Postgres Pro
Downloads
Home   >   mailing lists

Thread: ODBC connection with SSL require stopped working after windows update KB2992611

ODBC connection with SSL require stopped working after windows update KB2992611

From
Nicolas Beuzeboc
Date:

ODBC connection with SSL require stopped working after windows update KB2992611 (https://technet.microsoft.com/en-us/library/security/ms14-066.aspx)

Rolling back this update solves that issue but I’d like to apply this critical windows security update.

 

Is there anything I can do to make it work with the update ?

 

Database log:

> LOG:  SSL error: wrong version number

> LOG:  could not receive data from client: Connection reset by peer

 

Using windows 7 pro 64 bit with postgresql odbc driver at https://ftp.postgresql.org/pub/odbc/versions/msi/psqlodbc_09_01_0200-x64.zip

 

Connecting to a postgresql server version :

# select version();

                                                  version

------------------------------------------------------------------------------------------------------------

PostgreSQL 9.1.4 on x86_64-unknown-linux-gnu, compiled by gcc (Ubuntu/Linaro 4.6.3-1ubuntu5) 4.6.3, 64-bit

(1 row)

 

$ openssl version

OpenSSL 1.0.1 14 Mar 2012

Nicolas Beuzeboc
Database Analyst
Norchem
Ph: 928-526-1011 Ext: 242
Cell: 602-456-2183
nicolasb@norchemlab.com
norchemlab.com

Accredited by the College of American Pathologists (CAP-FDT)

This e-mail and any attachments may contain CONFIDENTIAL information protected by state and/or federal law, PROTECTED HEALTH INFORMATION. If you are not the intended recipient, any use or disclosure of this information is strictly prohibited; you are requested to delete this e-mail and any attachments, notify the sender immediately, and notify the Sterling Corporate Compliance Officer, Betsy Donat, at 1-877-648-5279 .

Re: ODBC connection with SSL require stopped working after windows update KB2992611

From
"Inoue, Hiroshi"
Date:
Hi Nicolas,

(2014/11/13 7:20), Nicolas Beuzeboc wrote:
P.504926e7-ad5f-4eee-8057-0361abdbfdd5 {MARGIN: 0cm 0cm 0pt } LI.504926e7-ad5f-4eee-8057-0361abdbfdd5 {MARGIN: 0cm 0cm 0pt } DIV.504926e7-ad5f-4eee-8057-0361abdbfdd5 {MARGIN: 0cm 0cm 0pt } TABLE.504926e7-ad5f-4eee-8057-0361abdbfdd5Table {MARGIN: 0cm 0cm 0pt } DIV.Section1 {page: Section1 } P.002dbc70-e140-4665-8efd-4bb482373774 {MARGIN: 0cm 0cm 0pt } LI.002dbc70-e140-4665-8efd-4bb482373774 {MARGIN: 0cm 0cm 0pt } DIV.002dbc70-e140-4665-8efd-4bb482373774 {MARGIN: 0cm 0cm 0pt } TABLE.002dbc70-e140-4665-8efd-4bb482373774Table {MARGIN: 0cm 0cm 0pt } DIV.Section1 {page: Section1 }

ODBC connection with SSL require stopped working after windows update KB2992611 (https://technet.microsoft.com/en-us/library/security/ms14-066.aspx)

Rolling back this update solves that issue but I’d like to apply this critical windows security update.


Maybe you are using ssl without libpq.

I found the following pages about the Update.

http://windowsitpro.com/security/ms14-066-months-problem-patch
http://www.infoworld.com/article/2848574/operating-systems/microsoft-botches-kb-2992611-schannel-patch-tls-alert-code-40-slow-sql-server-block-iis-sites.html

ISTM the update is broken and you had better wait for the proper solution.

OTOH using the latest driver (release 9.3.0400) you can switch openssl with libpq and schannel without libpq easily.

regards,
Hiroshi Inoue
 
--
I am using the free version of SPAMfighter.
SPAMfighter has removed 12935 of my spam emails to date.
Get the free SPAMfighter here: http://www.spamfighter.com/len
 
Do you have a slow PC? Try a Free scan http://www.spamfighter.com/SLOW-PCfighter?cid=sigen