Menu

#708 SSL connection to SQL Server

v2.x
open
nobody
ssl java (1)
1
2014-12-10
2013-07-15
Slava
No

Since java 1.6 build 29 update jTDS driver is hanging after login to SQL Server when SSL is used, simillar to https://sourceforge.net/p/jtds/bugs/690/ bug report.

The question is: do you have a plan to solve the problem in the future version?

Note that we tested Microsoft and DirectdData drivers, both may connect to secured SQL Server (patched versions), while jTDS driver fails.

Discussion

  • Slava

    Slava - 2013-07-15

    Currently our customers set JVM "-Djsse.enableCBCProtection=false" parameter to allow product work with secured SQL Server, but it can be accepted only as a temporary workaround.

     
  • Slava

    Slava - 2013-07-25

    any comments?

     
  • KAMiller

    KAMiller - 2013-09-17

    Exact same thing happening to us too. Login connection hangs when using jTDS driver version 1.27, 1.28 or 1.31 to connect to SSL enabled SQL SERVER 2005, 2008 R2 SP1 CU6, 2008 R2 SP2 CU1 or SQL 2012 with JRE 1.6_29 or greater. Microsoft JDBC driver 4.0 broke too but started working after we applied the CU6 patch to SQL 2008 R2 SP1. Using the "Beast suppression workaround" in java works but we can't go into production like that. We're going to need a fix real soon.

     
  • oysteingr

    oysteingr - 2014-03-06

    I´m seeing the same issue on Java 8 RC (b129) and the -Djsse.enableCBCProtection=false workaround doesn´t seem to work anymore (Tested with Sql server 2012).

     
  • Manikantan

    Manikantan - 2014-05-06

    -Djsse.enableCBCProtection=false doesn't work with Java 8 for us as well. We tested with SQL Server 2008 R2 SP1 Cu7.

     
  • technocrat

    technocrat - 2014-05-07

    I am observing similar issue as @Manikantan pointed in previous comment.
    I have also logged a ticket for it https://sourceforge.net/p/jtds/bugs/725/.

     
  • Bob Loihl

    Bob Loihl - 2014-12-10

    see [patch 130][https://sourceforge.net/p/jtds/patches/130/] as a potential fix

     

Log in to post a comment.