Questions tagged [ssl]
Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.
209
questions
0
votes
1
answer
11
views
Does the client certificate need to be signed by the server certificate?
I am connecting to a GCP Cloud SQL instance using a client certificate issued by the GCP Cloud SQL service. When I created the client key-pair GCP Cloud SQL gave me three files: a server certificate, ...
0
votes
1
answer
129
views
How do i disable SSL on MySQL Community 8.0.36 on Ubuntu 23.10?
I wasn't paying attention when I was presented with the option to generate credentials for operating via SSL. Having gone through the whole process, I was advised to follow-up on installing ...
0
votes
0
answers
30
views
I am able to login using server, client and x509 authentication in MongoDB community edition
I am trying to configure x509 authentication for mongodb community edition. Though I have configured the same, I am able to login using server as well as client authentication along with x509 auth. Is ...
0
votes
0
answers
37
views
MySQL connections fail when using SSL after upgrading to MySQL 8
I have a database running 8.0.36 (recently upgraded from 5.7).
On the source Database I create three users:
One wthout SSL, One with REQUIRE SSL, and One with REQUIRE ISSUER.
CREATE USER 'ssl_test1'@'%...
0
votes
0
answers
8
views
MySQL Upgrade on Windows and now SSL_CTX_set_default_verify_paths failed error
I am in the process of upgrading my databases from MySQL 5.7 to MySQL 8.0.
One of them is running on windows. Replication was previously set up as:
change master to
. . .
master_ssl_ca="c:/mysql/...
0
votes
0
answers
16
views
MySQL Multi-Source Replication errors via SSL
I have MySQL Multi-Source Replication (bare metal Ubuntu 22.04.2)with 140+ replication channels. Everything worked great until we switched replication to an SSL connection. After this, channels ...
0
votes
2
answers
159
views
mongodump refuses to connect with ssl
I have set up my mongod instance with the following config:
net:
port: 27017
bindIp: 0.0.0.0
ssl:
mode: requireSSL
PEMKeyFile: /config/mongo.pem
CAFile: /config/ca.pem
...
0
votes
1
answer
1k
views
[ODBC SQL Server Driver][DBNETLIB] SSL Security Error - Windows 2003 App Server to Remote SQL Server 2022 Connection
We have migrated the application databases from an old SQL Server 2000 instance running on Windows 2003 to a new SQL Server 2022 instance running on Windows 2022. The application tier has a number of ...
0
votes
0
answers
15
views
Need to build MySQL replication with TSL cert between onPremises server as Master and Azure flex server as Slave
I have a requirement
Need to build MySQL replication with TSL cert between onPremises server as Master and Azure flex server as Slave .
On Master & slave host ssl is enabled . also i have followed ...
3
votes
1
answer
613
views
Explanation of Mysql SSL connection for users created with "REQUIRE SSL"
I'm trying to understand the working of SSL while trying to connect to a MySQL server (via mysql-connector-python). I have MySQL (v5.7) and I have 2 users. One (root) is the default user and the other ...
0
votes
0
answers
33
views
How can I enable server certificate verification when connecting to a remote host, but not when connecting via localhost?
When I add ssl-verify-server-cert to a [client-mariadb] section in the configuration files, the client correctly verifies the server certificate when connecting to a remote MariaDB instance.
When ...
0
votes
0
answers
27
views
How can I get more verbose TLS certificate errors with MariaDB?
When attempting to connect to MariaDB from a remote client (command line on another server), I get the rather unhelpful:
ERROR 1045 (28000): Access denied for user 'myuser'@'mydomain.com' (using ...
0
votes
0
answers
10
views
What is the Strategy for Rotating MySQL 5.7 certs with Active/Passive Pool?
Aside from migrating while we upgrade to 8.0, which is an option, what have people done workflow/strategy to rollout and rotate MySQL SSL credentials with zero downtime?
0
votes
0
answers
28
views
MySQL 8.1 does not let me login to my client after I disabled the SSL
I was facing some issues in my project due to the SSL being enabled so I followed the instructions given in other stack exchange questions to edit my my.ini file and add (# Disable SSL) skip_ssl but ...
0
votes
0
answers
125
views
JDBC connection to MariaDB over SSL/TLS
I have an application that I'm trying to connect to MariaDB with a JDBC driver over SSL. I have set the following parameters in the custom.cnf of my MariaDB server:
ssl_ca=/certs/ca-cert.pem
ssl_cert=/...
0
votes
0
answers
82
views
SSL-mode without CA-cert?
I am on DigitalOcean managed databases and they allow to download a CA cert for connecting securely. I am new to this.
In TablePlus I can set SSL-mode to required and still connect without any cert. ...
1
vote
1
answer
50
views
Unknown, Un-encryted Connections [duplicate]
We have SSL enabled on our SQL servers and our monitoring tool is alerting that there are unencrypted connections.
The check that monitors this runs every minute and uses the following query to check:
...
2
votes
2
answers
381
views
The server did not preserve SSL encryption during a recovery attempt, connection recovery is not possible
We are starting to get the error message
The server did not preserve SSL encryption during a recovery attempt, connection recovery is not possible
from our MS SQL Server 2019 15.0.4298.1 instance. We ...
0
votes
1
answer
889
views
Does server SSL certificate update require SQL Service restart
This seems like such a basic question but I'm not finding it anywhere else on the site so apologies in advance if this is a repeat.
Some co-workers and I are trying to determine if a restart of the ...
0
votes
1
answer
433
views
Unable to start MySQL with SSL support
I've generated a handful of certificates for my MySQL 8.0.30 (mysql-server.x86_64 8.0.30-1.module+el8.6.0+16523+5cb0e868 @rhel-8-for-x86_64-appstream-rpms) on RHEL 8.7 and I'm running into an issue...
...
0
votes
0
answers
53
views
PhpMyAdmin doesn't encrypted on login
I have server on DO. I already use ssl https. On url showing my ssl was running but when I login to my phpmyadmin, why login information showing without encrypted?
I also add $cfg['ForceSSL'] = true; ...
2
votes
1
answer
449
views
Is there a way for mongodb clients to connect to mongodb server (SSL/TLS enabled) without client certificates?
I am trying to setup a MongoDB with SSL/TLS enabled. I'm just wondering is there a way for clients to connect to my mongodb server without having a client certificate that would not compromise the ...
1
vote
1
answer
444
views
How to automatically add TLS certificates to Oracle wallets?
When accessing external webservices via HTTPS via the Oracle database you need to add the corresponding certificate to a database wallet to prevent a certificate validation error. When one creates an ...
0
votes
0
answers
1k
views
PostgreSQL connection accepted without providing SSL certificates
Hopefully someone might be able to shed a light on this problem.
I've configured two servers, both of them have the same problem.
I've implemented SSL configuration, on PostgreSQL 11.18, I have ...
1
vote
1
answer
101
views
Does cassandra support CN and FQDN verification (node-to-node ssl)?
I have a question regardless cassandra node-to-node ssl encryption.
Currently I test node-to-node ssl. I set up self-signed certs with CN test-node-1.example.com which is the same as FQDN of the ...
4
votes
1
answer
1k
views
Is SQL Server affected by OpenSSL 3.0 Vulnerabilities: CVE 2022-3786 and CVE 2022-3602
I am trying to establish whether SQL Server is affected by the recently discovered OpenSSL vulnerabilities. For example, are SQL Servers that are using TLS/Certificates to encrypt connections between ...
1
vote
1
answer
1k
views
MySQL Server Cannot Verify SSL Certificate
I'm trying to configure a mysql server for secure remote connections over TCP/IP using SSL. The server mysql runs on has a domain name associated with it which i have requested a certificate for from ...
0
votes
1
answer
2k
views
Postgres SSL client certificate - database server CA failed to start
I want to configure SSL so that clients can only require certificate signed by root CA ca.crt, then every client must use their issued e.g. cert postgresql.crt, key postgresql.key and password to ...
0
votes
1
answer
170
views
How to create certificate request with "not after" parameter for Db2 SSL/TLS?
I have configured Db2 v11.5.7.0 on Linux/x64 to use SSL/TLS protocol and Db2 client can successfully connect to Db2 server using SSL/TLS. Now I would like to test certificate renewal. I need to create ...
-1
votes
1
answer
785
views
Proper way to setup oracle database for TCPS SSL in local machine
I am using oracle database 12c and would like to setup TCP SSL connection to be able to connect using the same machine where the database is hosted. So, connection would be from database machine to ...
1
vote
1
answer
12k
views
How to connecto DBeaver with Db2 using SSL self-signed certificate?
On Db2 v11.5.7.0 Linux/x86 server I have configured SSL using self-signed certificate following official IBM documentation https://www.ibm.com/docs/en/db2/11.5?topic=transit-tls-configuration-db2
I ...
0
votes
1
answer
457
views
Failing to enable TCPS on Oracle 11
I have added the following settings to my Oracle 11 server (Bolded text is the change)-
sqlnet.ora-
SQLNET.AUTHENTICATION_SERVICES = (**TCPS,** NTS)
listener.ora-
SID_LIST_LISTENER =
(SID_LIST =
...
0
votes
1
answer
2k
views
postgres: could not access directory "C:/opt/PostgreSql/14/data": Permission denied
Importantly: This is on Windows 10 and Postgres 14 (for newbies, Postgres is also known as PostgreSQL), with Cygwin providing the CLI.
On a fully functional, up and running, and apparently perfectly ...
1
vote
1
answer
88
views
SSL Encryption for Kafka Pipelines
Any [SingleStore] users out there?
For enabling SSL encryption (only) for Kafka pipelines, we created the pipeline like below:
CREATE PIPELINE `kafka_ssl`
AS LOAD DATA KAFKA '<kafka-host>:<...
0
votes
1
answer
111
views
Does manual failover of availability group bind an SSL certificate?
I'm trying to find the least intrusive way to bind a new SSL certificate to an Always On Availability Group 3-node cluster. After applying the new certificate, a message appears that SQL Server will ...
0
votes
0
answers
372
views
Generate MySQL/MariaDB SSL certificates from my wildcard certificate (*.mycompany.com)
I'm configuring a series of MariaDB servers with SSL protection. I was able to do it creating different self-signed certificates, as everybody can do just following some of the multiple tutorials you ...
4
votes
1
answer
160
views
Is an SSL Certificate Authority Chain "Secret"
We've recently signed up to use MariaDB's SkySQL package, however are new to the use of SSL Certificate Chains when connecting (having only really used SSH tunnels in the past).
We have the key which ...
0
votes
1
answer
2k
views
How do I configure DB2 on Windows with SSL so that I can connect via ODBC?
DB2 11.5 running on Windows Server 2016 Standard
SQL Server 14.0.3430.2
I'm able to set up ODBC with some DB2 databases, but when the DB2 database is secured with an SSL certificate, which they call ...
1
vote
1
answer
770
views
Should a client connecting to a server via a unix-socket be encrypted?
Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf
[mysqld]
socket = /run/mysqld/mysqld.sock
I'm considering these options, but I'd prefer not to ...
2
votes
1
answer
1k
views
SQL Server Profiler - Client unable to establish connection
Spanking brand-new installations of:
Visual Studio 2022 Community (VS)
SQL Server 2019 Dev (SQL)
SQL Server Management Studio v18.10 (SSMS)
There are no other Visual Studio or SQL Server instances ...
3
votes
2
answers
4k
views
After installing a new SSL certificate, my MSSQL server is no longer able to be restarted
I installed a SSL certificate using a pfx file, taking the hash and putting it inside the certificate key of SuperSocketNetLib, I restarted the MSSQL server using the MSSQL Management Tool, and upon ...
0
votes
3
answers
2k
views
Setup Secure LDAP over SSL/TLS (LDAPS) for PostgreSQL
Haven’t had much luck while trying several ways to implement LDAPS for PostgreSQL.
pg_hba.conf
hostssl all +test_ldap 0.0.0.0/0 ldap ldapserver=dc2.ad.foobar.com ldapport=636 ldapscheme=ldaps ldaptls=...
0
votes
1
answer
2k
views
MongoDB TLS unable to get issuer certificate
I'm setting up a MongoDB server, and wanted to use TLS from a proper CA and DNS.
I got a domain name and put an A record in, linking to my server. Afterwards, I applied for a SSL certificate on ...
0
votes
1
answer
118
views
Can SQL server verify client with SSL cert, that tries to connect to it?
Pretty sure that it's stupid question, but still would be very happy to get answer or some explanation or point to the documentation.
Right now I'm configuring SSL connection to PostgreSQL server with ...
1
vote
0
answers
161
views
PostgreSQL cannot work when opens SSL on Windows 10
I am not sure this topic will fit here but I don't know ask it where.
I am trying to open the SSL of PostgreSQL 10.16 on Windows10.
I read a lot of documents about creating an SSL certificate to ...
0
votes
0
answers
1k
views
Postgres: ODBC: ERROR: SSL connection has been closed unexpectedly; Error while executing the query
I'm currently in Australia and so is the database.
Staff attempting to connect to the database from overseas (USA, UK) consistently run into the error: ERROR: SSL connection has been closed ...
0
votes
1
answer
356
views
MySQL SSL Setup
I am using the MySQL 5.7 SSL Setup Guide (combined with a few other guides on the website + google searches).
I have a replica and source working, I am now trying to configure SSL.
My understanding is ...
1
vote
1
answer
114
views
SQL Server Secure and Unsecure Traffic Configuration Help
I have a SQL Server 2017 instance that I have configured to listen on multiple ports 1433 and 1234. I would like to know if its possible to have one port (1234) accept only secure connections while ...
0
votes
1
answer
532
views
Connect windows 2000 to sql server 2016
I have a really old piece of industrial equipment that connects from windows professional to a sql server 2008r2 on win 2008R2, not completely patched.
We cannot replace the windows 2000, but would ...
1
vote
1
answer
854
views
Not able to connect to Mongodb vie mongo shell
I am no able to connect to mongodb via mongo shell.
command:
sudo mongo --tls --tlsCertificateKeyFile server.pem --tlsCAFile CA_INTERMEDIATE --host "mongodb://xxx:xxx@some-url:27020/data_base?ssl=...