Reference Manual

Back Next

SSL Statement

The SSL statement specifies SSL certificate information for a Secure Sockets Layer (SSL) connection.

Linux, UNIX, and Windows

SSL_ALLOW_SELFSIGNED, SSL_CIPHER_LIST, SSL_CONTEXT_METHOD, SSL_REQ_CLNT_CERT, and SSL_REQ_SRVR_CERT

SSL=({PASS=client|EPASS=client_encrypted}
    ,KEY=key
   ,{CALIST=calist|CAPATH=directory}
)

PASS=client: Required if you do not specify the EPASS option. The passphrase used to make an SSL connection.
EPASS=client_encrypted: Required if you do not specify the PASS option. The encrypted passphrase used to make a TLS connection.

You can create an encrypted passphrase in the PowerExchange Navigator by selecting
File
Encrypt Password
.
KEY=key: Required. The SSL key used to make an SSL connection. When this parameter is specified, the client keystore is validated during the initial connection handshake.
CALIST=calist: Required if you do not specify the CAPATH option. The Certificate Authority list (CALIST) to make an SSL connection. This is a file that contains the list of trusted certificates (truststore).
CAPATH=directory: Required if you do not specify the CALIST option. Specify the location of the truststore for trusted certificates:
On Linux or UNIX, enter the trusted CA directory of the OpenSSL installation.
On Windows, enter the certs directory of the OpenSSL installation.