Sybase Central issue with SSL

[william-paul_philibert]

Bonjour,

   since I installed Java 1.8 on my system I endup with the following error message when trying to connect on a Sybase instance using SSL connexion :

JZ006: Caught IOException: javax.net.ssl.SSLException: java.lang.RuntimeException: Unexpected error: java.security.InvalidAlgorithmParameterException: the trustAnchors parameter must be non-empty

Code d'erreur=0
Etat SQL=JZ006 null
Code d'erreur=0
Etat SQL=null

Paramètres de connexion :
Utilisateur=sa
Mot de passe=*******
ENG=myaseinstance

I have been looking over the net and found information about Trust Store but nothing to help me fixing this unfortunate situation.

Anyone had the same issue?

Thanks

William

[william-paul_philibert · Accepted solution]

It seems not related to my java installation.  Once removed I still have the same issue.

I can not connect using Sybase Central but I can connect through isql with no problem.

[ryan_hansen · Accepted solution]

Hi William,

Looking at my guide your error is because ssl isnt' setup for java.

Sybase Central uses a keystore to hold ssl certificates.

isql usees the trusted.txt file.

I've attached a guide to get past this.

Had to rename the zip file to txt.

Make sure when you download the attachment you rename it back to .zip

Let me know if it helps.

Regards,

Ryan

SybaseCentralSSL.txt.zip

[ryan_hansen · Accepted solution]

Tested this out.

Download SybaseCentralSSL.txt.zip.
Extract.

Then rename SybaseCentralSSL.txt to SybaseCentralSSL.zip
Then extract again.

You should be able to view the 7.5 kb file.

Regards,

Ryan

[william-paul_philibert · Accepted solution]

Yep Ryan, just what I did, reviewing the doc right now.  I will keep you posted.  Makes me realize that my ssl connexions never worked befor even though I was convinced it was.  If I did not have structural errors in my sql.ini would have found out earlier ...

[william-paul_philibert · Accepted solution]

Quick question, where do you get this ssl.crt from ASE_SSL ???

[ryan_hansen · Accepted solution]

I think ASE_SSL might have been my ASE name.
Not too sure.

Appologize, didn't review this before sending it out.

So I just meant move those files to your client box.

Just need to grab the ssl certificate from the ASE and put it in %SYBASE_JRE6% folder.

Once there you can run the keytool commands.

Close and Kill Sybase Central.

Then you should be good to go.

Regards,

Ryan

[william-paul_philibert · Accepted solution]

You are a KING Ryan!

My connection works like a charm now!

I think I owe you a beer man ;o)

Thanks for your time and expertise Ryan, verry appreciated!

EDIT

If I can make a suggestion, if you have more than one ASE instance that is using SSL :

%SYBASE_JRE6%\bin\keytool -import -alias ase_inst_1 -file ase_inst_1.crt -keystore trustedstore

%SYBASE_JRE6%\bin\keytool -import -alias ase_inst_2 -file ase_inst_2.crt -keystore trustedstore

%SYBASE_JRE6%\bin\keytool -import -alias ase_inst_1 -file ase_inst_1.crt

%SYBASE_JRE6%\bin\keytool -import -alias ase_inst_2 -file ase_inst_2.crt

P.S. I am not quite sure why you have to import each instance cert file twice, one with the -keystore option and the second without.  If you do not, it doest work, but why!?  Don't know!