DB2 and SSL/TLS - Client-side

Having blogged extensively about my experiences with DB2 and SSL/TLS, mainly in the context of Java and WebSphere Application Server: -

Securing the Database - IBM DB2 10.5 and Transport Layer Security 1.2

WebSphere Application Server 8.5.5.5, TLS 1.2 and DB2

IBM HTTP Server, Transport Layer Security and Google Chrome

Continuing to learn - IBM BPM and IBM Business Monitor to DB2 via SSL/TLS

this post is more client-side than server-side.

Specifically, one of my colleagues, a DB2 guru called John, needs to set up SSL/TLS from a DB2 client to a DB2 server.

This is required to allow IBM Integration Bus (IIB) to communicate, via ODBC and then via the DB2 client, to a database hosted on a DB2 Advanced Enterprise Server.

John looked for, but couldn't locate, the IBM Global Security Toolkit (GSK) files on the IIB server upon which the DB2 client is installed.

This led him to me, and led me to IBM Passport Advantage, as per these fine links: -

DB2 SSL - How to download the "IBM DB2 Support Files for SSL Functionality" from Passport Advantage

DB2 SSL - part numbers for the GSKit in Passport Advantage

Security Bulletin: Vulnerabilities in GSKit affect IBM® DB2® (CVE-2015-0138, CVE-2015-0159 and CVE-2014-6221)

Thanks to Passport Advantage, this is what I downloaded: -

IBM DB2 Support Files for SSL Functionality V10.5.0.5 for AIX English (CN4ZYEN)

which is a ~50 MB file: -

-rw-r-----@  1 davehay  staff    51M 10 Jun 18:20 DB2SPTF_SSLF_10.5.0.5_AIX.tar.gz

Tomorrow we install ...