Please start any new threads on our new site at https://forums.sqlteam.com. We've got lots of great SQL Server experts to answer whatever question you can come up with.

 All Forums
 SQL Server 2000 Forums
 SQL Server Administration (2000)
 SSL for Cluster sql server

Author  Topic 

pithhelmet
Posting Yak Master

183 Posts

Posted - 2008-02-21 : 17:19:07
Hi everyone -

We would like to place SSL on our clustered SQL server.

I have tried to install the .crt file
as outlined in this article

http://support.microsoft.com/kb/276553

on both nodes of the cluster, the sql server fails to start

a couple of articles states that the certificate must be a fully qualified domain name....

The certificate must be a server certificate that was issued to the fully qualified domain name (FQDN) of the server. You cannot use the IP address for the certificate name. A client computer must request the connection to the server by the FQDN or NetBIOS name of the server. You cannot connect to the server by using the IP address of the computer that is running SQL Server.


That being said.... the certificate we have only states...

xxx.com as the certificate name...

do i need to use the cluster name as well??

tia
tony

Heilly
Starting Member

1 Post

Posted - 2008-03-30 : 08:51:43
Hi there,

Is your problem solved? I'm facing the same problem like yours. Just found this article describing 3 bugs in SQL Server cluster for implementing SSL.

http://www.tech-archive.net/Archive/SQL-Server/microsoft.public.sqlserver/2004-08/0068.html

See if it's useful to you.
Go to Top of Page

pithhelmet
Posting Yak Master

183 Posts

Posted - 2008-03-31 : 09:03:34
Nope

I have tried several different types of SSL certs, from local inhouse creation to purchasing a wildcard SSL cert for the domain.

each one has failed to allow SQL to start.

One time it really got locked up and i had to remove the entire SQL instance from the cluster.

This is not going too well in implementation, so a call to MS might be in order.

thanks and good luck!

take care
tony

Go to Top of Page
   

- Advertisement -