[freetds] MS SQL - Force protocol encryption

ZIGLIO, Frediano, VF-IT Frediano.Ziglio at vodafone.com
Fri Dec 10 03:58:38 EST 2004


> 
> Il mer, 2004-12-08 alle 03:31, Danny Raetzsch ha scritto:
> > Hi,
> > 
> > I was having problems a while back being unable to connect to an SQL
> > server across campus using tsql, getting an error message 
> which reads,
> > "Could not read from server."  I was finally able to get out of the
> > server admin that they have enabled the "force protocol encryption"
> > option on the SQL Server.  Is it likely  that this is where 
> my problem
> > is coming from?
> > 
> > It's unlikely that I will be able to get the admin to turn 
> it off.  Is
> > there any way I can get around this with freetds?  If not, 
> are there any
> > commercially available alternatives that I should check out 
> that might
> > be able to solve the problem?  I've already looked into Easysoft's
> > ODBC-ODBC bridge software but this requires installation on 
> the server,
> > which will not be possible.
> > 
> > Someone else suggested I try routing tsql through stunnel (an SSL
> > wrapper).  I'm not real familiar with the SSL protocol - or 
> encryption
> > mechanisms at all for that matter - but it seems to me this 
> is a bit of
> > a long shot.  I gave it a try anyway, but to no avail.  Am 
> I barking up
> > the wrong tree here?
> > 
> > Thanks,
> > Dan
> 
> Still not supported by FreeTDS (and no plan to support it).
> No know commercial mssql ODBC driver (only bridges or FreeTDS
> modifications...)
> >From what I know encryption in mssql use ssl so I think that 
> client have
> to accept certificate... 
> An stunnel could work... I never tried to enable encryption 
> so I cannot
> do some tests by myself.... If you can help to do a connection to this
> server and do a capture we can try to help you. Are you able 
> to setup a
> DSN with ODBC (from Control Panel -> Administrative Tools) 
> and test it ?
> 
> freddy77
> 

I'm working on this (sometimes I like to play with bits :) ). 
Some bits left but mainly it's ssl...

freddy77



More information about the FreeTDS mailing list