FreeTDS Development Group

[Frediano Ziglio <freddyz77 AT tin.it>]

Il giorno ven, 20/10/2006 alle 14.10 -0500, Kurt Sheffer ha scritto:
> > strange. 
> > 
> > Could you try to change src/tds/login.c changing number below 
> > 
> > /* encryption, normal */
> > 
> > comment from 0 to 1 ?
> > It just tell to use high encryption, perhaps from SP4 is a
> requirement.
> > Could you also post a dump (for instance using ethereal or other tool)
> > using .NET clients?
> > 
> > freddy77
> 
> Yes! Setting the client encryption flag fixed it. This actually seems to
> be similar to the fix implemented by Jon Poland; I must have gotten the
> conf file wrong when I tried his patch before. It would be useful to
> have the option for the client to force encryption, even if SP4 hadn't
> broken this.
> 
> I will still follow up with some captured packets if they would be
> useful to help understand why SP4 with a certificate won't accept our
> unencrypted connection.
> 
> Thanks for your help.
> 
> -Kurt

Yes, this will help me to understand crypt algorithms used by newer
clients. So I think that clients with former ODBC version will have to
enable high encryption in order to connect. You can post them privately
to me if you prefer. I would also suggest to use a test account.

bye
  Frediano