Hi,
I am using RedHat Linux, i configured Sybase Server for SSL, but client connection ISQL cannot connect to the server.
I followed the instruction from the below link:
SSL with Adaptive Server Enterprise (ASE) - Wiki Stage - SCN Wiki
Common Name for CA root Certificate is my ServerName(Eg: REDHATSERVER)
Common Name for Server Certificate is my ServerName(Eg: REDHATSERVER)
While starting server it seems started correctly:
ssl_getcertpath: Entered.
ssl_getcertdirpath: Entered.
ssl_gettrusedpath: Entered.
ssl_getcertdirpath: Entered.
sslcontextinit(0x4546f40) begin:
dh_configcontext(0x4546f40) begin:
dh_configcontext(0x4546f40), returning DH error 0
syb_3des_decrypt() entry.
getdes_decrypt() entry
getdes_decrypt() returns 0.
syb_3des_decrypt() error 0, returns 64.
ssl_verifyidentityfile() entry.
ssl_verifyidentityfile() returns 0.
00:00000:00001:2014/09/29 16:16:30.83 kernel Certificate load from file `/home/sybase/sybase/ASE-15_0/certificates/REDHATSERVER.crt`: succeeded.
00:00000:00001:2014/09/29 16:16:30.83 kernel Trusted root certificates loaded from file '//home/sybase/sybase/ASE-15_0/certificates/REDHATSERVER.txt': succeeded.
sslcontextinit(0x4546f40) return SUCCESS!
ssl_setciphersincontext(0x4546f40, 1): entered.
ssl_makecipherarray(0x487dd00, 0x487dd04) entry.
ssl_makecipherarray() returns (0).
ssl_setciphersincontext(0x4546f40, 1): exiting with return value 0
ssl_initmasterctxt(): returns success.
00:00000:00008:2014/09/29 16:16:30.84 kernel network name REDHATSERVER, interface IPv4, address 172.20.136.43, type tcp, port 5000, filter NONE
ssl_ninit(0) entry
00:00000:00008:2014/09/29 16:16:30.84 kernel network name REDHATSERVER, interface IPv4, address 172.20.136.43, type ssltcp, port 6006, filter ssl
ssl_listen(0) returns success 2, snflags 0x6
Below command to concat the certicate:
cat REDHATSERVER.txt >> $SYBASE/config/trusted.txt
Below Command to connect through ISQL:
isql -Usa -SREDHATSERVER:6006
Password:
CT-LIBRARY error:
ct_connect(): network packet layer: internal net library error: Net-Library operation terminated due to disconnect
Detailed Logs on connecting through ISQL:
ssl_nopen(2) entry
ssl_nopen(2) returns 14 soflags 0x0
ssl_nopen(2) entry
ssl_handshake(14) entry
ssl_readcb(0x4550688, 3, 0x4a078dc, 0x5b926c0) entry
ssl_readcb() returns sslerr 0, processed 3
ssl_readcb(0x455081d, 512, 0x4a078ec, 0x5b926c0) entry
ssl_readcb() returns sslerr 0, processed 512
ssl_writecb(0x45518dc, 7, 0x4a0794c, 0x5b926c0) entry
ssl_writecb() returns sslerr 0, processed 7
ssl_handshake(14) return err -2, sslerr -6996
ssl_nclose(0x5b926c0) entry
00:00000:00023:2014/09/29 16:16:47.33 kernel ssl_close(14): SSLClose(0x451e3b0) failed (-6989).
ssl_nclose(0x5b926c0) return 0
I can't guess where i am wrong. I spent a day for this to work. Anyone help me on this.
Thanks,
Ganesan G