freetds AT lists.ibiblio.org

Subject: FreeTDS Development Group

List archive

Re: [freetds] SSL connection to MS SQL 2008 - working

From: Frediano Ziglio <freddy77 AT gmail.com>
To: FreeTDS Development Group <freetds AT lists.ibiblio.org>
Subject: Re: [freetds] SSL connection to MS SQL 2008 - working
Date: Tue, 12 Oct 2010 13:53:02 +0200

2010/10/12 Plot Lost <plot.lost AT gmail.com>

> >
> >
> > >
> > > OpenSSL handshake fails unless the list of ciphers is extended. Even
> then
> > > though once the handshake is complete the login phase fails (hangs)
> > >
> > >
> > Found problem and fixed in CVS HEAD... you have to disable empty
> fragments.
> > MSSQL does not like these empty fragments :(.
> >
> > Great, OpenSSL now works fine. I did have to extend the cipher set
> though,
> to include
>
> TLS1_TXT_RSA_WITH_AES_128_SHA
>
> Withouth this, the initial handshake phase was failing - this was tested
> using SQL server 2008 with an auto-generated self signed certificate.
>

Changed entirely. The list was quite old and not that secure.

freddy77

Re: [freetds] SSL connection to MS SQL 2008 - working, Plot Lost, 10/04/2010
- Re: [freetds] SSL connection to MS SQL 2008 - working, Frediano Ziglio, 10/11/2010
- Re: [freetds] SSL connection to MS SQL 2008 - working, Frediano Ziglio, 10/11/2010
  - Re: [freetds] SSL connection to MS SQL 2008 - working, Plot Lost, 10/12/2010
    - Re: [freetds] SSL connection to MS SQL 2008 - working, Frediano Ziglio, 10/12/2010