1.1.1

Starting a Server That Authenticates Clients
When the server's SSL mode is set to peerAuthentication, the server authenticates its clients' identity in
addition to encrypting network traffic. In this situation, the server's trust store must contain a certificate for each
client which will connect.
The javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword need to be set in
addition to the properties above.
Example
sqlf server start
-J-Djavax.net.ssl.keyStore=serverKeyStore.key \
-J-Djavax.net.ssl.keyStorePassword=qwerty \
-J-Djavax.net.ssl.trustStore=serverTrustStore.key \
-J-Djavax.net.ssl.trustStorePassword=qwerty \
-sqlfire.drda.sslMode=peerAuthentication
Run a Client with SSL/TLS
You enable basic SSL encryption on the client by the URL attribute ssl, the property ssl, or the datasource
attribute ssl set to basic.
Example
Connection c =
getConnection("jdbc:sqlfire://myhost:1527/db;ssl=basic");
Running a Client that Authenticates the Server
For a client to authenticate the server, the client's trust store must contain the server's certificate.
You enable client SSL with server authentication by setting the URL attribute ssl or the property ssl to
peerAuthentication. In addition, the system properties javax.net.ssl.trustStore and
javax.net.ssl.trustStorePassword need to be set.
Example
System.setProperty("javax.net.ssl.trustStore","clientTrustStore.key");
System.setProperty("javax.net.ssl.trustStorePassword","qwerty");
Connection c =
getConnection("jdbc:sqlfire://myhost:1527/db;ssl=peerAuthentication");
Running the Client When the Server Does Client Authentication
If the server authenticates clients, the client needs a key pair and a client certificate which is installed in the
server's trust store. See Generate Key Pairs and Certificates on page 255.
The client needs to set javax.net.ssl.keyStore and javax.net.ssl.keyStorePassword.
257
Configuring Authentication and Authorization