Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.

learn more… | top users | synonyms

0
votes
1answer
408 views

Oracle 10gR2 - fix for SSL version following Poodle attack

We use Oracle utl_http to send https requests from within our database (10gR2). As SSLv3.0 is now considered insecure (POODLE) we need to upgrade to TLS. How can we ensure TLS usage when sending ...
5
votes
2answers
176 views

How to examine PostgreSQL server's SSL certificate?

Suppose there is a PostgreSQL server running and it has SSL enabled. Using "standard" Linux and PostgreSQL tools, how can I examine its SSL certificate? I'm hoping for output similar to what you ...
2
votes
1answer
26 views

How do you properly remove “REQUIRE SSL” from a single user?

I successfully granted REQUIRE SSL to a single user by doing... mysql -u"${targetMySqlUser}" -p"${targetMySqlPass}" -e "GRANT USAGE ON dbname.* TO 'dbusername'@'%' REQUIRE SSL;" but im failing on ...
0
votes
0answers
18 views

Replica set with SSL issues

I was able to set up a replica set with self signed certificates on Windows. However, I suspect there are some communication issues between primary and secondary. When I look at the log, I see ...
2
votes
1answer
171 views

MySQL 5.7 - Disable use of SSL connection

For some reason when setting up a server with MySQL 5.7, it was created to use SSL connections: have_ssl=YES, have_openssl =YES There is no SSL configured in my.cnf. How can I disable this option? ...
2
votes
1answer
64 views

Force PostgreSQL clients to use SSL on Amazon RDS

I'm running a PostgreSQL 9.4.x instance on Amazon RDS. I can successfully connect to that server using SSL using a command line similar to this one: psql "host=x.y.z.rds.amazonaws.com dbname=aaa ...
0
votes
0answers
19 views

how to force mysql 5.5 server to allow tls/ssl encrypted connections only?

given a mysql Server 5.5 community edition (which came with SLES 11sp4). i configured it to support TLS and it works fine. but i did not found any options or parameters to FORCE IT to do TLS/SSL ...
0
votes
1answer
35 views

PostgreSQL Client Certificate TLS error

PostgreSQL 9.4.6 OpenSSL 1.0.2f If my server or client certificate use SHA256, I get the following error on the client: psql: SSL error: tlsv1 alert decrypt error And the following log message ...
0
votes
0answers
20 views

Can't connect to MySQL server via SSL

I'm trying to connect to a MySQL server via SSL. I know the server is set up correctly to handle SSL connections because I can connect fine using MySQL workbench, PHP, and command line MySQL client ...
3
votes
1answer
113 views

What ciphers need to be enabled to install and run SQL Server 2014 SP1 on Windows 10? [duplicate]

Our organization is trying out Windows 10 and our distribution had some modifications to the ciphers in use due to recent security concerns. As it stands SQL Server 2014 Developer SP1 fails to ...
0
votes
0answers
15 views

How do I configure a MySQL login path with an SSL pem file using mysql_config_editor?

I am trying to configure a MySQL login path in a way that encrypts my password. I found the mysql_config_editor tool which does this. However, after going through the entire man page for that tool and ...
2
votes
1answer
480 views

SSL error during SQL Server install

During my SQL Server 2014 Enterprise installation efforts, I encountered an error near the end of the install that has prevented completion. A connection was successfully established with the ...
0
votes
0answers
19 views

Is it possible to install any recent MySQL version with --SSL=OFF?

This question has not been answered: MySQL 5.7 - Disable use of SSL connection How is it possible to "Disable use of SSL connection" in MySQL (free) version 5.7? If not, how many revisions back does ...
0
votes
0answers
21 views

MySQL 5.5 client SSL connection only works when adding cipher list argument, why?

I set up the packaged MySQL server 5.5 and client on two Ubuntu VM. I configured the server to support SSL. I can connect to the server with the MySQL CLI tool between the VMs, but the connection is ...
19
votes
5answers
7k views

SQL Server compatibility with New TLS Standards

The major browsers are moving beyond SSL3.0 and TLS1.0 . The PCI Security Council has declared an end-of-life date for these protocols to be considered sufficiently strong encryption. We need to ...
1
vote
1answer
53 views

Increase logging/tracing on Oracle 12c database

I need to connect TLS-secured-ly to an Oracle 12c (from some random Java program, using JDBC connection) I set up my listener to use TCPS, I made my wallet and everything and still my program is ...
2
votes
2answers
1k views

MySQL ssl setup failed

I am following word by word of http://dev.mysql.com/doc/refman/5.0/en/creating-ssl-certs.html for creating SSL certificates to setup SSL enable replication but it is not working for me. Steps which I ...
0
votes
0answers
40 views

SQL Server doesn't send intermediate SSL certificates

I am connecting to SQL Server (2008 R2) over open Internet and properly encrypting the connection is essential. I have COMODO certificate with two intermediate certificates between root CA and server ...
14
votes
4answers
17k views

SQL server service won’t start after disabling TLS 1.0 and SSL 3.0 [duplicate]

Because of security reasons, we disabled TLS 1.0 and older protocols on our windows, and enabled just TLS 1.1 and TLS 1.2 under the following registry path: ...
2
votes
0answers
17 views

TLS 1.2 with SQL Server 2008 [duplicate]

I have a VM where I use SQL Server 2008 as a black-box data store for a product I work with. I'm being told by my IT police that my VM is not (or will not be) secure in a short time unless I can ...
0
votes
1answer
181 views

pgbouncer 1.7 with TLS/SSL client and server connections

With settings borrowed from a similar server running Postgres 9.4.1 & pgbouncer 1.6.1, I have multiple users connecting to the database through pgbouncer on port 6543. I also have a second server ...
3
votes
0answers
64 views

Why does replication with SSL fail on my MySQL database in AWS RDS?

I'm trying to replicate from AWS RDS to my own server. It works without SSL. Whenever I include the SSL property to the slave, it breaks with this error: error connecting to master ...
1
vote
0answers
14 views

remote postgres user logon with certificate

I would like to have each remote user logon using an SSL certificate and use their postgres logon role to better track their use of the system. I can set up a certificate for a given user per the ...
0
votes
1answer
99 views

PostgreSQL force sslmode=verify-full

I have created my CA, Server and Clients certificates and keys. I have tried connections using sslmode flags with psql. I have edited the pg_hba.conf file to force SSL using hostssl only. Now I would ...
3
votes
0answers
128 views

Create an SSL connection with ODBC driver to MySQL(5.6) using openSSL

I want to create an asymmetric SSL connection from MySQL to an ODBC driver but don't fully know how to generate the keys and certificates (I'm using openSSL as recommended here: ...
3
votes
1answer
266 views

How can client retrieve SQL Server public SSL certificate?

Can a user retrieve the connection certificate for an SQL Server instance (similar to how someone can retrieve an HTTP certificate)? If so, how? Context If encryption is requested by the SQL Server ...
0
votes
1answer
23 views

mysql ssl replication - fails while attempting to connect to master

I'm trying to troubleshoot why my slave cannot connect to the master. This is what I see in the output from the command "show slave status \G" mysql> show slave status \G; ...
0
votes
1answer
217 views

Accepting only SSL connections to MS SQL server [closed]

I have followed http://support.microsoft.com/kb/316898 to force encryption on my MS SQL server. My intention is to reject any client connection that does not use SSL to connect. Am I on the right ...
4
votes
1answer
443 views

Who can explain mongodb with ssl?

I created certificates according to the instructions on the official website of MongoDB, but it doesn't work properly. I have a replica set and self-signed certificates. I need a full encryption ...
0
votes
0answers
409 views

ERROR 2026 (HY000): SSL connection error: Unable to get private key

I need help with mysql replication with ssl. I got a problem when i'm turn on ssl on my slave - error connecting to master 'replica@1.2.3.4:3306' - retry-time: 60 retries: 1 Here is my setup Master ...
3
votes
2answers
417 views

How is possible to configure TLSv1.1 protocol for SSL connection in PostgreSQL?

I need to configure TLS 1.1 protocol for SSL connection in PostgreSQL. I was not able to see protocol setting in the PostgreSQL configuration It is required to disable SSL protocols and TLSv1 and ...
0
votes
1answer
91 views

mysqlbinlog: unknown variable ssl_key or ssl_cert or ssl_ca

I am trying to recover binlog from a remote server using mysqlbinlog client program, however it appears that mysqlbinlog doesn't recognize the SSL options that's required to establish SSL connect to ...
0
votes
2answers
3k views

Does SQL Server require SSLv3?

We have a Windows 2008 R2 server running SQL 2012 Express RTM (11.0.2100.60). All three protocols (shared memory, named pipes, TCP/IP) are enabled for the server and both 32-bit and 64-bit clients. ...
4
votes
3answers
4k views

Sql server service wont start after disabling TLS 1.0 and SSL 3.0 on windows

We have been hardening our servers for some time now and recently we disabled SSL 3.0 because of the poodle attack. When I did this on one of our test servers SQL Server failed to start up after the ...
23
votes
1answer
6k views

MySQL 5.1.66 SSL connection error ERROR 2026 (HY000)

UPDATE2 Using WireShark I found out the problem string (I hope I did): 28 | 9.582638 | 192.168.18.128 | 192.168.18.129 | MySQL Response Error 1043 And the error is (according to docs): Error: ...
2
votes
1answer
276 views

Implementation of SSL ON SQL SERVER DEFAULT INSTANCE

We've purchased an SSL certificate for our Server with a specific CN and implemented the certificate on IIS. We imported the same certificate on the SQL Server machine. However, when trying to ...
1
vote
1answer
188 views

can't authenticate ssl user account

I need to setup replication via SSL. 2 nodes master/master for H/A. Then 2 slave nodes for backup. Node 3 will slave off of node 1, and node 4 will slave off of node 2 for redundant backups. Nodes 3 ...
2
votes
2answers
185 views

If an account has REQUIRE SUBJECT, does it still need a password?

I'm in the process of setting up SSL-secured replication between two servers. Each server has its own public/private keypair, and the CA cert is just the concatenation of the two public certs, like ...
3
votes
1answer
917 views

Why has my slave server stopped connecting to master in MySQL replication?

We have MySQL replication setup and it has been running without issue for some time. This server acts as a slave and a master (it replicates through to another server). This morning I received an ...
5
votes
1answer
79 views

query to determine forceencryption state

I'm trying to confirm whether or not force encryption is currently set and/or if the current connection is secure or not. Is there a SQL query I can run that will give me that information or do I ...
2
votes
1answer
42 views

Starting MySQL with SSL option using systemd

Can someone explain how to start a MySQL server with SSL options enabled using systemd? I've generated certificates and edited the my.cnf file to enable SSL but I'm not sure how to restart MySQL so ...
4
votes
2answers
4k views

Disabled SSL on SQL Server, now connection fails

I have a customer that is worried about the latest SSL vulnerability POODLE. They have a utility (IIS Crypto 1.4) that disables SSL 2.0-3.0 on the servers they run it on. They have disabled SSL on ...
0
votes
0answers
235 views

have_ssl disabled in MySQL (windows)

I want to enable SSL connection in MySQL. I've tried all the possibilities over the internet. But still I'm unable to figure out what exactly went wrong. Here's what I did so far. I followed ...
2
votes
0answers
144 views

Can you force pgpool to require SSL connections?

Can you force pgpool to drop non-ssl connections? I know you can with postgresql (Force PostgreSQL clients to use SSL?), but dropping that same syntax (hostssl instead of host) results in a ...
1
vote
1answer
773 views

How to connect to an Amazon PostgreSQL database using SSL

I'm trying to log into an Amazon PostgreSQL DBS using SSL. I have all credentials but my psql version doesn't seem to support SSL. I've tried searching Postgres docs but all I see is how it has ...
1
vote
1answer
262 views

Encrypted Connection on Sql Server

I want to make SQL server connection encrypted. I know that a certificate is needed, but I haven't been able to. So far, I: created certificate in IIS. added certificate in MMC "Certificates" ...
0
votes
2answers
2k views

Unable to access OEM 11g after upgrading to Firefox ver 37.0.1

I upgraded my browser (Firefox) to the latest version 37.0.1. Thereafter, OEM 11g is not accessible. Here are the errors: **Secure Connection Failed** The connection to ...
1
vote
0answers
841 views

Can we configure Certificate-based Authentication to connect(logon) sql client?

Can we configure Certificate-based Authentication to connect(logon) sql client? or any other method to connect sql client using mutual authentication(sql server and sql client)?
1
vote
0answers
487 views

MySQL SSL using MariaDB JDBC Driver

We have the following setup: Ec2 instance running a jboss server with mariadb (1.1.7) datasources setup to connect to an rds instance running MySQL 5.6.21. We would like to turn on SSL on for this ...
0
votes
0answers
778 views

workbench failed to connect — ssh

What are the connection parameters? How do I confirm each value? Workbench error: Lost connection to MySQL server at 'reading initial communication packet', system error: 0 I can easily ...