patternsqlMinor
SQL Server SSL connection
Viewed 0 times
sqlsslconnectionserver
Problem
Is it possible if I wanted to set up SQL Server 2008 R2 instance so that it only accepts SSL Connection?
I am getting different answers and based on my testing, it will accept non-SSL connection even though I have force encryption as instructed on http://msdn.microsoft.com/en-us/library/ms191192%28v=sql.105%29.aspx
The last comment from Edward Dorland on this thread (SQL Server SSL connection - What am I missing?) pointed out
"SQL server uses ssl for encryption, that doesnt need a cert at the client side."
Could anyone explain in detail?
Thanks.
I am getting different answers and based on my testing, it will accept non-SSL connection even though I have force encryption as instructed on http://msdn.microsoft.com/en-us/library/ms191192%28v=sql.105%29.aspx
The last comment from Edward Dorland on this thread (SQL Server SSL connection - What am I missing?) pointed out
"SQL server uses ssl for encryption, that doesnt need a cert at the client side."
Could anyone explain in detail?
Thanks.
Solution
If you enable the force encryption option and restart the SQL Server instance then all connections between the instance and the SQL Server will be encrypted via SSL. There is no need for a certificate or change to the client. The server tells the driver that it needs to switch to an encrypted session. Thus is kind of like when you connect to a website using http:// and the Web server tells your browser to switch and reconnect using https://. It all happens without the user needing to do anything.
There's no need for an appliance to do this. SQL Server has been doing this internally just fine since SQL 2000.
What SQL does isn't to block unencrypted sessions, it converts unencrypted sessions to encrypted then allows them to continue.
There's no need for an appliance to do this. SQL Server has been doing this internally just fine since SQL 2000.
What SQL does isn't to block unencrypted sessions, it converts unencrypted sessions to encrypted then allows them to continue.
Context
StackExchange Database Administrators Q#63997, answer score: 2
Revisions (0)
No revisions yet.