User guide

-file client.cer –keystore rdbjdbccli.kst
$!
$!----------------------------------------------------------------------
$!
$! Exchange the certificates by copying the client certificate file
(client.cer) to
$! The server node, and the server certificate file (server.cer) to the
client node
$!
$!----------------------------------------------------------------------
$!
$! Now on the server node
$write sys$output "Importing Client’s certificate into Server’s keystore
$ keytool –import –v –trustcacerts –alias rdbjdbc –file client.cer
-keystore rdbjdbcsrv.kst –keypass "CHANGETHIS" –storepass "CHANGETHIS"
yes
$!
$!----------------------------------------------------------------------
$!
$! Now on the client node
$write sys$output "Importing Server’s certificate into Client’s keystore
$ keytool –import –v –trustcacerts –alias rdbjdbc –file server.cer
-keystore rdbjdbccli.kst –keypass "CHANGETHIS" –storepass "CHANGETHIS"
yes
The keytool command should work as shown above on most operating systems that have
Java installed.
Note the use of double quotes to maintain values such as passwords exactly as you specify
them in the server or client SSL connection configuration properties.
Once the keystores have been set up, as long as you have setup the SSL properties correctly
for the client and the server as shown in previous sections, you can use SSL for
client/server communication within the thin driver.
Contents
62