skip to main content
Part 2: The 32-Bit/64-Bit Drivers : The DB2 Wire Protocol Driver : Connection Option Descriptions for DB2 : Crypto Protocol Version
 
Crypto Protocol Version
Attribute
CryptoProtocolVersion (CPV)
Purpose
Specifies a comma-separated list of the cryptographic protocols to use when SSL is enabled using the Encryption Method connection option (EncryptionMethod=1). When multiple protocols are specified, the driver uses the highest version supported by the server. If none of the specified protocols are supported by the database server, the connection fails and the driver returns an error.
Valid Values
cryptographic_protocol [[, cryptographic_protocol ]...]
where:
cryptographic_protocol
is one of the following cryptographic protocols:
TLSv1 | SSLv3 | SSLv2
Note: Specifying TLS v1 enables the TLSv1.2, TLSv1.1, and TLSv1.0 protocols.
Caution: Good security practices recommend using TLSv1 or higher, due to known vulnerabilities in the SSLv2 and SSLv3 protocols.
Example
Your security environments specifies that you can use TLSv1 and SSLv3. Use the following values:
CryptoProtocolVersion=TLSv1,SSLv3
Notes
*This option is ignored if Encryption Method is set to 0 (No Encryption) or 2 (Database Encryption).
*Consult your database administrator concerning the data encryption settings of your server.
Default
TLSv1, SSLv3
GUI Tab
Security tab