UNIX®: Generating the interfaces file for SSL

For SSL connections, specify SSL ports in the omni.dat data connections file and then run the nco_igen utility to generate the interfaces file.

About this task

Procedure

  • Edit the omni.dat file by specifying the SSL ports.
    For a server that allows both encrypted and unencrypted connections, clients that use the same interfaces file as the server (local clients) connect using the unencrypted port. If you want to use SSL to connect locally, do not specify an unencrypted port for the server.
  • Generate the interfaces file by running the nco_igen command.

Example

The following example shows an entry from an omni.dat file, for which an unencrypted port is specified, and an SSL port. When you run the nco_igen utility on this entry, it generates two server (master) entries: one with an unencrypted port of 3000 and one with an SSL port of 3500. Two client (query) entries are also created.

[NCOMS]
{
	Primary:	nocturama 3000 ssl 3500
}

The following example shows entries from an omni.dat file for which only SSL ports as specified:

[PSERV]
{
Primary:	hostname.ibm.com	ssl 7100
}
[BSERV]
{
Primary:	hostname.ibm.com	ssl 8100
}
[NCOMS]
{
Primary:	hostname.ibm.com	ssl 7100
Backup:	hostname.ibm.com	ssl 8100