CF & MS-SQL SSL communication?

Report · Apr 28, 2010

I'm looking to do SSL communication between our CFMX8 server and MS-SQL 2005 server using the built in SQL SSL encryption.

I wanted to do some testing prior to enabling the features to see it in a broken connection state so when I got it working I knew I was actually encrypting. So I added ";EncryptionMethod=SSL" to the end of the connection string inside of the neo-datasource.xml file to force SSL connection from the CFMX8 side but I had not enabled SSL on the server side. What I expected to see was an SSL connection failure message because EncryptionMethod=SSL means the system will require SSL from the JDBC side and fail if not available. Well it connected right through with no issues... I've found a couple articles online talking about this and at this point I'm not even sure if CFMX8 supports SSL JDBC communications or not...

I've done a bunch of research and I've come up with nothing so far, and I know from looking at the CFAdmin that it's not a checkbox in there. Any assistance would be wonderful.

Report · Apr 28, 2010

I just came across this. From this article I see CFMX9 supportsSSL MS-SQL encryption, but we're running CFMX8 still. EncryptionMethod=SSL is what I have in the connection string area too...

http://help.adobe.com/en_US/ColdFusion/9.0/Admin/WS50260aa90e50c24b-32f8955c122c2720693-7fff.html

Report · Apr 28, 2010

Bah, it looks like you have to have the DataDirect 3.7 or later drivers for JDBC to do SSL encryption. Of course what does CFMX8.0.1 have in it? The older 3.6 version which does NOT support SSL connections.

Can someone who has CFMX9 go to the %CFROOT%\Lib folder and right click on the DDJDBCAuthXXX.dll (in CFMX8 it's DDJDBCAuth04.dll but it might be a different version name in CFMX9) and tell me what version number it is?