sql 2023-03-28

I'm getting The server selected protocol version TLS10 is not accepted by client preferences [TLS13, TLS12] when trying to connect to a MSSQL DB with next.jdbc. Can I use :jvm-opts or something to set my TLS version? Doesn't look like there's a supported key in the db-spec, is that right?

You'd have to look at the SQL Server docs to see what it needs to resolve that. If it's a connection string parameter, it can go in db-spec; if it's a JVM parameter, you'll need :jvm-opts (in an alias; or -D on the java command-line or -J-D on the clojure command-line).

TLS 1.0 has been deprecated for ages and was removed from Java 11 I think. This is an old SQL Server instance?

I'm now away from my work computer but I ended up using jdbc-uri (not knowing I could create my own keys in db-spec, that is) and added the required param to the connection string. I got some error the message of which I cannot recall but the gist was that the protocol didn't exist? Something like that anyway

Probably means what you say, that I can't use TLS 1

The SQLServer Java driver supports Windows Authentication tho, probably gonna set that up tmw

I believe you might be able to re-enable it on some recent JDK installs but it isn't considered secure and you don't want your JDK negotiating TLS 1.0 with arbitrary servers out there...

👍🏻 1

Legacy systems sigh