TlL1.2 previous version removal broke db connectio

Author	« Topic »
Midas Starting Member Canada 33 Posts	Posted - 03/14/2019 : 09:20:50 I am using an older ECT version 6.2.8 asp which is not practical to update due to many mods and I only use the add to cart button anyway. I am on a dedicated server, SSL certificate and was PCI compliant using TLS1.2. My Windows hosting company deleted TLS1.0 and 1.1 from the server which broke my database connection and the only fix was to reinstall the earlier versions. The hosting company tell me the client software needs to be updated. It appears that others have had similar problems. Can I remedy this by putting the script <script type="text/javascript" src="/js/ectcart.js"></script> in the head of all my pages and installing ectcart.js in my JS folder? Is there any way of testing to see if this works before deleting the earlier TLS versions again which was a nightmare. Thank you...Michael www.batterycanada.com
Andy ECT Moderator 95440 Posts	Posted - 03/14/2019 : 09:43:59 Hi Michael You would need to do a full ECT update to be able to use ectcart.js. You could make a copy of your site and database and test any changes there first. I'll move this thread to the ASP forum as it may get missed later on here. Andy Please feel free to review / rate our software
Midas Starting Member Canada 33 Posts	Posted - 03/14/2019 : 10:14:27 Thank you for replying Andy. How can I modify my existing version to deal with this TLS issue?
Andy ECT Moderator 95440 Posts	Posted - 03/14/2019 : 10:52:24 There isn't really a workaround regarding updating but what sort of mods do you have in case those are now included as standard? Andy Please feel free to review / rate our software
Midas Starting Member Canada 33 Posts	Posted - 03/14/2019 : 11:38:43 Andy, I have dozens of mods. The last time an update was done there were many problems making it work again particularly with regard to the flat rate shipping I use because there are a number of flat rates. It drove your developer to distraction. Michael
insight ECT Moderator USA 4479 Posts	Posted - 03/14/2019 : 14:38:58 quote: The hosting company tell me... They are wrong. Is this using a Microsoft SQL database? If so, what version? What style of database connection? Peter ServeLink Professional ecommerce web hosting for ASP & PHP https://servelink.com Take a look at our image upload/resize tool for the ASP cart https://servelink.com/clients/cart.php?gid=7
Midas Starting Member Canada 33 Posts	Posted - 03/14/2019 : 16:45:31 Peter, It is a MYSQL 5.3.12 with an OBDC connection which broke when the old TLS was deleted. How are they wrong about the issue? Thanks...Michael
insight ECT Moderator USA 4479 Posts	Posted - 03/14/2019 : 19:30:42 I don't think there ever was a MySQL server version 5.3.12, MariaDB maybe, but either way it is pretty old and is likely to have trouble with TLS v1.2. While I wouldn't recommend running a business site on unpatched six year old cart software, I believe you resolve this by looking at your hosting stack first. Peter ServeLink Professional ecommerce web hosting for ASP & PHP https://servelink.com Take a look at our image upload/resize tool for the ASP cart https://servelink.com/clients/cart.php?gid=7
Midas Starting Member Canada 33 Posts	Posted - 03/15/2019 : 11:00:17 The problem is not with TLS1.2 which works fine but with the old version TLS1.0 which cannot be deleted from the sever without breaking the database connection. Michael
Midas Starting Member Canada 33 Posts	Posted - 03/16/2019 : 11:10:58 Will support for TLS 1.3 require another ECT update? Michael
V45 Advanced Member United Kingdom 416 Posts Pre-sales questions only (More Details...)	Posted - 03/16/2019 : 11:29:42 [quote]Will support for TLS 1.3 require another ECT update?[/quote] I look after a few ECT stores & I have just checked two of them & they are running fine with Lets Encrypt certificates using TLS1.3 Will - Bolton Manchester UK
insight ECT Moderator USA 4479 Posts	Posted - 03/16/2019 : 13:25:16 quote: Will support for TLS 1.3 require another ECT update? ECT won't need an an update for TLS v1.3 any more than it needed an update for TLS v1.2, this is purely a server side matter. But TLS v1.3 isn't yet implemented in any version of Windows Server yet, so it's a bit premature to be be considering that. We'll have it available on Linux in the summer. but for Windows it's a case of waiting for Microsoft to update schannel. If you want it now you'll have to put your Windows Server behind an nginx proxy, or something like that. Peter ServeLink Professional ecommerce web hosting for ASP & PHP https://servelink.com Take a look at our image upload/resize tool for the ASP cart https://servelink.com/clients/cart.php?gid=7
Midas Starting Member Canada 33 Posts	Posted - 03/16/2019 : 17:29:52 Peter, So you are saying that updating my ECT it would have nothing to do with this problem with the host deleting TLS 1.0 and losing my database connection?
Andy ECT Moderator 95440 Posts	Posted - 03/17/2019 : 00:57:05 I don't know of any relation between the TLS version and the database connection - can you post here what you have, replacing any identifiable information with "xxxxxxxx" - just so we can see what format you are using? Andy Please feel free to review / rate our software
Vince Administrator 42874 Posts	Posted - 03/17/2019 : 07:12:04 I don't believe this has anything to do with the ECT shoppingcart software version, though updating would be a very good idea if you are on v6.2.8 for security reasons. But it may well be to do with the SQL Server version. Have a look at this post for instance... https://community.ipswitch.com/s/article/SQL-server-connection-issues-after-disabling-TLS-1-0 Vince Click Here for Shopping Cart Software Click Here to sign up for our newsletter Click Here for the latest updater
Midas Starting Member Canada 33 Posts	Posted - 03/17/2019 : 14:48:05 TheOBDC DSN is: <% sDSN = "driver={SQL Server};server=localhost;uid=........;pwd=..........;database=batterycanadadev" %> It uses a MySQL OBDC connector to a MSSQL server 12.0.5000.0
Midas Starting Member Canada 33 Posts	Posted - 03/19/2019 : 15:59:54 The problem has been resolved with the help of Mike Beebe who created an updated connection script on ECT which allowed the host to delete the old versions of TLS. Thank you guys for all your help. Michael
	« Topic »