Question: How do I specify the HTTPS transport-layer security for Foxhound?
Answer: You can modify the Foxhound startup command line to specify RSA encryption and the HTTPS protocol as follows:
-
Obtain an identity certificate and the associated private key for your Foxhound installation.
Store the identity certificate file in a known location.
Change the -xs option to specify https on the dbsrv16.exe command line used to start Foxhound.
Specify the identity certificate file and private key in the -xs https identity= and identity_password= parameters.
Note that the default port for HTTPS is 443.
Here is an example of a dbsrv16.exe command line modified to allow only HTTPS
access to Foxhound data using the sample certificate that comes with SQL Anywhere 16:
"%SQLANY16%\%BIN%\dbspawn.exe"^
-f "%SQLANY16%\%BIN%\dbsrv16.exe"^
-c 25p^
-ch 50p^
-cr-^
-gk all^
-gn 220^
-gna 0^
-n foxhound4^
-o foxhound4_debug.txt^
-oe foxhound4_debug_startup.txt^
-on 1M^
-sb 0^
-ufd restart^
-x tcpip^
-xd^
-xs https(identity="%SQLANYSAMP16%\Certificates\rsaserver.id";identity_password=test;port=443;maxsize=0;to=600;kto=600)^
foxhound4.db^
-n f
If you want to allow both HTTP and HTTPS access, specify both as follows:
-xs http(port=80;maxsize=0;to=600;kto=600),https(identity="%SQLANYSAMP16%\Certificates\rsaserver.id";identity_password=test;port=443;maxsize=0;to=600;kto=600)^
Here's the list of Foxhound command files which contain the dbsrv16.exe -xs option:
$backup_foxhound4.bat
$start_foxhound4_chrome.bat
$start_foxhound4_chrome_debug.bat
$start_foxhound4_default_browser.bat
$start_foxhound4_default_browser_debug.bat
$start_foxhound4_engine.bat
$start_foxhound4_firefox.bat
$start_foxhound4_firefox_debug.bat
$start_foxhound4_ie.bat
$start_foxhound4_ie_debug.bat
By default, those command files are installed here on Windows 7:
C:\ProgramData\RisingRoad\Foxhound4
|
See also...
How do I tell Foxhound to use an HTTP port other than 80?
|