Subject Re: [firebird-support] Wirecrypt
Author Helen Borrie
Wednesday, October 18, 2017, 9:52:36 AM, DFergATL@... wrote:

> I am a newbie, like a total newbie just exploring databases for the
> first time. I am using Lazarus and they all seem to prefer Firebird
> and lot of the documentation is geared that way. I have
> successfully downloaded and installed Firebird onto ElementaryOS
> Loki. I am trying to use DB Scema but can't connect to firebird
> from there. I can connect to sqlite from dbscema and I can
> connect to firebird from Flamerobin. I get the error:

> ncompatible wire encryption levels requested on client and server
> Incompatible wire encryption levels requested on client and server
> [SQLState:28000, ISC error code:335545064]
>
You CAN or you cannot connect from FlameRobin?

> I then followed these instruction and changed my firebird.conf file
> to "Wirecrypte = Enabled" as seen here:

Hopefully you didn't add that extraneous letter 'e' to the parameter
name. And you removed the '#' character from that line.

> - https://www.firebirdsql.org/ file/documentation/drivers_
> documentation/java/3.0.2/ release_notes.html#notes-on- firebird-3-support

If you want to enable wire encryption, you will need to have two
things in addition to enabling it in firebird.conf:

1. the fbclient.so that comes with Firebird 3. Older Firebird
versions do not support wire encryption.

2. a language interface layer that knows about Fb3 wire encryption so
that the application can pass it in the API.

For FlameRobin, you need fbclient.so: the 64-bit version if you are
using 64-bit FR; otherwise, you need the 32-bit version. You match
the bitness of the client to the bitness of your application, not the
bitness of the Firebird server.
Unfortunately, if you have installed the 64-bit Firebird server and
need the 32-bit client, you'll have to grab the x86 kit from the
download area and extract the client from it. For some reason that
totally escapes me, we still do not provide any client-only kits in
the download area.

> But I still can't connect. I also tested with DBerver but have the
> same problem. I downloaded and installed the java driver to version
> 3.0.2. But still no success at all. I have no idea what t o do.
> All the programs I have tried to use to connect to Firebird don't
> work and they all tell me to come here.

You've named some applications I've never heard of. Are you sure they
actually support Firebird? If they claim to do so, check what driver
they need, e.g., ODBC, Python, etc.

In the case of Jaybird, you have both the client and the language
interface rolled into one. Jaybird supports the API natively.
However, it appears Jaybird does not support wire encryption yet. To
ask about that, subscribe to the firebird-java support list, see
https://www.firebirdsql.org/en/mailing-lists/

> I would attach the firebird.conf but there doesn't seem to be a way
> to do that. the firebird conf that I found was in
> /etc/firebird/firebird3.0

The Firebird 3 installer script didn't put it there but possibly
FlameRobin or Jaybird did. Some client interfaces need to read
firebird.conf. It won't conflict with the server's firebird.conf, per
se, but it would pay to keep the one used by the client app consistent
with the one used by the server.

> I also found an other firebird.conf in /opt/firebird/.

That's the one the installer put there.

> I h ave no idea why there would be two of them. I
> have only ever installed FB once. I have tried changed the
> Wirecrypt on both, then on one then the other.

If you change a configuration setting you have to restart the Firebird
server, unless you are running Classic. (But, if you didn't change the
ServerMode parameter, then you are running Superserver and you DO need
that restart.) If FR or another app is depending on the settings in
its own firebird.conf file then you;d probably need to restart that
app after changing that file, too.

Another possibility is that the FlameRobin package you installed is
pre-Firebird 3.0 and has installed an old fbclient.so in its WD. So
check that as well.

I strongly recommend that you study the two PDF books in
/opt/firebird/doc. There you have the Quick Start Guide and the
release notes. Our release notes are very detailed.

Helen