Re: FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not work

Hello,

Problem:
I want to use an encrypted connection and at the moment I only use tsql to test it.
When I use TDS version 8.0 the connection always hangs (exit after timeout), regardless if I try unencrypted or encrypted connections. (There are no entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
When I use TDS version 7.0 then unencrypted connections works fine, but encrytped connection does not: tsql returns immediatly and SQLServer-Log says "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."


Setup and configuration:

SQLServer: Windows 2000 SP4, MS SQLServer 2005
Force Encryption "Yes"; Certificate is installed
When testing [especially for unencrypted connections] switched to Force Encryption "No"
I always test the conn. with/without "Forced Encryption" from another Windows XP-PC thru Windows-ODBC

FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26 17:02:05 -0400 i686 i686 i386 GNU/Linux
compiled from source: ./configure --prefix=/usr/local/freetds --with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0 --enable-msdblib
outout from "/usr/local/freetds/bin/tsql - C":
        Compile-time settings (established with the "configure" script)
                          Version: freetds v0.82
             freetds.conf directory: /usr/local/freetds/etc
     MS db-lib source compatibility: yes
        Sybase binary compatibility: no
                      Thread safety: yes
                      iconv library: yes
                        TDS version: 8.0
                              iODBC: no
                           unixodbc: yes


Details:
+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "Yes"; certificate installed
TDS version 8.0, freetds.conf:
[global]
        tds version = 8.0
        dump file = /tmp/freetds.log
        debug flags = 0x4fff
        timeout = 10
        connect timeout = 30
[Win2000V]
        host = BLNSU01A.DE_BLN_SU01A
        port = 1737
        encryption = required
[Win2000UV]
        host = BLNSU01A.DE_BLN_SU01A
        port = 1737
        encryption = off

tsql -S Win2000V -U odbctest -P odbctest
        timeout; see attached freetds_v8_enc.log

tsql -S Win2000UV -U odbctest -P odbctest
        timeout; see attached freetds_v8_unenc.log
+++++++++++++++++++++++++++++++++++++++++++

+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "No"; (certificate still installed)
TDS version 8.0, freetds.conf as above for v8.0

tsql -S Win2000V -U odbctest -P odbctest
        timeout; see attached freetds_v8_enc_sqlserver_no_enc.log

tsql -S Win2000UV -U odbctest -P odbctest
        timeout; see attached freetds_v8_unenc_sqlserver_no_enc.log

+++++++++++++++++++++++++++++++++++++++++++




+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "Yes"; certificate installed
TDS version 7.0, freetds.conf:
[global]
        tds version = 7.0
        dump file = /tmp/freetds.log
        debug flags = 0x4fff
        timeout = 10
        connect timeout = 30
[Win2000V]
        host = BLNSU01A.DE_BLN_SU01A
        port = 1737
        encryption = required
[Win2000UV]
        host = BLNSU01A.DE_BLN_SU01A
        port = 1737
        encryption = off

tsql -S Win2000V -U odbctest -P odbctest
        see attached freetds_v7_enc.log
        plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."

tsql -S Win2000UV -U odbctest -P odbctest
        see attached freetds_v7_unenc.log
        plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
+++++++++++++++++++++++++++++++++++++++++++


+++++++++++++++++++++++++++++++++++++++++++
SQLServer: Force Encryption "No"; (certificate still installed)
TDS version 7.0, freetds.conf as above for v7.0

tsql -S Win2000V -U odbctest -P odbctest
        works fine (even freetds.conf says "encryption = required", but this is no problem)

tsql -S Win2000UV -U odbctest -P odbctest
        works fine
+++++++++++++++++++++++++++++++++++++++++++



Mit freundlichen Grüßen
Alexander Mittel