User guide

DescriptionDefault
Value
Matching
Postgr-
eSQL op-
tion ex-
ists?
ODBC Option
When this option is enabled (1), the driver returns data
as Unicode character types:
• CHAR is returned as SQL_WCHAR.
• VARCHAR is returned as SQL_WVARCHAR.
• TEXT is returned as SQL_WLONGVARCHAR.
When this option is disabled (0), the driver returns data
as regular SQL types:
• CHAR is returned as SQL_CHAR.
• VARCHAR is returned as SQL_VARCHAR.
• TEXT is returned as SQL_LONGVARCHAR.
0NoUseUnicode
Configure Security Options for Connections
Amazon Redshift supports Secure Sockets Layer (SSL) connections to encrypt data and server certificates
to validate the server certificate that the client connects to.
Topics
• Connect Using SSL (p. 158)
• Using SSL and Server Certificates in ODBC (p. 159)
• Using SSL and Server Certificates in Java (p. 160)
Connect Using SSL
To support SSL connections, Amazon Redshift creates and installs a self-signed SSL certificate on each
cluster.The public key is stored at https://s3.amazonaws.com/redshift-downloads/redshift-ssl-ca-cert.pem.
When you download this certificate on Windows operating systems or Linux operating systems, the file
ends with the .pem extension. When you download this certificate on Mac OS X operating systems, the
file ends with the .er extension. The expected MD5 checksum number is
1314113b03bf3e6c49ea0b1d2dc03121.You can use the Md5sum program (on Linux operating systems)
or other tool (on Windows and Mac OS X operating systems) to verify that the certificate that you
downloaded matches this expected MD5 checksum number.
Important
SSL support in Amazon Redshift is strictly for encrypting the connection between your client and
your cluster; it should not be relied on for authenticating the server. To authenticate the server,
install the public key (.pem file) for the SSL certificate on your client and use the key to connect
to your clusters.
By default, cluster databases accept a connection whether it uses SSL or not. To configure your cluster
to require an SSL connection, set the require_SSL parameter to true in the parameter group that is
associated with the cluster. For information about modifying a parameter group, see Modifying a Parameter
Group (p. 74).
API Version 2012-12-01
158
Amazon Redshift Management Guide
Configuring Connections in Amazon Redshift