Issue Details (XML | Word | Printable)

Key: CORE-672
Type: Improvement Improvement
Status: Closed Closed
Resolution: Fixed
Priority: Major Major
Assignee: Alexander Peshkov
Reporter: Pavel Cisar
Votes: 1
Watchers: 3
Operations

If you were logged in you would be able to see more operations.
Firebird Core

"Over the wire" connection encryption

Created: 17/Sep/03 12:00 AM   Updated: 19/Jan/16 05:11 AM
Component/s: Engine
Affects Version/s: None
Fix Version/s: 3.0 Alpha 1

SF_ID: 807964
Target: 3.0 Beta 1
QA Status: No test


 Description  « Hide
SFID: 807964#
Submitted By: pcisar

Using one of the standard crypt libraries: SSL, NSS...
----------------------
User: bacuz
Logged In: YES
user_id=844639

For this use ZeBeDee that is a very simple FREE program
that
implements tunneling using Blowfish encryption and ZLib
compression. It makes "over the wire" Firebird connections
much faster and secure. (I'm using this in my over the
wire
connections to IB).

You can get it on:

http://www.winton.org.uk/zebedee/
----------------------
User: nobody
Logged In: NO

for intranets, is there a solution? (shared intranet
without a firewall between the two sides) -- modifying
ibclient and redistributing one that supports
encryption ... is unlikely.
----------------------
User: nobody
Logged In: NO

AFAIK, you can acomplish this by using stunnel/ssl (to
encript the IB packets).
----------------------
User: nobody
Logged In: NO

And Zlib compression for modem connections ;->

 All   Comments   Change History   Subversion Commits      Sort Order: Ascending order - Click to sort in descending order
Alice F. Bird added a comment - 14/Jun/06 09:41 AM
Date: 2003-11-14 14:42
Sender: carlosga_fb
Logged In: YES
user_id=626355

Another good option for implement this can be the use of
OpenSSL that allows SSL/TLS connections.

danielrail added a comment - 16/Jul/10 03:47 PM
In the U.S., the new meaningful use rules(for the healthcare industry) now dictates that this a feature that a user needs to have the capability to activate. And, SSL/TLS would be accepted.

Alexander Peshkov added a comment - 24/Feb/12 11:23 AM
Implemented plugin interface for wire crypt plugins.
Implemented alleged RC4 plugin, which can use keys, created by SRP authentication plugin during authentication.