SSLSecurity error - sql/certificate server on same machine - cannot connect to db server

From: Akhlaq Khan (akhlaq.khan_at_softechww.com)
Date: 06/01/04 

Date: Tue, 1 Jun 2004 22:30:36 +0500

i have a windows2003 machine with sql server SP3. a couple of days back i
installed certificate services on the same machine, generated a certificate
from it and used it to sign some code that i needed to. after a couple of
days back i had to restart the server due to some reason after which the sql
server stopped working (even though the sql server service was running ok) i
was not able to connect to either through ent manager or query analyzer. one
of the ASP applications using a database on this db server was started
throwing this error:

[DBNETLIB][ConnectionOpen(SECDoClientHandshake().]SSLSecurity error

i searched the internet and found some articles like
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q309398 which told
me to make following changes to the registry:

HKLM\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\SuperSocketNetLib REG_SZ
Certificate = 0

i could not completely understand what did REG_SZ Certificate = 0 mean ? is
it a KEY with name "Certificate" with Default value "0" OR a string value
with the name "Certificate" with type "REG_SZ" and Data "0" ??? i tried
using both. i have seen that it only works when i have deleted the
certificates (as mentioned in the article) and as soon as i import them back
and restart the sql service the problem is back again.

i have also checked in the server network utility, the "enforce protocol
encryption" is NOT checked. i have spent hours trying to find out the
solution but in vain :( .. please help ... i need to get it solved ASAP.

thanks ...

akhlaq.

Relevant Pages

  • RPC over HTTP, Microsoft solution
    ... Exchange Server 2003 RPC over HTTP Deployment Scenarios ... Place a check in the box next to 'Certificate Services' and click 'Yes' ...
    (microsoft.public.exchange.setup)
  • Re: OWA 2003 w/ Smart Card Authentication.
    ... Exchange 2003 server via ActivSync. ... the IIS certificate. ... Whether or not authentication will succeed is completely dictated by ... Server's SSL certificate must be configured on root of v-server via ...
    (microsoft.public.exchange.connectivity)
  • Re: Configuring LDAP on Entourage 2004 OS X
    ... Microsoft CSS Online Newsgroup Support ... does not work with a self signed SSL certificate OR with the SSL ... configure the System to allow OMA and "Server ActiveSync" access from the ... Configuring Exchange Server 2003 for Client Access. ...
    (microsoft.public.windows.server.sbs)
  • Re: Configuring SBS2003 for OWA and RWW
    ... And make sure certificate will not be ... On the Connection Type page, click Broadband, and then click Next. ... next to Preferred DNS server and next to ... If you are using ISA, please go to ISA management console, and navigate ...
    (microsoft.public.windows.server.sbs)
  • Re: Encryption
    ... Network Encryption Using SSL/TLS ... SQL Server 2000 now automatically supports encryption of data and other network ... The certificate selected for SQL Server must be assigned to the name of the ...
    (microsoft.public.sqlserver.security)