SQLDriverConnect函数使用SSL连接到编目Db2数据库的正确连接字符串是什么？

Question

SQLDriverConnect函数使用SSL连接到编目Db2数据库的正确连接字符串是什么？编程语言-C++。

我如何准备数据库

db2 "CREATE DATABASE TESTDB"
....
db2 "CATALOG TCPIP NODE SSLNODE REMOTE <HOST> SERVER <PORT> SECURITY SSL
db2 "CATALOG DATABASE TESTDB AS SSLDS AT NODE SSLNODE"
db2 "TERMINATE"
db2stop
db2start

如果使用数据库名“testdb”可以连接，但使用数据库别名“sslds”时，连接失败：

第一次尝试通过别名“SSLDS”连接编目数据库时显示错误

[IBM][CLI Driver] SQL1224N  The database manager is not able to accept new requests, has terminated all requests in progress, or has terminated the specified request because of an error or a forced interrupt.  SQLSTATE=55032

[IBM][CLI Driver] SQL30040N  Execution failed because of unavailable resources that will not affect the successful execution of subsequent commands and SQL statements:  Reason "0x0", Type of Resource "MEMORY", Resource Name "", Product ID "SQL11013 ".  SQLSTATE=57012

Database=SSLDS;UID=<USER>;PWD=<PWD>;Protocol=TCPIP;Servicename=<PORT>;Security=SSL;SSLClientKeystoredb=c:\ssl\storage.kdb;SSLClientKeystash=c:\ssl\storage.sth;

SSL server keydb file                   (SSL_SVR_KEYDB) = C:\ssl\server.kdb
SSL server stash file                   (SSL_SVR_STASH) = C:\ssl\server.sth
SSL server certificate label            (SSL_SVR_LABEL) = selfsignedcert
SSL service name                         (SSL_SVCENAME) = db2c_DB2
SSL cipher specs                      (SSL_CIPHERSPECS) =
SSL versions                             (SSL_VERSIONS) =
SSL client keydb file                  (SSL_CLNT_KEYDB) =
SSL client stash file                  (SSL_CLNT_STASH) =

DB2INSTOWNER=*****
DB2PORTRANGE=***:***
DB2_GRP_LOOKUP=LOCAL,TOKENLOCAL
DB2INSTPROF=C:\PROGRAMDATA\IBM\DB2\DB2COPY1
DB2COMM=SSL

创建GSK存储

gsk8capicmd_64.exe -keydb -create -db "C:\ssl\server.kdb" -stash -genpw
gsk8capicmd_64.exe -keydb -create -db "C:\ssl\storage.kdb" -stash -genpw
gsk8capicmd_64.exe -cert -create -db "C:\ssl\server.kdb" -stashed -label "selfsignedcert" -dn "CN=TestCompany"
gsk8capicmd_64.exe -cert -extract -db "C:\ssl\server.kdb" -stashed -label "selfsignedcert" -target "C:\ssl\server_cert.arm" -format ascii
gsk8capicmd_64.exe -cert -add -db "C:\ssl\storage.kdb" -stashed -label "selfsignedcert" -file "C:\ssl\server_cert.arm" -format ascii

Answer 1

如果在连接字符串中指定database=...，则必须使用真实的数据库名称，而不是别名。

如果要使用别名，则使用dsn=...（并省略database=...)。

此外，连接字符串应包含hostname=...以获得最佳结果。

此外，要外部化C++源代码中的所有连接属性，您可以简单地使用DSN=...；uid=...；pwd=...；并在db2dsdriver.cfgxml文件中定义DSN属性（包括SSL属性）。你的选择。

您的其他错误（如SQL1224N和SQL30040N)是特定于配置的，您的问题忽略了客户端和服务器配置的事实。但首先修复连接字符串,这些错误可能会消失。