I am using an older ECT version 6.2.8 asp which is not practical to update due to many mods and I only use the add to cart button anyway. I am on a dedicated server, SSL certificate and was PCI compliant using TLS1.2. My Windows hosting company deleted TLS1.0 and 1.1 from the server which broke my database connection and the only fix was to reinstall the earlier versions. The hosting company tell me the client software needs to be updated.
It appears that others have had similar problems. Can I remedy this by putting the script <script type="text/javascript" src="/js/ectcart.js"></script> in the head of all my pages and installing ectcart.js in my JS folder?
Is there any way of testing to see if this works before deleting the earlier TLS versions again which was a nightmare.
Thank you...Michael www.batterycanada.com

Hi Michael

You would need to do a full ECT update to be able to use ectcart.js.

You could make a copy of your site and database and test any changes there first.

I'll move this thread to the ASP forum as it may get missed later on here.

Andy

Please feel free to review / rate our software

Thank you for replying Andy. How can I modify my existing version to deal with this TLS issue?

There isn't really a workaround regarding updating but what sort of mods do you have in case those are now included as standard?

Andy

Please feel free to review / rate our software

Andy,
I have dozens of mods. The last time an update was done there were many problems making it work again particularly with regard to the flat rate shipping I use because there are a number of flat rates. It drove your developer to distraction.
Michael

quote:

---

The hosting company tell me...

---

They are wrong. Is this using a Microsoft SQL database? If so, what version? What style of database connection?

Peter

ServeLink
Professional ecommerce web hosting for ASP & PHP
https://servelink.com

Take a look at our image upload/resize tool for the ASP cart
https://servelink.com/clients/cart.php?gid=7

Peter,
It is a MYSQL 5.3.12 with an OBDC connection which broke when the old TLS was deleted.
How are they wrong about the issue?
Thanks...Michael

I don't think there ever was a MySQL server version 5.3.12, MariaDB maybe, but either way it is pretty old and is likely to have trouble with TLS v1.2. While I wouldn't recommend running a business site on unpatched six year old cart software, I believe you resolve this by looking at your hosting stack first.

Peter

ServeLink
Professional ecommerce web hosting for ASP & PHP
https://servelink.com

Take a look at our image upload/resize tool for the ASP cart
https://servelink.com/clients/cart.php?gid=7

The problem is not with TLS1.2 which works fine but with the old version TLS1.0 which cannot be deleted from the sever without breaking the database connection.
Michael

Will support for TLS 1.3 require another ECT update?
Michael

[quote]Will support for TLS 1.3 require another ECT update?[/quote]
I look after a few ECT stores & I have just checked two of them & they are running fine with Lets Encrypt certificates using TLS1.3

Will - Bolton Manchester UK

quote:

---

Will support for TLS 1.3 require another ECT update?

---

ECT won't need an an update for TLS v1.3 any more than it needed an update for TLS v1.2, this is purely a server side matter. But TLS v1.3 isn't yet implemented in any version of Windows Server yet, so it's a bit premature to be be considering that. We'll have it available on Linux in the summer. but for Windows it's a case of waiting for Microsoft to update schannel. If you want it now you'll have to put your Windows Server behind an nginx proxy, or something like that.

Peter

ServeLink
Professional ecommerce web hosting for ASP & PHP
https://servelink.com

Take a look at our image upload/resize tool for the ASP cart
https://servelink.com/clients/cart.php?gid=7

Peter,
So you are saying that updating my ECT it would have nothing to do with this problem with the host deleting TLS 1.0 and losing my database connection?

I don't know of any relation between the TLS version and the database connection - can you post here what you have, replacing any identifiable information with "xxxxxxxx" - just so we can see what format you are using?

Andy

Please feel free to review / rate our software

I don't believe this has anything to do with the ECT shoppingcart software version, though updating would be a very good idea if you are on v6.2.8 for security reasons. But it may well be to do with the SQL Server version. Have a look at this post for instance...
https://community.ipswitch.com/s/article/SQL-server-connection-issues-after-disabling-TLS-1-0

Vince

Click Here for Shopping Cart Software
Click Here to sign up for our newsletter
Click Here for the latest updater

TheOBDC DSN is:
<%
sDSN = "driver={SQL Server};server=localhost;uid=........;pwd=..........;database=batterycanadadev"
%>
It uses a MySQL OBDC connector to a MSSQL server 12.0.5000.0

The problem has been resolved with the help of Mike Beebe who created an updated connection script on ECT which allowed the host to delete the old versions of TLS.
Thank you guys for all your help.
Michael