MSSQL and KB3163018

Question

_{Friday, June 17, 2016 11:51 AM}

After installing KB3163018 on Win10, the MSSQL2008R2 connection from Java front end doesn't work anymore.

I get:

The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "java.lang.RuntimeException: Could not generate DH keypair". ClientConnectionId:1f43c854-7824-4007-8cd9-38714549125c

The only way to fix it on short term is uninstalling the KB and block it. Updating the SQL Driver to the latest version doesn't fix it. Changing the front end Software is no solution on short term.

I need a solution for my 5000 customers soon.

All replies (4)

_{Friday, June 17, 2016 5:57 PM ✅Answered}

Are you still using Java 7?

There was a problem with DH algorithm and primes >1024 bit in older Java versions, and probably MSSQL server now uses a more secure 2048bit setting.

_{Thursday, June 23, 2016 2:03 AM ✅Answered}

Hi McMicha,

Take a look at the following KB:

https://support.microsoft.com/en-us/kb/3165191

See if any changes metioned in the KB above would have effects at your side.

Regards

Please mark the reply as an answer if you find it is helpful.

If you have feedback for TechNet Support, contact [email protected]

_{Wednesday, June 22, 2016 7:00 AM}

Yes, it's an older JRE. Changing the JRE is not a solution now...

This Problem came up with KB3163017 & KB3163018.

_{Wednesday, July 6, 2016 9:16 PM}

We are having to use the short term fix of uninstalling the KB, is there any news on when a permanent fix will be available?