Connection Option Descriptions : Crypto Protocol Version

Crypto Protocol Version

Attribute

CryptoProtocolVersion (CPV)

Purpose

Specifies a comma-separated list of the cryptographic protocols to use when SSL is enabled using the Encryption Method connection option (EncryptionMethod=1 | 6 | 7). When multiple protocols are specified, the driver uses the highest version supported by the server. If none of the specified protocols are supported by the database server, driver behavior is determined by the Encryption Method connection option.

Valid Values

cryptographic_protocol [[, cryptographic_protocol ]...]

where:

cryptographic_protocol

is one of the following cryptographic protocols:

TLSv1.2 | TLSv1.1 | TLSv1 | SSLv3 | SSLv2

Caution: Good security practices recommend using TLSv1 or higher, due to known vulnerabilities in the SSLv2 and SSLv3 protocols.

Example

If your security environment is configured to use TLSv1.2 and TLSv1.1, specify the following values:

CryptoProtocolVersion=TLSv1.2, TLSv1.1

Notes

This option is ignored if encryption is disabled (EncryptionMode=0).

Consult your database administrator concerning the data encryption settings of your server.

Default

TLSv1.2,TLSv1.1,TLSv1,SSLv3

GUI Tab

Security tab