在DB2 Server已经配置了SSL的情况下,怎么在DB2 Client端连接DB2 Server端的数据库那?
以在Windows的情况下面举例:
1. 安装DB2 Client
2. 安装gsk8
Download IBM DB2 Support Files for SSL Functionality V10.5.0 for Windows on AMD64 and Intel EM64T systems (x64) English (CN8VJEN )
做Windows环境变量的配置:
set PATH="C:\Program Files\IBM\gsk8\bin";%PATH%
set PATH="C:\Program Files\IBM\gsk8\lib64";%PATH%
set LIBPATH="C:\Program Files\IBM\gsk8\lib64";%LIBPATH%
如果需要客户端非JDBC的认证,把文件mydbserver.arm从DB2服务器端拷贝到DB2客户端,然后在DB2客户端运行以下命令
/opt/ibm/db2/V11.1/gskit/bin/gsk8capicmd_64 -keydb -create -db "mydbclient.kdb" -pw "passw0rd" -stash
/opt/ibm/db2/V11.1/gskit/bin/gsk8capicmd_64 -cert -add -db "mydbclient.kdb" -pw "passw0rd" -label "myselfsigned" -file "mydbserver.arm" -format ascii -fips
Catalog在DB2客户端
db2 catalog TCPIP NODE mynode REMOTE 192.168.110.10 SERVER 50001 SECURITY SSL
db2 catalog DATABASE test AS test AT NODE mynode AUTHENTICATION SERVER
db2 terminate
Update DBM cfg在DB2客户端
db2 update dbm cfg using SSL_CLNT_KEYDB C:\temp\ssl_client\mydbclient.kdb
db2 update dbm cfg using SSL_CLNT_STASH C:\temp\ssl_client\mydbclient.sth
db2 terminate
测试数据库连接在DB2客户端
C:\temp\ssl_client>db2 connect to test user db2inst1 using passw0rd
Database Connection Information
Database server = DB2/LINUXX8664 10.5.8
SQL authorization ID = DB2INST1
Local database alias = TEST
C:\temp\ssl_client>
详细情况见:
https://www.ibm.com/support/knowledgecenter/en/SSEPGG_9.8.0/com.ibm.db2.luw.admin.sec.doc/doc/t0053518.html