List of Contributions

Martin Fuerderer

Contact Details

My Content

1 to 16 of 16 total
Posted By Martin Fuerderer Mar 23, 2021 4:27 AM
Found In Egroup: Informix
\ view thread
Hi, maybe "onstat -g ses <session id>" can give you a bit more information. Most likely, this is an application or user error, basically what the error description says: -349 Database not selected yet. This statement cannot be executed because no current database exists. Either no current database ...
Posted By Martin Fuerderer Feb 1, 2021 10:14 AM
Found In Egroup: Informix
\ view thread
Hi, I noted, that your keystore files and password stash files have different file access rights: - The *.kdb file and corresponding *.sth password stash files are readable for everybody. This normally is sensible for the client keystore, as the client keystore normally only contains the certificates ...
Posted By Martin Fuerderer Oct 22, 2020 7:28 AM
Found In Egroup: Informix
\ view thread
During the Q&A of the webinar session, there was a small confusion about whether the IBM Informix Server can use OpenSSL instead of GSKit. Clarification: IBM Informix Server always uses GSKit only. Even versions 14.10.xC4W1 and newer versions continue to always use GSKit. For the foreseeable future, ...
Posted By Martin Fuerderer Oct 9, 2020 5:32 AM
Found In Egroup: Informix
\ view thread
Hi Juan Luis, I think, you first need to figure out, how the backups were done: When the backups were done, was LTAPEDEV set to /dev/null? If that was the case, then logical log files were not (never) backed up, as Art Kagel already explained. In this case ( LTAPEDEV set to /dev/null or otherwise missing ...
Posted By Martin Fuerderer Aug 19, 2020 9:09 AM
Found In Egroup: Informix
\ view thread
Hi Sebastien, I confirm your finding: the problem was caused by omitting the "-caname ..." option in the "openssl pkcs12 -export ..." command when creating the client side keystore. I did some additional digging and ... I admit, that before I was not aware of some peculiar behaviour of the "openssl pkcs12 ...
Posted By Martin Fuerderer Aug 18, 2020 12:25 PM
Found In Egroup: Informix
\ view thread
Hi Sebastien, I did some profound testing myself, just to be sure. That's why it took me quite a while to answer ... Please copy the file "net.iem" from the server installation to the corrsponding directory in the client installation - just as Javier already recommended. (This is a defect in the installer, ...
Posted By Martin Fuerderer Aug 17, 2020 2:02 PM
Found In Egroup: Informix
\ view thread
Hi Sebastien, hmm. Interesting. Using GSKit 8.0.55.12, I ran your commands (with my additional change), i.e. as follows: gsk8capicmd_64 -keydb -create -db idstoro2.kdb -pw fourjs -type pkcs12 -stash gsk8capicmd_64 -cert -create -db idstoro2.kdb -stashed -label ifx_encrypt \ -size 2048 -default_cert ...
Posted By Martin Fuerderer Aug 17, 2020 11:58 AM
Found In Egroup: Informix
\ view thread
Hi Sebastien, when creating your server certificate, can you please try with using the following parameters: "-ca true -sigalg SHA256WithRSA"? I.e., please replace your command gsk8capicmd_64 -cert -create -db idstoro2.kdb -stashed -label ifx_encrypt \ -size 2048 -default_cert yes -expire 32000 -dn ...
Posted By Martin Fuerderer Aug 17, 2020 10:31 AM
Found In Egroup: Informix
\ view thread
Thanks, Javier! Yes, seen it and just responded. TIA, Martin --
Posted By Martin Fuerderer Aug 17, 2020 10:14 AM
Found In Egroup: Informix
\ view thread
Hi Sebastien, yes, the command you cited: openssl -pkcs12 -export -out client.p12 -passout pass: CLIENTPASSWD \ -in SSL_KEYSTORE_LABEL -file SSL_KEYSTORE_LABEL .cert.pem [ -caname LABEL ] is incorrect in the documentation. The correct command is: openssl pkcs12 -export -out client.p12 -passout ...
Posted By Martin Fuerderer Aug 3, 2020 1:37 PM
Found In Egroup: Informix
\ view thread
With 4.50.xC4W1 and onwards, GSKit is no longer included with the IBM Informix Client SDK product package. IBM Informix Client SDK now should use OpenSSL instead of GSKit. Since OpenSSL (contrary to GSKit) is publicly available, the user (you) are expected to have it installed already. The biggest advantage ...
Posted By Martin Fuerderer Jun 18, 2020 5:33 AM
Found In Egroup: Informix
\ view thread
Hi, yes, setting IFMX_AIXKAIO_NUM_REQ to a higher value may resolve the problem ( see also https://www.ibm.com/support/pages/node/80163 ). (Obviously, doing so will require a shutdown and restart of the Informix server.) However, I think checking the AIX kernel parameter "maxreqs" should be done as ...
Posted By Martin Fuerderer Jun 11, 2020 3:22 PM
Found In Egroup: Informix
\ view thread
Hi Amit, I think you really should open a case with Informix Tech Support for this problem. I'm not sure, what exactly you mean by "a .crt file". If I understand you correctly, you are saying that you already have created and stored keys in your KMIP service using the same KMIP CA certificate file. Are ...
Posted By Martin Fuerderer Jun 11, 2020 6:51 AM
Found In Egroup: Informix
\ view thread
Hi Amit, 1. it is always helpful to let people know, which version of Informix you are using. (For the moment, I assume it is some 14.10.xC? with '?' in [ 1,2,3]. But knowing the '?' precisely could be helpful/decisive.) 2. based on my above assumption, it looks to me that there is a problem ...
Posted By Martin Fuerderer Mar 27, 2020 8:32 AM
Found In Egroup: Informix
\ view thread
In case previous answers didn't satisfy your needs/taste ...: I think you can use the "read" command to read a line of input (e.g. from an unload file) into several shell variables, word-by-word. Here, words are separated by spaces. I.e. if you have spaces in your column values, you could escape them ...
Posted By Martin Fuerderer Mar 16, 2020 4:24 PM
Found In Egroup: Informix
\ view thread
Hi Chanaka, whether and how much a query can benefit from IWA depends very much on the query itself. Typically, the queries that benefit most are OLAP-type queries. These usually are quite complicated, require the database server to examine millions of rows, possibly do some sort of aggregation, but ...