Configuring TIBCO ActiveMatrix BusinessWorks™ 5 to connect to Sybase database (SAP ASE) over TLS

This article explains how to configure JDBC Connection shared resource in TIBCO ActiveMatrix BusinessWorks™ 5 to connect to Sybase database (SAP ASE) over TLS

Prerequisite

The JDBC driver JAR file (jconn4.jar or TISybase.jar) must be available in bwengine classpath.

jConnect driver - jconn4.jar

JDBC Driver

Do not select a driver from the Select driver dropdown. In the JDBC Driver field, type in com.sybase.jdbc4.jdbc.SybDriver

Database URL

To enable TLS with server certificate validation, specify the URL as follows -

jdbc:sybase:Tds:host:port/database?ENABLE_SSL=true

For example,

jdbc:sybase:Tds:dbserver:5000/bwdb?ENABLE_SSL=true

Specify the trust store using the system property javax.net.ssl.trustStore in designer.tra/bwengine.tra.

java.property.javax.net.ssl.trustStore=path_to_truststore_file
java.property.javax.net.ssl.trustStorePassword=truststore_password

TIBCO Database Driver Supplement Software (TDDS)  - TISybase.jar

JDBC Driver

Select tibcosoftwareinc.jdbc.sybase.SybaseDriver from the Select driver dropdown.

Database URL

To enable TLS with server certificate validation, specify the URL as follows -

jdbc:tibcosoftwareinc:sybase://host:port;databaseName=database;EncryptionMethod=SSL;ValidateServerCertificate=true;TrustStore=path_to_truststore_file;TrustStorePassword=truststore_password

For example,

jdbc:tibcosoftwareinc:sybase://dbserver:5000;databaseName=bwdb;EncryptionMethod=SSL;ValidateServerCertificate=true;TrustStore=D:/PKI/trust.jks;TrustStorePassword=password

EncryptionMethod - Set this property to SSL to enable TLS
ValidateServerCertificate -  Set this property to true to validate the server certificate
TrustStore - Full path to the trust store containing the DB server certificate
TrustStorePassword - Trust store password

It is possible to specify the trust store using the system properties javax.net.ssl.trustStore and javax.net.ssl.trustStorePassword in designer.tra/bwengine.tra instead of the connection properties TrustStore and TrustStorePassword.

References

https://infocenter.sybase.com/help/topic/com.sybase.infocenter.dc39001.1600/doc/html/adh1393524323180.html

https://docs.progress.com/bundle/datadirect-connect-jdbc-51/page/Data-Encryption.html