TLS Connections and DBCHQE|SSLMODE|DBCAREA Connection String - TLS Connections and DBCHQE - Call-Level Interface Version 2

Teradata® Call-Level Interface Version 2 Reference for Workstation-Attached Systems - 20.00

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
Lake
VMware
Product
Call-Level Interface Version 2
Release Number
20.00
Published
January 2024
Language
English (United States)
Last Update
2024-05-14
dita:mapPath
bmn1691484839905.ditamap
dita:ditavalPath
obe1474387269547.ditaval
dita:id
fvz1470444150352
Product Category
Teradata Tools and Utilities

For query items that require a connection to the server, those connections can be encrypted using TLS. The SSLMODE parameter can be set in the following locations:

clispb.dat (For more information, see System Parameter Block (SPB) Processing.)

Add the following line to clispb.dat:

sslmode={disable | allow | prefer | require | verify-ca | verify-full}

Environment variable

Set the following environment variable prior to running the client application:

Non-Windows:

$ export SSLMODE={disable | allow | prefer | require | verify-ca | verify-full}

Windows:

C:\> set SSLMODE={disable | allow | prefer | require | verify-ca | verify-full}

DBCHQEP Connection string

The qepConnStrP parameter in the DBCHQEP structure can be set to a string containing the sslmode attribute:

dbchqep.qepConnStrP = “sslmode={disable | allow | prefer | require | verify-ca | verify-full}”

In order to tell CLI to use this field, the qepLevel must have the extended DBCHQEP structure bit turned on:

dbchqep.qepLevel = dbchqep.qepLevel | DBCHQEPX

DBCHQEPX is defined in dbchqep.h as 0x08.

Set the dbchqep.qepConnStrLen parameter to the length of the string assigned to dbchqep.qepConnStrP.