ODBC: Client TLS certificate can not be specified using SSLCERTIFICATE parameter
Details
| Detail name | Value |
|---|---|
| Changelog Number | 13442 |
| Type | Bug |
| Status | Resolved |
| Affected Versions | Exasol 7.1.2 |
| Fix Versions | Exasol 7.1.3 |
| Resolution Date | 2021-11-26 |
Description
A secure TLS connection using the ODBC driver cannot be established using the certificate specified via the argument SSLCERTIFICATE.
Workaround
There are several options
- Set LegacyEncryption to Y to fallback to ChaCha encryption instead of TLS
- Set Encryption to N to use unencrypted connections
- Install the certificate in the system (root) store.
- Set SSLCERTIFICATE to SSL_VERIFY_NONE to use a secure TLS connection but without validating the certificate
- Use the fingerprint to establish an connection.
Fix
ODBC connections correctly use the TLS certificate specified via the argument SSLCERTIFICATE, allowing to establish a secure TLS connection.