[freetds] FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not work
Bob Hetzel
beh at case.edu
Thu Aug 6 09:03:58 EDT 2009
Hi,
When I went through this most recently about a month back, I had to use the
latest snapshot version rather than the Stable version. In addition, under
Centos linux I had to use gnutls rather than openssl.
Before I did those two things I believe I had the same connection hang you
have described below, however another big difference is that I wasn't using
odbc.
Bob
Mittel, Alexander wrote:
> Hello,
>
> Problem:
> I want to use an encrypted connection and at the moment I only use tsql to test it.
> When I use TDS version 8.0 the connection always hangs (exit after timeout), regardless if I try unencrypted or encrypted connections. (There are no entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
> When I use TDS version 7.0 then unencrypted connections works fine, but encrytped connection does not: tsql returns immediatly and SQLServer-Log says "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
>
>
> Setup and configuration:
>
> SQLServer: Windows 2000 SP4, MS SQLServer 2005
> Force Encryption "Yes"; Certificate is installed
> When testing [especially for unencrypted connections] switched to Force Encryption "No"
> I always test the conn. with/without "Forced Encryption" from another Windows XP-PC thru Windows-ODBC
>
> FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26 17:02:05 -0400 i686 i686 i386 GNU/Linux
> compiled from source: ./configure --prefix=/usr/local/freetds --with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0 --enable-msdblib
> outout from "/usr/local/freetds/bin/tsql - C":
> Compile-time settings (established with the "configure" script)
> Version: freetds v0.82
> freetds.conf directory: /usr/local/freetds/etc
> MS db-lib source compatibility: yes
> Sybase binary compatibility: no
> Thread safety: yes
> iconv library: yes
> TDS version: 8.0
> iODBC: no
> unixodbc: yes
>
>
> Details:
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 8.0, freetds.conf:
> [global]
> tds version = 8.0
> dump file = /tmp/freetds.log
> debug flags = 0x4fff
> timeout = 10
> connect timeout = 30
> [Win2000V]
> host = BLNSU01A.DE_BLN_SU01A
> port = 1737
> encryption = required
> [Win2000UV]
> host = BLNSU01A.DE_BLN_SU01A
> port = 1737
> encryption = off
>
> tsql -S Win2000V -U odbctest -P odbctest
> timeout; see attached freetds_v8_enc.log
>
> tsql -S Win2000UV -U odbctest -P odbctest
> timeout; see attached freetds_v8_unenc.log
> +++++++++++++++++++++++++++++++++++++++++++
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 8.0, freetds.conf as above for v8.0
>
> tsql -S Win2000V -U odbctest -P odbctest
> timeout; see attached freetds_v8_enc_sqlserver_no_enc.log
>
> tsql -S Win2000UV -U odbctest -P odbctest
> timeout; see attached freetds_v8_unenc_sqlserver_no_enc.log
>
> +++++++++++++++++++++++++++++++++++++++++++
>
>
>
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 7.0, freetds.conf:
> [global]
> tds version = 7.0
> dump file = /tmp/freetds.log
> debug flags = 0x4fff
> timeout = 10
> connect timeout = 30
> [Win2000V]
> host = BLNSU01A.DE_BLN_SU01A
> port = 1737
> encryption = required
> [Win2000UV]
> host = BLNSU01A.DE_BLN_SU01A
> port = 1737
> encryption = off
>
> tsql -S Win2000V -U odbctest -P odbctest
> see attached freetds_v7_enc.log
> plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
>
> tsql -S Win2000UV -U odbctest -P odbctest
> see attached freetds_v7_unenc.log
> plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
> +++++++++++++++++++++++++++++++++++++++++++
>
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 7.0, freetds.conf as above for v7.0
>
> tsql -S Win2000V -U odbctest -P odbctest
> works fine (even freetds.conf says "encryption = required", but this is no problem)
>
> tsql -S Win2000UV -U odbctest -P odbctest
> works fine
> +++++++++++++++++++++++++++++++++++++++++++
>
>
>
> Mit freundlichen Grüßen
> Alexander Mittel
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS at lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds
More information about the FreeTDS
mailing list