JDBC Connection to SQL Server 2016 over SSL failing

[IT-CD]

I am using API Gateway 9.3 software appliance form factor. Our database server recently got upgraded to SQL Server 2016 and now they are asking to use SSL to connect. Previously it was working fine without SLL with JDBC URL like jdbc:l7tech:sqlserver://10.0.0.1:1433;DatabaseName=test . I tried adding encrypt=true;trustServerCertificate=true in URL but it is not working.

Both API Gateway and DB server are in same subnet.

[Adriaan van Loon]

What a coincidence. I'm fiddling with this this week to. I was able to set up a secure session (I think?) without the need to specify anything. I know we have our intern certificate authority which the gateway trusts as a trust anchor. Do you guys use a certificate authority and does de Gateway trust de root authority? It is possible that L7 drops de connection because it doesn't trust the server where database runs on hence the connection issue. 

What is message you get? Just a general connection failed?

Cheers

[IT-CD]

Thank you Adriaan for you pointer, so do I need to add certificate in trusted certificates ? or it should be with private key?
I am getting error: SQL Server login requires SSL connection

[Adriaan van Loon]

Hey you can try to add the certificate of de SQL database server to the trusted certificates. That should be enough for one way SSL. 

Good luck

[IT-CD]

Pheww, not working. May be I am asking a stupid question, please let me know truststore is the Manage certificates menu in policy manager ?

Original Message:
Sent: 06-05-2020 10:05 AM
From: Adriaan van Loon
Subject: JDBC Connection to SQL Server 2016 over SSL failing

Hey you can try to add the certificate of de SQL database server to the trusted certificates. That should be enough for one way SSL.

Good luck
Original Message:
Sent: 06-05-2020 07:13 AM
From: Vivek Awasthi
Subject: JDBC Connection to SQL Server 2016 over SSL failing

Thank you Adriaan for you pointer, so do I need to add certificate in trusted certificates ? or it should be with private key?
I am getting error: SQL Server login requires SSL connection
Original Message:
Sent: 06-05-2020 06:35 AM
From: Adriaan van Loon
Subject: JDBC Connection to SQL Server 2016 over SSL failing

What a coincidence. I'm fiddling with this this week to. I was able to set up a secure session (I think?) without the need to specify anything. I know we have our intern certificate authority which the gateway trusts as a trust anchor. Do you guys use a certificate authority and does de Gateway trust de root authority? It is possible that L7 drops de connection because it doesn't trust the server where database runs on hence the connection issue.

What is message you get? Just a general connection failed?

Cheers
Original Message:
Sent: 06-04-2020 10:30 PM
From: Vivek Awasthi
Subject: JDBC Connection to SQL Server 2016 over SSL failing

I am using API Gateway 9.3 software appliance form factor. Our database server recently got upgraded to SQL Server 2016 and now they are asking to use SSL to connect. Previously it was working fine without SLL with JDBC URL like jdbc:l7tech:sqlserver://10.0.0.1:1433;DatabaseName=test . I tried adding encrypt=true;trustServerCertificate=true in URL but it is not working.

Both API Gateway and DB server are in same subnet.

[Barry Stern]

Hello

You can try adding EncryptionMethod=SSL 

 jdbc:l7tech:sqlserver://10.0.0.1:1433;DatabaseName=test;EncryptionMethod=SSL

For testing purposes if set ValidateServerCertificate=false  or you will need to make sure the gateway trusts the certificate the server is presenting.

[IT-CD]

Thank you for the information, but still got error:
Unsupported curveId: 29

please let me know if you have any information, Thank you.

[Barry Stern]

This error seems to indicated its a SSL handshake issue.You may wnat to inquire with the DBA  what Protocols are enabled on the database.

You can try testing by adding the protocol you want to the JDBC connection. 

CryptoProtocolVersion=TLSv1.2