Set appropriate value to requestedEncryptionLevel for encrypt=STRICT

microsoft · Feb 7, 2025 · 4dbaeee · 4dbaeee
1 parent 25ea8da
commit 4dbaeee
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/src/main/java/com/microsoft/sqlserver/jdbc/SQLServerConnection.java b/src/main/java/com/microsoft/sqlserver/jdbc/SQLServerConnection.java
@@ -4147,7 +4147,11 @@ void prelogin(String serverName, int portNumber) throws SQLServerException {
         final byte fedAuthOffset;
         if (fedAuthRequiredByUser) {
             messageLength = TDS.B_PRELOGIN_MESSAGE_LENGTH_WITH_FEDAUTH;
-            requestedEncryptionLevel = TDS.ENCRYPT_ON;
+            if (encryptOption.compareToIgnoreCase(EncryptOption.STRICT.toString()) == 0) {
+                requestedEncryptionLevel = TDS.ENCRYPT_NOT_SUP;
+            } else {
+                requestedEncryptionLevel = TDS.ENCRYPT_ON;
+            }
 
             // since we added one more line for prelogin option with fedauth,
             // we also needed to modify the offsets above, by adding 5 to each offset,