sql-server - 如何保护 Vb6 应用程序和 mssql 服务器之间的连接？

Question

我正在开发一个遗留应用程序，它使用 sqloledb 提供程序和 activex 数据对象连接到 mssql 数据库。现在我需要加密应用程序和服务器之间的连接，而无需在 sql server 中使用强制加密选项。

我已经在 sql server 实例中安装了自签名证书并尝试将 Encrypt=true和 Trustservercertificate=true在连接字符串中。但连接未加密。

我曾尝试将 ODBC 提供程序与 ADO 一起使用，同时使用 encrypt=true和 trustservercertificate=true ，我收到打开连接的 SSL 安全错误。

请告诉我如何使用 ADO 2.8 库建立安全连接。

Private Sub Command1_Click()
    Dim sConnectionString As String
    Dim strSQLStmt As String

     '-- Build the connection string
     'sConnectionString = "UID=userid;PWD=password;Initial Catalog=EHSC_SYM_Kings_Development;Server=EHILP-257\MIB14;Provider=MSOLEDBSQL;Encrypt=YES;trustServerCertificate=YES"
     'sConnectionString = "Provider=sqloledb;Data Source=192.168.27.91\MIB14;Initial Catalog=EHSC_SYM_Kings_Development;User Id=userid;Password=password;Encrypt=YES;trustServerCertificate=YES"
     'sConnectionString = "driver={SQL Server};server=192.168.27.91\MIB14;user id=userid;password=password;Initial Catalog=EHSC_SYM_Kings_Development;Encrypt=Yes;trustServerCertificate=True"
     sConnectionString = "Provider=SQLNCLI11;Server=192.168.27.91\MIB14;Database=EHSC_SYM_Kings_Development;Uid=userid;Pwd=password;Encrypt=yes;trustServerCertificate=True"

     strSQLStmt = "select * from dbo.patient where pat_pid = '1001'"

    'DB WORK
    Dim db As New ADODB.Connection
    Dim cmd As New ADODB.Command
    Dim rs As New ADODB.Recordset
    Dim result As String

    db.ConnectionString = sConnectionString
    db.Open 'open connection

    With cmd
      .ActiveConnection = db
      .CommandText = strSQLStmt
      .CommandType = adCmdText
    End With

    With rs
      .CursorType = adOpenStatic
      .CursorLocation = adUseClient
      .LockType = adLockOptimistic
      .Open cmd
    End With

    If rs.EOF = False Then
        rs.MoveFirst
        Let result = rs.Fields(0)
    End If
    'close conns
    rs.Close
    db.Close
    Set db = Nothing
    Set cmd = Nothing
    Set rs = Nothing
End Sub

Answer 1

谢谢大家的建议，我终于设法通过将驱动程序更改为 sqlserver native client 11(ODBC) 来确保连接安全。看起来 sqloledb 不支持 tls。将驱动程序更改为 ODBC 似乎并没有太大改变行为。我的其余代码无需任何更改即可正常工作

sConnectionString = "Driver={SQL Server Native Client 11.0};Server=192.168.27.91\MIB14;Database=xxxxxxxx;user id=xxxxxxx;password=xxxxxxxxx;Encrypt=yes;TrustServerCertificate=yes"