How to quickly determine if my SharePlex instance is using SSL security? (4301274)

At times one may want to determine if the SharePlex instance is using SSL security. Ascertaining this may be needed for many different reasons. Prior to configuring the other nodes in this replication, it is good to know if the current node has SSL enabled. If wishing to move to or away from SSL, it is helpful to know the state of SSL enablement in the current node.

The SSL security is an added layer of security introduced in SharePlex version 9.1.3 and up. Prior to enabling the feature, it is imperative that one first ascertain if the feature has already been implemented in the current environment. If it is already implemented, it can have bearing on the ongoing replication if one attempts to implement it again (say, by creating a new SSL password) without doing so for the remaining instances in question.

This article offers two convenient ways to determine the presence of SSL security in the present SharePlex instance:

1. Via sp_ctrl:

Issue the following:

sp_ctrl (alvsupl14:9138)> list param modified system

It will shows the value of SSL for the system parameter SP_SYS_NETWORK_SECURITY as the following output shows:

sp_ctrl (alvsupl14:9138)> list param modified system

System parameters:

Parameter  Name                 Actual Value                           Units   Set At

------------------------------  ------------------------------------  -------  ---------------

SP_SYS_LIC_4473                 ERPHZZYA76KLLV65J02L77AJ4LNP74X8HM:S           Install

SP_SYS_NETWORK_PASSWORD         e04260505c5d1ff4181b4c999099012e9d47           Restart Cop

   Default   Value:

SP_SYS_NETWORK_SECURITY         SSL                                            Restart Cop

   Default   Value:

SP_SYS_SSL_KEY_PASS             46732339800ba597ef8e05d539fbdba99db3           Restart Cop

   Default   Value: 

1. Via OS prompt:

Exit sp_ctrl and issue “sp_security –show” at the OS prompt as the following example shows:

[ORA11GR2@alvsupl14]/home/paul/p91338-11g/prod/bin> ./sp_security --show

Security settings:

Configuration for '/home/paul/p91338-11g/var' and Port 9138:

  Security model            : SSL/TLS

  Network password          : stored for unattended startup

  SSL key file password     : stored for unattended startup

  SSL key file              : key.pem

  SSL cert file             : cert.pem

[ORA11GR2@alvsupl14]/home/paul/p91338-11g/prod/bin>

It will show the value SSL/TLS under the field “Security model”

If the SSL was not setup when the SharePlex was first installed, the value under the field “Security model” will be “Not yet setup”. If it was first enabled and subsequently disabled, the value then will be “Un-encrypted”