FreeTDS Development Group

["Mittel, Alexander" <Alexander.Mittel AT siemens.com>]

Hi,

thanks for help!
With ALL Your hints/suggestions now I could establish a encrypted connection!
First installing all needed libs for gnutls and gnutls itself, then
./configure --prefix=/usr/local/freetds --with-gnutls --with-tdsver=8.0 
--enable-msdblib

To clear "undefined reference to `gnutls_........`" while make/linking I had 
to
[inconveniently] manually edit (for reasons of precaution all) Makefile's:
NETWORK_LIBS = -lgnutls -lgnutlsxx -lcrypto
LDFLAGS = -L/usr/lib -L/usr/local/lib

Result:
/usr/local/freetds/bin/tsql -C
Compile-time settings (established with the "configure" script)
                            Version: freetds v0.83.dev.20090725
             freetds.conf directory: /usr/local/freetds/etc
     MS db-lib source compatibility: yes
        Sybase binary compatibility: no
                      Thread safety: yes
                      iconv library: yes
                        TDS version: 8.0
                              iODBC: no
                           unixodbc: no
Connect to SQLServer and check encryption with:
SELECT session_id, net_transport, encrypt_option, auth_scheme FROM 
sys.dm_exec_connections

Mfg Alexander


-----Ursprüngliche Nachricht-----
Im Auftrag von Bob Hetzel
Gesendet: Donnerstag, 6. August 2009 15:04
An: FreeTDS Development Group
Betreff: Re: [freetds] FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not 
work

Hi,

When I went through this most recently about a month back, I had to use the
latest snapshot version rather than the Stable version.  In addition, under
Centos linux I had to use gnutls rather than openssl.

Before I did those two things I believe I had the same connection hang you
have described below, however another big difference is that I wasn't using
odbc.

    Bob

Mittel, Alexander wrote:
> Hello,
>
> Problem:
> I want to use an encrypted connection and at the moment I only use tsql to 
> test it.
> When I use TDS version 8.0 the connection always hangs (exit after 
> timeout), regardless if I try unencrypted or encrypted connections. (There 
> are no entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
> When I use TDS version 7.0 then unencrypted connections works fine, but 
> encrytped connection does not: tsql returns immediatly and SQLServer-Log 
> says "Encryption is required to connect to this server but the client 
> library does not support encryption; the connection has been closed. Please 
> upgrade your client library."
>
>
> Setup and configuration:
>
> SQLServer: Windows 2000 SP4, MS SQLServer 2005
> Force Encryption "Yes"; Certificate is installed
> When testing [especially for unencrypted connections] switched to Force 
> Encryption "No"
> I always test the conn. with/without "Forced Encryption" from another 
> Windows XP-PC thru Windows-ODBC
>
> FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26 
> 17:02:05 -0400 i686 i686 i386 GNU/Linux
> compiled from source: ./configure --prefix=/usr/local/freetds 
> --with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0 
> --enable-msdblib
> outout from "/usr/local/freetds/bin/tsql - C":
>         Compile-time settings (established with the "configure" script)
>                           Version: freetds v0.82
>              freetds.conf directory: /usr/local/freetds/etc
>      MS db-lib source compatibility: yes
>         Sybase binary compatibility: no
>                       Thread safety: yes
>                       iconv library: yes
>                         TDS version: 8.0
>                               iODBC: no
>                            unixodbc: yes
>
>