Skip to Content.
Sympa Menu

freetds - Re: [freetds] FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not work

freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Chronological Thread  
  • From: "Mittel, Alexander" <Alexander.Mittel AT siemens.com>
  • To: "freetds AT lists.ibiblio.org" <freetds AT lists.ibiblio.org>
  • Subject: Re: [freetds] FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not work
  • Date: Thu, 6 Aug 2009 12:58:06 +0200

Hello,

Problem:
I want to use an encrypted connection and at the moment I only use tsql to
test it.
When I use TDS version 8.0 the connection always hangs (exit after timeout),
regardless if I try unencrypted or encrypted connections. (There are no
entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
When I use TDS version 7.0 then unencrypted connections works fine, but
encrytped connection does not: tsql returns immediatly and SQLServer-Log says
"Encryption is required to connect to this server but the client library does
not support encryption; the connection has been closed. Please upgrade your
client library."


Setup and configuration:

SQLServer: Windows 2000 SP4, MS SQLServer 2005
Force Encryption "Yes"; Certificate is installed
When testing [especially for unencrypted connections] switched to Force
Encryption "No"
I always test the conn. with/without "Forced Encryption" from another Windows
XP-PC thru Windows-ODBC

FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26
17:02:05 -0400 i686 i686 i386 GNU/Linux
compiled from source: ./configure --prefix=/usr/local/freetds
--with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0
--enable-msdblib
outout from "/usr/local/freetds/bin/tsql - C":
Compile-time settings (established with the "configure" script)
Version: freetds v0.82
freetds.conf directory: /usr/local/freetds/etc
MS db-lib source compatibility: yes
Sybase binary compatibility: no
Thread safety: yes
iconv library: yes
TDS version: 8.0
iODBC: no
unixodbc: yes


Details:
+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "Yes"; certificate installed
TDS version 8.0, freetds.conf:
[global]
tds version = 8.0
dump file = /tmp/freetds.log
debug flags = 0x4fff
timeout = 10
connect timeout = 30
[Win2000V]
host = BLNSU01A.DE_BLN_SU01A
port = 1737
encryption = required
[Win2000UV]
host = BLNSU01A.DE_BLN_SU01A
port = 1737
encryption = off

tsql -S Win2000V -U odbctest -P odbctest
timeout; see attached freetds_v8_enc.log

tsql -S Win2000UV -U odbctest -P odbctest
timeout; see attached freetds_v8_unenc.log
+++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "No"; (certificate still installed)
TDS version 8.0, freetds.conf as above for v8.0

tsql -S Win2000V -U odbctest -P odbctest
timeout; see attached freetds_v8_enc_sqlserver_no_enc.log

tsql -S Win2000UV -U odbctest -P odbctest
timeout; see attached freetds_v8_unenc_sqlserver_no_enc.log

+++++++++++++++++++++++++++++++++++++++++++




+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "Yes"; certificate installed
TDS version 7.0, freetds.conf:
[global]
tds version = 7.0
dump file = /tmp/freetds.log
debug flags = 0x4fff
timeout = 10
connect timeout = 30
[Win2000V]
host = BLNSU01A.DE_BLN_SU01A
port = 1737
encryption = required
[Win2000UV]
host = BLNSU01A.DE_BLN_SU01A
port = 1737
encryption = off

tsql -S Win2000V -U odbctest -P odbctest
see attached freetds_v7_enc.log
plus message in SQLServer-Log "Encryption is required to connect to
this server but the client library does not support encryption; the
connection has been closed. Please upgrade your client library."

tsql -S Win2000UV -U odbctest -P odbctest
see attached freetds_v7_unenc.log
plus message in SQLServer-Log "Encryption is required to connect to
this server but the client library does not support encryption; the
connection has been closed. Please upgrade your client library."
+++++++++++++++++++++++++++++++++++++++++++


+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "No"; (certificate still installed)
TDS version 7.0, freetds.conf as above for v7.0

tsql -S Win2000V -U odbctest -P odbctest
works fine (even freetds.conf says "encryption = required", but this
is no problem)

tsql -S Win2000UV -U odbctest -P odbctest
works fine
+++++++++++++++++++++++++++++++++++++++++++



Mit freundlichen Grüßen
Alexander Mittel





Archive powered by MHonArc 2.6.24.

Top of Page