FreeTDS Development Group

["Danny Raetzsch" <danny AT msc.tamu.edu>]

How far along is the SSL support?  I'm testing with the latest dev
snapshot and can't see any difference when trying to make an SSL
connection (same old "read from SQL server failed" message).  Should I
be doing something different?  I have installed the gnutls libraries
with your patch and all of its dependancies.  Also, I did an export
HAVE_GNUTLS before compiling freetds.

Also, I'd be more than happy to help test or do a network capture if you
could give me instructions on what to do.

Danny


-----Original Message-----
From: freetds-bounces AT lists.ibiblio.org
[mailto:freetds-bounces AT lists.ibiblio.org] On Behalf Of ZIGLIO,
Frediano, VF-IT
Sent: Tuesday, February 08, 2005 8:11 AM
To: FreeTDS Development Group
Subject: [freetds] 0.64 news - logs and SSL


I added a "debug flags" option. This option contains a set of bit to
disable/enable some type of logging.

>From tds.h

#define TDS_DBGFLAG_FUNC    0x80
#define TDS_DBGFLAG_INFO2   0x40
#define TDS_DBGFLAG_INFO1   0x20
#define TDS_DBGFLAG_NETWORK 0x10
#define TDS_DBGFLAG_WARN    0x08
#define TDS_DBGFLAG_ERROR   0x04
#define TDS_DBGFLAG_SEVERE  0x02
#define TDS_DBGFLAG_ALLLVL  0xfff
#define TDS_DBGFLAG_PID     0x1000
#define TDS_DBGFLAG_TIME    0x2000
#define TDS_DBGFLAG_SOURCE  0x4000
#define TDS_DBGFLAG_THREAD  0x8000

this option supercede "debug level" (never really used...).
The reason for 3 nibble for level came from the fact that 3 nibble = 3
hex digit = 4 octal digit. "debug flags" can use hex/octal notation so
it'easy to add a bit. The default is 0x4fff (047777 in octal, only
source informations, all levels).

If someone wants to update docs feel free to do so...



Other news is SSL support for mssql (or in other words "force protocol
encryption" connections are now supported). I used gnutls for SSL
however current version do not support DES/RC56 needed by mssql (weak
but exportable...perhaps it's only a problem in my country, if someone
can send some network capture using all 128bit product is welcome). I
wrote a patch (attached) for gnutls. However it still to be considered
sperimental. Some error handling are missing (see src/tds/login.c) and
there is also a memory leak on first connection (only at first one).

freddy77