用于SQL Server的Microsoft OLE DB提供程序是否支持TLS 1.2 [英] Does Microsoft OLE DB Provider for SQL Server support TLS 1.2

问题描述

我们的客户端最近从TLS 1.0升级到TLS 1.2，此后我们的软件无法与SQL Server连接.它使用OLE DB提供程序连接到SQL Server. 以下是从SQL Server返回的错误-

Our client recently upgraded from TLS 1.0 to TLS 1.2 and after this our software cannot connect with SQL server. It uses OLE DB provider for connecting to SQL server. Below is the error which is returned from SQL server-

[DBNETLIB] [ConnectionOpen SECDoClientHandshake()] SSL安全错误 SQL状态:08001 SQL错误号:18

[DBNETLIB][ConnectionOpen SECDoClientHandshake()]SSL Security error SQL State: 08001 SQL Error Number: 18

找不到与SQL Server的Microsoft OLE DB提供程序是否支持TLS 1.2有关的任何有用信息.

Could not find any useful information related to whether Microsoft OLE DB Provider for SQL Server support TLS 1.2 or not.

我找到的链接之一似乎表明它不受支持.

One of the links I found seems to suggest that it is not supported. https://forums.iis.net/t/1233674.aspx?connecing+SQL+server+DB+issue+after+installingTLS1+2+in+SQL+srver+with+classic+asp+application+

因此，想检查一下stackoverflow，以防有人对此有任何信息.

Hence, wanted to check on stackoverflow in case anyone has any information on this.

推荐答案

Windows附带的SQLOLEDB提供程序和SQL Server ODBC驱动程序是仅用于向后兼容的旧版组件.从SQL 2005开始不推荐使用这些方法.

The SQLOLEDB provider and the SQL Server ODBC driver that ship with Windows are legacy components provided only for backwards compatibility. These have been deprecated since SQL 2005.

根据

SQLOLEDB将不支持TLS 1.2.您将需要切换 您的驱动程序使用以下列出的受支持的驱动程序之一 https://support.microsoft.com/en-us/kb/3135244

SQLOLEDB will not receive support for TLS 1.2. You will need to switch your driver to one of the supported drivers listed in https://support.microsoft.com/en-us/kb/3135244

您应该能够安装SQL Server Native Client 2012并仅通过更改连接字符串(将Provider=SQLOLEDB更改为Provider=SQLNCLI11)使用该OLE DB提供程序.当然，应该进行一次测试以避免意外.例如，我记得有人在使用服务器API游标时与SQL Server Native Client提供程序和ADO classic发生了行为差异，尽管常用的firehose游标很好.

You should be able to install SQL Server Native Client 2012 and use that OLE DB provider with only a connection string change (change Provider=SQLOLEDB to Provider=SQLNCLI11). Of course, once should test to avoid surprises. For example, I recall someone experiencing behavior differences with the SQL Server Native Client provider and ADO classic when server API cursors were used, although the commonly used firehose cursors were fine. 

编辑

新的OLE DB驱动程序 MSOLEDBSQL ，已发布.此新驱动程序包括对最新TLS 1.2标准的支持，并且与SQL Server Native Client 11(SQLNCLI11)向后兼容.请参阅 Microsoft SQLNCLi团队博客公告.

The new OLE DB driver, MSOLEDBSQL, has been released. This new driver includes the support for the latest TLS 1.2 standards and is backwards compatible with SQL Server Native Client 11 (SQLNCLI11). See the Microsoft SQLNCLi team blog announcement.

这篇关于用于SQL Server的Microsoft OLE DB提供程序是否支持TLS 1.2的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！