将 jConnect JDBC 驱动程序与 SSL 一起使用

使用 jConnect JDBC 驱动程序安全地连接到服务器。

前提条件

确保 SAP IQ JRE bin 目录位于 PATH 中。

过程

1. 将受信任的根证书添加到 JRE 证书密钥存储。确保知道密钥库密码。缺省设置为 "changeit"。为简单起见，为密钥库路径定义环境变量。set mykeystore=C:\sapiq\Shared\SAPJRE-8_1_070_64BIT\lib\security\cacerts

1. （可选）您可以在以下示例中更改密钥库密码建模，但也可以跳过此步骤。keytool.exe -storepasswd -keystore %mykeystore%Enter keystore password: changeitNew keystore password: Re-enter new keystore password: 

1. 将受信任证书添加到密钥库。假设您未更改密码，则在示例中仍为 "changeit"。除密码外，还会提示您确认密钥库更新。keytool.exe -import -trustcacerts -file rsaroot.crt -alias rsaroot -keystore %mykeystore%Enter keystore password: changeitOwner: CN=SelfSigner Certification Authority, OU=SelfSigner Signing Department, O="SelfSigner, Inc.", L=Waterloo, ST=ON, C=CAIssuer: CN=SelfSigner Certification Authority, OU=SelfSigner Signing Department, O="SelfSigner, Inc.", L=Waterloo, ST=ON, C=CASerial number: 101Valid from: Thu Apr 29 18:09:00 EDT 2021 until: Wed Apr 30 18:09:00 EDT 2031Certificate fingerprints: SHA1: BB:AC:DA:8E:F3:CD:06:09:1D:71:30:08:4C:1A:19:7C:F3:5A:D5:CC SHA256: 65:11:06:F3:F3:96:8B:06:B2:82:17:13:AF:5F:E0:39:79:5E:F2:89:B8:92:F0:FE:D5:2F:5E:CD:6A:17:6C:77Signature algorithm name: SHA256withRSASubject Public Key Algorithm: 2048-bit RSA keyVersion: 3Extensions:#1: ObjectId: 2.5.29.19 Criticality=falseBasicConstraints:[ CA:true PathLen:10]#2: ObjectId: 2.5.29.15 Criticality=falseKeyUsage [ Key_CertSign Crl_Sign]#3: ObjectId: 2.5.29.17 Criticality=falseSubjectAlternativeName [ DNSName: SelfSigner Certification Authority]Trust this certificate? [no]: yesCertificate was added to keystore

1. jConnect JDBC 应用程序必须设置连接属性 ENABLE_SSL=TRUE。以下是简短的 Java 示例片段：Properties props = new Properties();props.put( "USER", "DBA" );props.put( "PASSWORD", "sql" );props.put( "ENABLE_SSL", "true" );con = DriverManager.getConnection( url, props );

1. 运行 JDBC 应用程序。以下是示例：set CLASSPATH=.;C:\sapiq\jConnect-20_0\classes\jconn42.jarjava JDBCFetch -j -c "jdbc:sybase:Tds:YKFN1234:2638" -v "select @@version"SAP IQ/16.1.050.1691/15465/P/SP05/MS/Windows 2012 R2/64bit/2021-04-28 18:50:27