The following connection strings configure the Greenplum Wire Protocol driver to use data encryption via the SSL server authentication and SSL client authentication methods. These examples contain the connection options necessary to configure data encryption as well as the minimum options required to establish a connection.

SSL Server Authentication

This connection string configures the driver to use the SSL Server Authentication method. In this configuration, since ValidateServerCertificate=1 and EnableFIPS=1, the driver validates the certificate sent by the server and the host name specified by the HostNameInCertificate option, and loads the FIPS provider for data encryption.

DSN=AcctGreenplumServer;EnableFIPS=1;EncryptionMethod=1;
HostName=GreenplumServer;HostNameInCertificate=MySubjectAltName;
PortNumber=5432;Truststore=TrustStoreLocation;Database=Accounting;
ValidateServerCertificate=1

SSL Client Authentication

This connection string configures the driver to use the SSL Server Authentication method. In this configuration, since ValidateServerCertificate=1, the driver validates the certificate sent by the server and the host name specified by HostNameInCertificate. 

DSN=AcctGreenplumServer;EncryptionMethod=1;HostName=GreenplumServer;
HostNameInCertificate=MySubjectAltName;KeyPassword=YourKeyPassword;
Keystore=KeyStoreLocation;KeystorePassword=YourKSPassword;PortNumber=5432;
Database=Accounting;ValidateServerCertificate=1
Note: The OpenSSL 3.5 library and its providers are supported only with the Impala Wire Protocol Driver.