Auto Configure SSL

For sites with a large number of databases and many Andi users, it is time consuming to have all users update each connections properties to enable SSL for there database connections. Auto Configure uses a pre-configured file to automatically enable SSL on one or more connections.

• Follow instructions in article: <database> Connection Using TLS

  • NOTE: If there is no article for a database, Auto SSL is not supported for that database, you will have to add properties to the connection by clicking the Edit button.

• Adding the following to the Andi.vmoptions file where pathToAutoSSLFile can be a fully qualified path. NOTE: If a path is provided, you must use forward slashes "/", if no path is provided, an attempt will be made to load the file from the install directory where the Andi.vmoptions file is located.

  • -DSSLAutoConfig=<pathToAutoSSLFile>

NOTE: This features only applies to JDBC Type 4 URLs configured in the Andi Connection panel.

The Auto SSL is a multiline file, each line matching a specific JDBC Type 4 URL. The fields in the file  are comma delimited as shown. Note that comparison is case insensitive. 

<databaseType>,<hostName>,<tcpipPort>,<sslPort>,<databaseName>

• databaseType: One of the supported database types (DB2)

• hostName: The host name where the database server is running

• tcpipPort: The non-ssl TCPIP port on which to connect

• sslPort - The ssl port on which to connect

• databaseName: The database name

The following line will match the following JDBC Type 4 URL: jdbc:db2://myServer.com:50000/andi and use port 29000 for the SSL connection. 

If the configuration is correct AND one or more URLs matches the values in the Auto SSL file configured, you will see an additional Auto SSL column on the connection panel. 

Open

An additional Disable Auto SSL checkbox will be displayed by the existing buttons on the connection panel.

Open

If SSLAutoConfig is found in the Andi.vmoptions when Andi starts, the file will be scanned and any URLs that match the configured criteria will automatically have the "Auto SSL Enabled" column on the Connections panel checked. Note that this column is only visible when the SSLAutoConfig is configured. When you click connect, the additional URL option appropriate for your database will be added automatically to enable an SSL database connection.

If an error occurs during connection, it is possible that the database is not configured to provide SSL connection support, but is in the Auto SSL configuration file. To disable SSL and allow you to connect to that database, select the "Disable Auto SSL" checkbox and try to connect again. This time the connection will be performed without SSL, even though the connection is configured in the Auto SSL configuration. To continue connecting using SSL with other connections, deselect the "Disable Auto SSL" checkbox to re-enable Auto SSL support (checkbox selected) and click connect.