MSConnection utilizes TLS 1.0/1.1 over TLS 1.2, unless they are disabled

Discussion of open issues, suggestions and bugs regarding SDAC (SQL Server Data Access Components) for Delphi, C++Builder, Lazarus (and FPC)
Post Reply
parisa
Posts: 3
Joined: Fri 06 Jun 2014 19:38

MSConnection utilizes TLS 1.0/1.1 over TLS 1.2, unless they are disabled

Post by parisa » Tue 05 May 2020 21:27

Hello there,

We use SDAC 9.1.3 in D2007.

Our application uses following settings to establish an encrypted transmission:

MSConnection.Options.Encrypt = true;
MSConnection.Option.TrustServerCertificate=true;
MSConnection.Options.Provider = prAuto;

We noticed that TLS 1.2 is only utilized if TLS 1.0/1.1 are manually disabled on the machine running the application. Is there a way to configure component to prioritize using newer version of protocol (1.2) to the older versions and eliminate manual process of disabling older versions?

Thanks in advance,
Parisa

Stellar
Devart Team
Posts: 359
Joined: Tue 03 Oct 2017 11:00

Re: MSConnection utilizes TLS 1.0/1.1 over TLS 1.2, unless they are disabled

Post by Stellar » Tue 12 May 2020 14:24

To use TLS 1.2 in SDAC, you don't have to configure anything on the client side. When you connect to SQL Server, a list of supported protocols, including "TLS 1.2" is sent to the server.
The server itself decides which protocol to use for data encryption.

parisa
Posts: 3
Joined: Fri 06 Jun 2014 19:38

Re: MSConnection utilizes TLS 1.0/1.1 over TLS 1.2, unless they are disabled

Post by parisa » Mon 25 May 2020 21:55

Thanks for your respond.

Parisa

Stellar
Devart Team
Posts: 359
Joined: Tue 03 Oct 2017 11:00

Re: MSConnection utilizes TLS 1.0/1.1 over TLS 1.2, unless they are disabled

Post by Stellar » Wed 03 Jun 2020 12:49

Feel free to contact us if you have any further questions about our products.

Post Reply