SSL/TLS 1.2连接问题-PHP/SQLSRV [英] SSL/TLS 1.2 Connection Issues - PHP/SQLSRV
问题描述
我最近禁用了TLS 1.0&Web服务器上的TLS 1.1，但似乎与我正在运行的某些PHP站点引起了一些问题.
I recently disabled TLS 1.0 & TLS 1.1 on a web server, but it seems to have caused some issues with some of the PHP sites I'm running.
有问题的错误是:客户端不支持[Microsoft] [用于SQL Server的ODBC驱动程序11]加密.但是我有其他站点在同一服务器上的TLS 1.2上运行，即使是PHP(5.3.28的较早版本，我认为它甚至可能在TLS之前就已经存在)上，我什至还有其他基于PHP的站点仍能够连接到数据库.添加了1.2支持..鉴于服务器现在仅限于TLS 1.2，因此不确定它们的功能如何.
The error in question is: "[Microsoft][ODBC Driver 11 for SQL Server]Encryption not supported on the client." but I have other sites running on TLS 1.2 on the same server, I even have other PHP-based sites still able to connect to the database despite being earlier versions of PHP (5.3.28, which I think might've even been before TLS 1.2 support was added.. so not sure how they're still functional considering the server is now restricted to TLS 1.2 only).
无论如何，我已经对此进行了一段时间的故障排除，非常感谢您尝试尝试任何新的想法.
Anyway, I've been troubleshooting this quite a while now, and would greatly appreciate any new ideas to try.
其他信息:
服务器:Windows Server 2012 R2 Standard(IIS 8)
Server: Windows Server 2012 R2 Standard (IIS 8)
PHP版本:7.0.17
PHP Version: 7.0.17
卷曲版本:7.47.1
curl version: 7.47.1
SSL版本:OpenSSL/1.0.2h
SSL version: OpenSSL/1.0.2h
OPENSSL_VERSION_NUMBER:1000208f
OPENSSL_VERSION_NUMBER: 1000208f
过去，相同的站点已经能够连接到数据库，只是显然无法通过TLS 1.2
The same sites have been able to connect to the databases in the past, just apparently not through TLS 1.2
如果我可以在此处提供任何其他有用的信息，请告诉我，我将更新该线程.
If I can provide any other info here that would be useful, just let me know and I'll update the thread.
谢谢.
推荐答案
对于SSL连接失败，您可能必须同时检查双方(客户端和服务器端).请检查sql server和借助此同样对于ODBC驱动程序，还必须确保所有组件都已更新.请参考
Also for the ODBC driver as well,you have to make sure all the components are updated.Refer this msdn .
还有此powershell脚本，它可以执行以确定需要更新哪些驱动程序.
There is also this powershell script which can be executed to figure out which drivers needs to be updated.
这篇关于SSL/TLS 1.2连接问题-PHP/SQLSRV的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
