SSLClientKeystash IBM data server driver configuration keyword

Specifies the Secure Sockets Layer (SSL) stash file that is used for an SSL connection with or without the CERTIFICATE authentication.

Equivalent CLI keyword
SSLClientKeystash
Equivalent IBM® data server provider for .NET connection string keyword
SSLClientKeystash
IBM data server driver configuration file (db2dsdriver.cfg) syntax
<parameter name="SSLClientKeystash" value="fully_qualified_path_of_the_stash_file"/>
Default setting:
None.
Usage notes:

The SSLClientKeystash keyword can be specified with the SSLClientKeystoredb keyword, if the security CLI keyword or the SecurityTransportMode IBM data server driver configuration keyword is set to SSL. The SSLClientKeystash, SSLClientKeystoredb, and SecurityTransportMode keywords can be set in the main <parameters> section to have global effect or in individual <dsn> or <database> section for specific database connection. However, all three keywords (SSLClientKeystash, SSLClientKeystoredb, and SecurityTransportMode) must be set in a same section.

The SSLClientKeystash keyword specifies the fully qualified path of the stash file (.sth), which stores an encrypted password to the key database file. The stash file is used to access the key database file during the SSL handshake.

The SSLClientKeystash and SSLClientKeyStoreDBPassword keywords are mutually exclusive.