On 11/04/13 11:23, Alex wrote:
> On 11/03/2013 07:48 PM, Mark Rotteveel wrote:
>> On 3-11-2013 16:05, Mark Rotteveel wrote:
>>> I was still running against the FB 3 Alpha 1 and just upgraded to
>>> 3.0.0.30708 by overwriting my Firebird 3 Alpha 1 install except
>>> firebird.conf and security3.fdb.
>>>
>>> Now when using legacy_auth, instead of op_accept, all connection
>>> attempts receive an op_reject.
>>>
>>> I had to explicitly set WireCrypt = Disabled to get it to work (setting
>>> this to Enabled had no effect).
>>>
>>> I am not sure if this behavior is desirable or correct. Based on the
>>> documentation ("Enabled behavior depends another side requirements. If
>>> both sides set to enabled, connection is encrypted") I'd say that
>>> setting it to Enabled should have been sufficient. The current wire
>>> protocol implementation of Jaybird does not support encryption. I'd
>>> expect not having encryption support would in itself imply 'Disabled'
>>> for the client and if the server then is configured for 'Enabled' then
>>> no encryption should be required (as implied by the documentation).
>> My guess is that this change was introduced by Alex on the 16th of
>> October in http://sourceforge.net/p/firebird/code/58698 (specifically:
>> http://sourceforge.net/p/firebird/code/58698/tree//firebird/trunk/src/remote/server/server.cpp?diff=50cc621834309d0a4876d914:58697
>> around line 1538):
>>
>> int clientCrypt = id.find(CNCT_client_crypt) ? id.getInt() :
>> WIRE_CRYPT_ENABLED;
>>
>> I'd suggest that CNCT_client_crypt missing implies DISABLED, not ENABLED
>> for backwards compatibility with older clients.
> Mark, certainly there is a bug - but not here. It's just a matter of
> wrongly treated Enabled state in remote server code. Will fix.
>Fixed in SVN. ------------------------------------------------------------------------------ November Webinars for C, C++, Fortran Developers Accelerate application performance with scalable programming models. Explore techniques for threading, error checking, porting, and tuning. Get the most from the latest Intel processors and coprocessors. See abstracts and register http://pubads.g.doubleclick.net/gampad/clk?id=60136231&iu=/4140/ostg.clktrk Firebird-Devel mailing list, web interface at https://lists.sourceforge.net/lists/listinfo/firebird-devel
