Encrypted connection to remote SQL SERVER

[martin de vroom]

Hi,
I am having trouble making an encryped connection to an sql server over
the internet, and would really appreciate some help. I have tried to include
as much info as possible without making this post too long.

I am trying to connect to an SQL SERVER (ent edition on Win2k Server)
Box from a Win2k server box across the Internet. Both machines are NOT on
the same domain and the only connection is via the internet.
I have managed to connect using the following connection string.
sConnStr = "Driver={SQL Server};" & _
"Server=xxx.xxx.xxx.xxx";" & _
"Network=DBNETLIB.DLL;" & _
"Database=WebTest;" & _
"Uid=WebTest;" & _
"Pwd=zzz"
where xxx.xxx.xxx.xxx is the ip address of the sql server. This connection
works absolutly fine.
My problems start when I try to make an encrpyted connection from the web
server to the SQL box, And this is what I am asking for help with.
I am using the following connection string
sConnStr = "Driver={SQL Server};" & _
"Server=" & sServer & ";" & _
"Network=DBNETLIB.DLL;" & _
"Database=WebTest;" & _
"Uid=WebTest;" & _
"Pwd=abc;Encrypt=YES"

I then conductecd two experiments

1. With windows integrated authtication activated on the file than it is
making the connection to sql server but only from the web server.

If I open a browser on the webserver then I am able to make an encryped
connection.
However if I open a web browser on a different machine (same domain) the I
recieve the following error

Microsoft OLE DB Provider for SQL Server error '80004005'
[DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.
/the_lab/RemoteDBConn/one.asp, line 129


2. With windows authentication turned OFF.

The connection could not be made when running the browser on the same
machine as the webserver OR as before from a different client machine.
In both case I recieve the same error message as above.

I am guesing that this has something to do with how the certificated was
installed on the webserver.
when I open the browser on the webserver (which is logged on with the same
account that the cirtificate was installed under) then everything is fine,
the connection succeeds. But only when I am using windows authentication.

so this leaves me wondering if the certificate has to be installed under a
seperate account (maybe I_USR_MACHINE), but I do not know if this is
possible.
maybe i have to set up a new account, install the certificate and force the
web server to run under that account. Trouble is this web site will
eventually be housed at an ISP and I'll have no controll over what account
the web server uses.

Any help is appreciated.

cheers

Martin.

[Ken Schaefer]

What certificate did you install on the SQL Server?
[url]http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/sql/reskit/sql2000/part3/c1061.asp[/url]

Cheers
Ken


"martin de vroom" <martindevroom@hotmail.com> wrote in message
news:OSvn$tcRDHA.1552@TK2MSFTNGP10.phx.gbl...
: Hi,
: I am having trouble making an encryped connection to an sql server
over
: the internet, and would really appreciate some help. I have tried to
include
: as much info as possible without making this post too long.
:
: I am trying to connect to an SQL SERVER (ent edition on Win2k Server)
: Box from a Win2k server box across the Internet. Both machines are NOT on
: the same domain and the only connection is via the internet.
: I have managed to connect using the following connection string.
: sConnStr = "Driver={SQL Server};" & _
: "Server=xxx.xxx.xxx.xxx";" & _
: "Network=DBNETLIB.DLL;" & _
: "Database=WebTest;" & _
: "Uid=WebTest;" & _
: "Pwd=zzz"
: where xxx.xxx.xxx.xxx is the ip address of the sql server. This connection
: works absolutly fine.
: My problems start when I try to make an encrpyted connection from the web
: server to the SQL box, And this is what I am asking for help with.
: I am using the following connection string
: sConnStr = "Driver={SQL Server};" & _
: "Server=" & sServer & ";" & _
: "Network=DBNETLIB.DLL;" & _
: "Database=WebTest;" & _
: "Uid=WebTest;" & _
: "Pwd=abc;Encrypt=YES"
:
: I then conductecd two experiments
:
: 1. With windows integrated authtication activated on the file than it is
: making the connection to sql server but only from the web server.
:
: If I open a browser on the webserver then I am able to make an encryped
: connection.
: However if I open a web browser on a different machine (same domain) the I
: recieve the following error
:
: Microsoft OLE DB Provider for SQL Server error '80004005'
: [DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.
: /the_lab/RemoteDBConn/one.asp, line 129
:
:
: 2. With windows authentication turned OFF.
:
: The connection could not be made when running the browser on the same
: machine as the webserver OR as before from a different client machine.
: In both case I recieve the same error message as above.
:
: I am guesing that this has something to do with how the certificated was
: installed on the webserver.
: when I open the browser on the webserver (which is logged on with the same
: account that the cirtificate was installed under) then everything is fine,
: the connection succeeds. But only when I am using windows authentication.
:
: so this leaves me wondering if the certificate has to be installed under a
: seperate account (maybe I_USR_MACHINE), but I do not know if this is
: possible.
: maybe i have to set up a new account, install the certificate and force
the
: web server to run under that account. Trouble is this web site will
: eventually be housed at an ISP and I'll have no controll over what account
: the web server uses.
:
: Any help is appreciated.
:
: cheers
:
: Martin.
:
:
:
:
:
:
:
:
:
:
:
:
:

[martin de vroom]

Thanks for the link ken.

problem now solved.

had to set the file to run under the account that i nstalled the certificate
under on the webserver.

still trying to figure out how I get the file to run under
IUSR_MACHINENAME though.

cheers

martin.



"Ken Schaefer" <kenREMOVE@THISadOpenStatic.com> wrote in message
news:#9DdHVdRDHA.1572@TK2MSFTNGP12.phx.gbl...

> What certificate did you install on the SQL Server?
>

[url]http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechn[/url]
ol/sql/reskit/sql2000/part3/c1061.asp

>
> Cheers
> Ken
>
>
> "martin de vroom" <martindevroom@hotmail.com> wrote in message
> news:OSvn$tcRDHA.1552@TK2MSFTNGP10.phx.gbl...
> : Hi,
> : I am having trouble making an encryped connection to an sql server
> over
> : the internet, and would really appreciate some help. I have tried to
> include
> : as much info as possible without making this post too long.
> :
> : I am trying to connect to an SQL SERVER (ent edition on Win2k

Server)

> : Box from a Win2k server box across the Internet. Both machines are NOT

on

> : the same domain and the only connection is via the internet.
> : I have managed to connect using the following connection string.
> : sConnStr = "Driver={SQL Server};" & _
> : "Server=xxx.xxx.xxx.xxx";" & _
> : "Network=DBNETLIB.DLL;" & _
> : "Database=WebTest;" & _
> : "Uid=WebTest;" & _
> : "Pwd=zzz"
> : where xxx.xxx.xxx.xxx is the ip address of the sql server. This

connection

> : works absolutly fine.
> : My problems start when I try to make an encrpyted connection from the

web

> : server to the SQL box, And this is what I am asking for help with.
> : I am using the following connection string
> : sConnStr = "Driver={SQL Server};" & _
> : "Server=" & sServer & ";" & _
> : "Network=DBNETLIB.DLL;" & _
> : "Database=WebTest;" & _
> : "Uid=WebTest;" & _
> : "Pwd=abc;Encrypt=YES"
> :
> : I then conductecd two experiments
> :
> : 1. With windows integrated authtication activated on the file than it is
> : making the connection to sql server but only from the web server.
> :
> : If I open a browser on the webserver then I am able to make an encryped
> : connection.
> : However if I open a web browser on a different machine (same domain) the

I

> : recieve the following error
> :
> : Microsoft OLE DB Provider for SQL Server error '80004005'
> : [DBNETLIB][ConnectionOpen (SECDoClientHandshake()).]SSL Security error.
> : /the_lab/RemoteDBConn/one.asp, line 129
> :
> :
> : 2. With windows authentication turned OFF.
> :
> : The connection could not be made when running the browser on the same
> : machine as the webserver OR as before from a different client machine.
> : In both case I recieve the same error message as above.
> :
> : I am guesing that this has something to do with how the certificated was
> : installed on the webserver.
> : when I open the browser on the webserver (which is logged on with the

same

> : account that the cirtificate was installed under) then everything is

fine,

> : the connection succeeds. But only when I am using windows

authentication.

> :
> : so this leaves me wondering if the certificate has to be installed under

a

> : seperate account (maybe I_USR_MACHINE), but I do not know if this is
> : possible.
> : maybe i have to set up a new account, install the certificate and force
> the
> : web server to run under that account. Trouble is this web site will
> : eventually be housed at an ISP and I'll have no controll over what

account

> : the web server uses.
> :
> : Any help is appreciated.
> :
> : cheers
> :
> : Martin.
> :
> :
> :
> :
> :
> :
> :
> :
> :
> :
> :
> :
> :
>
>