Re: FreeTDS: MSSQL2005, SSL, Encryption, TDS v8 does not work

Hi,

When I went through this most recently about a month back, I had to use the 
latest snapshot version rather than the Stable version.  In addition, under 
Centos linux I had to use gnutls rather than openssl.

Before I did those two things I believe I had the same connection hang you 
have described below, however another big difference is that I wasn't using 
odbc.

    Bob

Mittel, Alexander wrote:
> Hello,
> 
> Problem:
> I want to use an encrypted connection and at the moment I only use tsql to test it.
> When I use TDS version 8.0 the connection always hangs (exit after timeout), regardless if I try unencrypted or encrypted connections. (There are no entries in SQLServer-LOG or Linux-Log-files, except freetds.log)
> When I use TDS version 7.0 then unencrypted connections works fine, but encrytped connection does not: tsql returns immediatly and SQLServer-Log says "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
> 
> 
> Setup and configuration:
> 
> SQLServer: Windows 2000 SP4, MS SQLServer 2005
> Force Encryption "Yes"; Certificate is installed
> When testing [especially for unencrypted connections] switched to Force Encryption "No"
> I always test the conn. with/without "Forced Encryption" from another Windows XP-PC thru Windows-ODBC
> 
> FreeTDS-Client: openSUSE 11.1, Linux 2.6.27.23-0.1-pae #1 SMP 2009-05-26 17:02:05 -0400 i686 i686 i386 GNU/Linux
> compiled from source: ./configure --prefix=/usr/local/freetds --with-unixodbc=/usr/local/unixODBC/ --with-openssl --with-tdsver=8.0 --enable-msdblib
> outout from "/usr/local/freetds/bin/tsql - C":
>         Compile-time settings (established with the "configure" script)
>                           Version: freetds v0.82
>              freetds.conf directory: /usr/local/freetds/etc
>      MS db-lib source compatibility: yes
>         Sybase binary compatibility: no
>                       Thread safety: yes
>                       iconv library: yes
>                         TDS version: 8.0
>                               iODBC: no
>                            unixodbc: yes
> 
> 
> Details:
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 8.0, freetds.conf:
> [global]
>         tds version = 8.0
>         dump file = /tmp/freetds.log
>         debug flags = 0x4fff
>         timeout = 10
>         connect timeout = 30
> [Win2000V]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = required
> [Win2000UV]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = off
> 
> tsql -S Win2000V -U odbctest -P odbctest
>         timeout; see attached freetds_v8_enc.log
> 
> tsql -S Win2000UV -U odbctest -P odbctest
>         timeout; see attached freetds_v8_unenc.log
> +++++++++++++++++++++++++++++++++++++++++++
> 
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 8.0, freetds.conf as above for v8.0
> 
> tsql -S Win2000V -U odbctest -P odbctest
>         timeout; see attached freetds_v8_enc_sqlserver_no_enc.log
> 
> tsql -S Win2000UV -U odbctest -P odbctest
>         timeout; see attached freetds_v8_unenc_sqlserver_no_enc.log
> 
> +++++++++++++++++++++++++++++++++++++++++++
> 
> 
> 
> 
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "Yes"; certificate installed
> TDS version 7.0, freetds.conf:
> [global]
>         tds version = 7.0
>         dump file = /tmp/freetds.log
>         debug flags = 0x4fff
>         timeout = 10
>         connect timeout = 30
> [Win2000V]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = required
> [Win2000UV]
>         host = BLNSU01A.DE_BLN_SU01A
>         port = 1737
>         encryption = off
> 
> tsql -S Win2000V -U odbctest -P odbctest
>         see attached freetds_v7_enc.log
>         plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
> 
> tsql -S Win2000UV -U odbctest -P odbctest
>         see attached freetds_v7_unenc.log
>         plus message in SQLServer-Log "Encryption is required to connect to this server but the client library does not support encryption; the connection has been closed. Please upgrade your client library."
> +++++++++++++++++++++++++++++++++++++++++++
> 
> 
> +++++++++++++++++++++++++++++++++++++++++++
> SQLServer: Force Encryption "No"; (certificate still installed)
> TDS version 7.0, freetds.conf as above for v7.0
> 
> tsql -S Win2000V -U odbctest -P odbctest
>         works fine (even freetds.conf says "encryption = required", but this is no problem)
> 
> tsql -S Win2000UV -U odbctest -P odbctest
>         works fine
> +++++++++++++++++++++++++++++++++++++++++++
> 
> 
> 
> Mit freundlichen Grüßen
> Alexander Mittel
> 
> _______________________________________________
> FreeTDS mailing list
> [email protected]
> http://lists.ibiblio.org/mailman/listinfo/freetds