BlackBerry® Professional Software and BlackBerry® Enterprise Server Express

[foolsama]

To better protect our environment from SSL attacks, we have disabled TLS 1.0, TLS 1.1, PTC 1 and SSL 2.0.

After restarting the server, we get the following error logged in the Application log:

Log Name:      Application Source:        BlackBerry MDS Connection Service Date:          10/4/2012 5:12:13 AM Event ID:      15000 Task Category: None Level:         Error Keywords:      Classic User:          N/A Computer:      server.domain.local Description: <2012-10-04 04:12:13.947 GMT-05:00>:[84]:<MDS-CS_Instance_MDS-CS_1>:<ERROR>:<LAYER = SCM, com.microsoft.sqlserver.jdbc.SQLServerException: The driver could not establish a secure connection to SQL Server by using Secure Sockets Layer (SSL) encryption. Error: "SQL Server returned an incomplete response. The connection has been closed.".>

Is there a workaround that I can force Blackberry to use stronger handshake?  Or must I re-enable one of the lesser protocols?

[knottyrope]

What version BES?

What version mail server?

this might help

BlackBerry Administration Console is unavailable and the BAS-AS log shows "Error: The TDS protocol s...

[foolsama]

BES Express version 5.0.3

Exchange 2007, hosted on Server 2008 vanillla running on MSSQL 2005.  Blackberry, SQL and Exchange are all on the same server.

[knottyrope]

---

knottyrope wrote:

this might help

BlackBerry Administration Console is unavailable and the BAS-AS log shows "Error: The TDS protocol s...

---

did the above help at all?

[foolsama]

No - the article says the resolution is to upgrade to SP3, which we are on already. 

Second, the SQL server is already on the same server as BESX, which is one of the workarounds provided.

[knottyrope]

See if this helps

http://blogs.msdn.com/b/jdbcteam/archive/2008/09/09/the-driver-could-not-establish-a-secure-connecti...