Question: How do I specify the HTTPS transport-layer security for Foxhound?
Answer: You can modify the Foxhound startup command line to specify RSA encryption and the HTTPS protocol as follows:
-
Obtain an identity certificate and the associated private key for your Foxhound installation.
Store the identity certificate file in a known location.
Change the -xs option to specify https on the dbsrv12.exe command line used to start Foxhound.
Specify the identity certificate file and private key in the -xs https identity= and identity_password= parameters.
Note that the default port for HTTPS is 443.
Here is an example of a dbsrv12.exe command line modified to allow only HTTPS
access to Foxhound data using the sample certificate that comes with SQL Anywhere 12:
"%SQLANY12%\Bin64\dbspawn.exe"^
-f^
"%SQLANY12%\Bin64\dbsrv12.exe"^
-c 25p^
-ch 50p^
-cr-^
-gk all^
-gn 120^
-gna 0^
-n foxhound1^
-o foxhound1_debug.txt^
-oe foxhound1_debug_startup.txt^
-on 1M^
-qn^
-sb 0^
-x tcpip^
-xd^
-xs https(identity="%SQLANY12%\Bin64\rsaserver.id";identity_password=test;port=443;maxsize=0;to=600;kto=600)^
foxhound1.db^
-n f
If you want to allow both HTTP and HTTPS access, specify both as follows:
-xs http(port=80;maxsize=0;to=600;kto=600),https(identity="%SQLANY12%\Bin64\rsaserver.id";identity_password=test;port=443;maxsize=0;to=600;kto=600)^
Here's the list of Foxhound command files which contain the dbsrv12.exe -xs option:
$backup_foxhound1.bat
$start_foxhound1_chrome.bat
$start_foxhound1_chrome_debug.bat
$start_foxhound1_engine.bat
$start_foxhound1_firefox.bat
$start_foxhound1_firefox_debug.bat
$start_foxhound1_ie.bat
$start_foxhound1_ie_debug.bat
By default, Foxhound is installed in this location on Windows XP:
C:\Documents and Settings\All Users\Application Data\RisingRoad\Foxhound1
and on Vista and Windows 7 it is here:
C:\ProgramData\RisingRoad\Foxhound1
See also...
How do I tell Foxhound to use an HTTP port other than 80?
|