FreeTDS Development Group

[Bob Hetzel <beh AT case.edu>]

Hi,

When I went through this most recently about a month back, I had to use the 
latest snapshot version rather than the Stable version.  In addition, under 
Centos linux I had to use gnutls rather than openssl.

Before I did those two things I believe I had the same connection hang you 
have described below, however another big difference is that I wasn't using 
odbc.

   Bob

Mittel, Alexander wrote:
> Hello,
>
> Problem:
> I want to use an encrypted connection and at the moment I only use tsql to 
> test it.
> When I use TDS version 8.0 the connection always hangs (exit after timeout), 
> regardless if I try unencrypted or encrypted connections. (There are no 
> entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
> When I use TDS version 7.0 then unencrypted connections works fine, but encrytped 
> connection does not: tsql returns immediatly and SQLServer-Log says "Encryption is 
> required to connect to this server but the client library does not support encryption; 
> the connection has been closed. Please upgrade your client library."
>
>
> Setup and configuration:
>
> SQLServer: Windows 2000 SP4, MS SQLServer 2005
> Force Encryption "Yes"; Certificate is installed
> When testing [especially for unencrypted connections] switched to Force Encryption 
> "No"
> I always test the conn. with/without "Forced Encryption" from another Windows 
> XP-PC thru Windows-ODBC
>
> FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26 
> 17:02:05 -0400 i686 i686 i386 GNU/Linux
> compiled from source: ./configure --prefix=/usr/local/freetds 
> --with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0 
> --enable-msdblib
> outout from "/usr/local/freetds/bin/tsql - C":
>         Compile-time settings (established with the "configure" script)
>                           Version: freetds v0.82
>              freetds.conf directory: /usr/local/freetds/etc
>      MS db-lib source compatibility: yes
>         Sybase binary compatibility: no
>                       Thread safety: yes
>                       iconv library: yes
>                         TDS version: 8.0
>                               iODBC: no
>                            unixodbc: yes
>
>
> Details:
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 8.0, freetds.conf:
> [global]
>         tds version = 8.0
>         dump file = /tmp/freetds.log
>         debug flags = 0x4fff
>         timeout = 10
>         connect timeout = 30
> [Win2000V]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = required
> [Win2000UV]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = off
>
> tsql -S Win2000V -U odbctest -P odbctest
>         timeout; see attached freetds_v8_enc.log
>
> tsql -S Win2000UV -U odbctest -P odbctest
>         timeout; see attached freetds_v8_unenc.log
> +++++++++++++++++++++++++++++++++++++++++++
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 8.0, freetds.conf as above for v8.0
>
> tsql -S Win2000V -U odbctest -P odbctest
>         timeout; see attached freetds_v8_enc_sqlserver_no_enc.log
>
> tsql -S Win2000UV -U odbctest -P odbctest
>         timeout; see attached freetds_v8_unenc_sqlserver_no_enc.log
>
> +++++++++++++++++++++++++++++++++++++++++++
>
>
>
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 7.0, freetds.conf:
> [global]
>         tds version = 7.0
>         dump file = /tmp/freetds.log
>         debug flags = 0x4fff
>         timeout = 10
>         connect timeout = 30
> [Win2000V]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = required
> [Win2000UV]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = off
>
> tsql -S Win2000V -U odbctest -P odbctest
>         see attached freetds_v7_enc.log
>         plus message in SQLServer-Log "Encryption is required to connect to this 
> server but the client library does not support encryption; the connection has been 
> closed. Please upgrade your client library."
>
> tsql -S Win2000UV -U odbctest -P odbctest
>         see attached freetds_v7_unenc.log
>         plus message in SQLServer-Log "Encryption is required to connect to this 
> server but the client library does not support encryption; the connection has been 
> closed. Please upgrade your client library."
> +++++++++++++++++++++++++++++++++++++++++++
>
>
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 7.0, freetds.conf as above for v7.0
>
> tsql -S Win2000V -U odbctest -P odbctest
>         works fine (even freetds.conf says "encryption = required", but this 
> is no problem)
>
> tsql -S Win2000UV -U odbctest -P odbctest
>         works fine
> +++++++++++++++++++++++++++++++++++++++++++
>
>
>
> Mit freundlichen Grüßen
> Alexander Mittel
>
> _______________________________________________
> FreeTDS mailing list
> FreeTDS AT lists.ibiblio.org
> http://lists.ibiblio.org/mailman/listinfo/freetds