[freetds] 0.64 news - logs and SSL
danny at msc.tamu.edu
Sat Feb 12 16:30:20 EST 2005
How far along is the SSL support? I'm testing with the latest dev
snapshot and can't see any difference when trying to make an SSL
connection (same old "read from SQL server failed" message). Should I
be doing something different? I have installed the gnutls libraries
with your patch and all of its dependancies. Also, I did an export
HAVE_GNUTLS before compiling freetds.
Also, I'd be more than happy to help test or do a network capture if you
could give me instructions on what to do.
From: freetds-bounces at lists.ibiblio.org
[mailto:freetds-bounces at lists.ibiblio.org] On Behalf Of ZIGLIO,
Sent: Tuesday, February 08, 2005 8:11 AM
To: FreeTDS Development Group
Subject: [freetds] 0.64 news - logs and SSL
I added a "debug flags" option. This option contains a set of bit to
disable/enable some type of logging.
#define TDS_DBGFLAG_FUNC 0x80
#define TDS_DBGFLAG_INFO2 0x40
#define TDS_DBGFLAG_INFO1 0x20
#define TDS_DBGFLAG_NETWORK 0x10
#define TDS_DBGFLAG_WARN 0x08
#define TDS_DBGFLAG_ERROR 0x04
#define TDS_DBGFLAG_SEVERE 0x02
#define TDS_DBGFLAG_ALLLVL 0xfff
#define TDS_DBGFLAG_PID 0x1000
#define TDS_DBGFLAG_TIME 0x2000
#define TDS_DBGFLAG_SOURCE 0x4000
#define TDS_DBGFLAG_THREAD 0x8000
this option supercede "debug level" (never really used...).
The reason for 3 nibble for level came from the fact that 3 nibble = 3
hex digit = 4 octal digit. "debug flags" can use hex/octal notation so
it'easy to add a bit. The default is 0x4fff (047777 in octal, only
source informations, all levels).
If someone wants to update docs feel free to do so...
Other news is SSL support for mssql (or in other words "force protocol
encryption" connections are now supported). I used gnutls for SSL
however current version do not support DES/RC56 needed by mssql (weak
but exportable...perhaps it's only a problem in my country, if someone
can send some network capture using all 128bit product is welcome). I
wrote a patch (attached) for gnutls. However it still to be considered
sperimental. Some error handling are missing (see src/tds/login.c) and
there is also a memory leak on first connection (only at first one).
More information about the FreeTDS