit "continue." Now you'll have a list of everything for
your platform in the latest 9.5 fix pack. Choose what to download, and
you're off.

Alternately, instead of selecting "recommended", if you want a particular
fix pack, you can try selecting "Text" and putting in "FP2". That
currently will return nothing (FP2 isn't available yet), but once FP2 is
available, the search will return what you 're interested in. This works
fine when you want to know that a particular fix pack is out, but not as
useful when you just want the latest (as IBM suggests you do ;-) ).

Frank Swarbrick

Guest

n/a Posts

July 25th, 2008
11:55 PM
#13

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

>>On 7/25/2008 at 12:28 PM, in message <jXoik.93576$kx.93071@pd7urf3no>,
Darin McBride<dmcbride@naboo.to.org.no.spam.for.mewrote:

Quote:

Originally Posted by

Frank Swarbrick wrote:
>

Quote:

Originally Posted by

>Where would be the best place to check for the newest fixpacks, so that

Quote:

Originally Posted by

>can look for it when it comes out for 9.5?

>
http://www-933.ibm.com/eserver/support/fixes/
>
Select "Information Management", then "DB2", then "9.5.*", then your
platform, and hit continue. Then select "Recommended", "continue" (this
selects the most current fix pack). Then select the group (there should
only be one, I think) - you should be able to just hit "select all". Now
you have a choice - use Download Director (IBM's Java applet that can
download a file in a swarm mode similar to peer-to-peer, but all
connections will be to IBM, not to others, so it's not really peers - can
help maximise your bandwidth usage to get the file as fast as possible),
or, if Java doesn't work well for you, regular HTTP mode. Select one
(DD
is default), and hit "continue." Now you'll have a list of everything
for
your platform in the latest 9.5 fix pack. Choose what to download, and
you're off.
>
Alternately, instead of selecting "recommended", if you want a
particular
fix pack, you can try selecting "Text" and putting in "FP2". That
currently will return nothing (FP2 isn't available yet), but once FP2 is
available, the search will return what you 're interested in. This
works
fine when you want to know that a particular fix pack is out, but not as
useful when you just want the latest (as IBM suggests you do ;-) ).

Thanks.

This actually led me to a page that seems even more useful:
http://www-1.ibm.com/support/docvie...uid=swg21293566

This is the page for "DB2 Version 9.5 for Linux, UNIX and Windows APARs by
fix pack".
Nice!

Frank

Frank Swarbrick

Guest

n/a Posts

August 27th, 2008
12:15 AM
#15

Re: SSL support for natvie DB2 LUW (non-SQLJ/JDBC)

>>On 8/26/2008 at 3:06 AM, in message
<5d83950d-b7b4-4a91-ae10-acbe3c658d4a@59g2000hsb.googlegroups.com>,
louisem<louisem@ca.ibm.comwrote:

Quote:

Originally Posted by

Hello,
>
Version 9.5 Fix Pack 2 is available. You can download it using the
links listed in earlier postings. The V9.5 Information Center has
been updated as well:
>
http://publib.boulder.ibm.com/infoc...c/com.ibm.db2.l
uw.wn.doc/doc/c0053323.html
>
Links for the SSL support are available from there.

Great!

Now I have a question... I have DB2 9.5 Express-C installed on my
workstation. We also have DB2 9.5 ESE (I think) installed on some Linux
servers. Assuming we get FP2 loaded on the Linux servers, what can I do to
get this functionality on my PC from a client perspective? I'm not
concerned about the server part of FP2 on my workstation. I know that
Express-C doesn't offer (free) fix packs. But I do want to be able to
connect using SSL from my workstation to the Linux servers.

Thanks,
Frank