Python DB2 SSL 连接

Question

I have been running SQL queries (client side) from DB2 databases using ibm_db & ibm_db_dbi with pandas. However our company implemented new security standards and I would need a way to secure the connection as well. Running Python3.7 and DB2 10.5

Below is my current connection string:

import ibm_db
import ibm_db_dbi
import pandas as pd

dsn_driver = "IBM DB2 ODBC DRIVER"
dsn_database = "EUH0000"           
dsn_hostname = "MEUHC.s990.emea.ibm.com" 
dsn_port = "0000"                
dsn_protocol = "TCPIP"      
dsn_uid = "uid"        
dsn_pwd = "pwd"


dsn = (
"DRIVER={{IBM DB2 ODBC DRIVER}};"
"DATABASE={0};"
"HOSTNAME={1};"
"PORT={2};"
"PROTOCOL=TCPIP;"
"UID={3};"
"PWD={4};").format(dsn_database, dsn_hostname, dsn_port, dsn_uid, dsn_pwd)

conn = ibm_db.connect(dsn, "", "")
some_query = "SELECT *....."         # just an example

pconn = ibm_db_dbi.Connection(conn)
df = pd.read_sql(some_query, pconn)

Is there any way to incorporate SSL for this code? Or should I use a different library altogether?

Answer 1

This is, unfortunately, a little complicated, and (hopefully) your DBA can help with some of this.

If you're using a Db2 10.5 Fixpack 5 (or newer) client, then you just need to add a couple of parameters in your DSN string:

Security=ssl; 
SslServerCertificate=/path/to/file.arm;

Your DBA should be able to provide you with the SslServerCertificate file (or contents).

If you installed a Db2 client separately from the python ibm_db package, then depending on which Db2 client you have installed (ie providing the native libraries for ibm_db , you might need to install some additional libraries (the IBM GSKit libraries, which provide the SSL functionality for the Db2 client).

Answer 2

Try to set the following properties:

Security =SSL, SSLClientKeystoredb, SSLClientKeystoreDBPassword or SSLClientKeystash as described at the link.

Answer 3

With some newer versions of the Db2 driver and to connect to Db2 on Cloud and Db2 Warehouse on Cloud, addint just Security=SSL; to the list of parameters works.