Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.

learn more… | top users | synonyms

19
votes
1answer
4k views

MySQL 5.1.66 SSL connection error ERROR 2026 (HY000)

UPDATE2 Using WireShark I found out the problem string (I hope I did): 28 | 9.582638 | 192.168.18.128 | 192.168.18.129 | MySQL Response Error 1043 And the error is (according to docs): Error: ...
8
votes
4answers
5k views

SQL server service won’t start after disabling TLS 1.0 and SSL 3.0

Because of security reasons, we disabled TLS 1.0 and older protocols on our windows, and enabled just TLS 1.1 and TLS 1.2 under the following registry path: ...
7
votes
3answers
254 views

SQL Server compatibility with New TLS Standards

The major browsers are moving beyond SSL3.0 and TLS1.0 . The PCI Security Council has declared an end-of-life date for these protocols to be considered sufficiently strong encryption. We need to ...
5
votes
1answer
66 views

query to determine forceencryption state

I'm trying to confirm whether or not force encryption is currently set and/or if the current connection is secure or not. Is there a SQL query I can run that will give me that information or do I ...
5
votes
1answer
4k views

SQL Server Report Manager 404 using HTTPS

OK. I have scoured the Internet for information on trying to fix this and found nothing that deals with my situation. I started here, that lead me to here, that lead me to looking at netsh commands ...
5
votes
1answer
45 views

How to examine PostgreSQL server's SSL certificate?

Suppose there is a PostgreSQL server running and it has SSL enabled. Using "standard" Linux and PostgreSQL tools, how can I examine its SSL certificate? I'm hoping for output similar to what you ...
4
votes
1answer
2k views

SQL Server SSL connection - What am I missing?

I am trying to set up my SQL Server 2008 R2 instance so that it only accepts SSL connections. My understanding is that once this is set up, any client machine should need to have a certificate ...
4
votes
3answers
3k views

Sql server service wont start after disabling TLS 1.0 and SSL 3.0 on windows

We have been hardening our servers for some time now and recently we disabled SSL 3.0 because of the poodle attack. When I did this on one of our test servers SQL Server failed to start up after the ...
4
votes
1answer
1k views

“Force Encryption” vs “Force Protocol Encryption” in SQL Server

I'm trying to understand how the different settings affect the behaviour of my server-client communication. On the server I have installed a self-signed CA with an issued exchange cert which also has ...
4
votes
1answer
296 views

What are the best practices for backing up a secured SQL Server 2012?

I want to state right off the bat that I'm not looking for information on how to backup a SQL Server. I've got that taken care of. I'm looking for some form of documentation that will tell me the ...
4
votes
2answers
162 views

SQL Server SSL connection

Is it possible if I wanted to set up SQL Server 2008 R2 instance so that it only accepts SSL Connection? I am getting different answers and based on my testing, it will accept non-SSL connection even ...
3
votes
2answers
2k views

Disabled SSL on SQL Server, now connection fails

I have a customer that is worried about the latest SSL vulnerability POODLE. They have a utility (IIS Crypto 1.4) that disables SSL 2.0-3.0 on the servers they run it on. They have disabled SSL on ...
3
votes
1answer
99 views

Why has my slave server stopped connecting to master in MySQL replication?

We have MySQL replication setup and it has been running without issue for some time. This server acts as a slave and a master (it replicates through to another server). This morning I received an ...
3
votes
1answer
135 views

MS SQL Server using SSL Connection over the Web?

I'm looking to have an external SQL Server 2008R2 Express instance and be able to connect to this via SSL using a 'sql.my-domain.com' address. So far, I've looked at a few Microsoft links on the ...
3
votes
0answers
29 views

Create an SSL connection with ODBC driver to MySQL(5.6) using openSSL

I want to create an asymmetric SSL connection from MySQL to an ODBC driver but don't fully know how to generate the keys and certificates (I'm using openSSL as recommended here: ...
3
votes
1answer
96 views

Who can explain mongodb with ssl?

I created certificates according to the instructions on the official website of MongoDB, but it doesn't work properly. I have a replica set and self-signed certificates. I need a full encryption ...
2
votes
2answers
2k views

Having a PostgreSQL database exposed to the internet

I've seen on DBA and other sites that exposing a database to the Internet is a particularly bad idea, but I noticed that PostgreSQL has SSL-certificate-only authentication. Does this make it any safer ...
2
votes
1answer
1k views

Loop through all users in MySQL and add REQUIRE SSL flag

How do I loop through all users (we have > 3000) in a MySQL database, and add the REQUIRE SSL flag to the every account? I don't want to modify the existing users permissions, host, or password, ...
2
votes
2answers
143 views

If an account has REQUIRE SUBJECT, does it still need a password?

I'm in the process of setting up SSL-secured replication between two servers. Each server has its own public/private keypair, and the CA cert is just the concatenation of the two public certs, like ...
2
votes
1answer
28 views

Starting MySQL with SSL option using systemd

Can someone explain how to start a MySQL server with SSL options enabled using systemd? I've generated certificates and edited the my.cnf file to enable SSL but I'm not sure how to restart MySQL so ...
2
votes
1answer
535 views

MySQL ssl setup failed

I am following word by word of http://dev.mysql.com/doc/refman/5.0/en/creating-ssl-certs.html for creating SSL certificates to setup SSL enable replication but it is not working for me. Steps which I ...
2
votes
1answer
2k views

How to setup Oracle SSL using self-signed certificate between client and DB?

I want my DB to send the data to the client in an encrypted way. I Googled and found that Oracle has SSL. Unfortunately, I can't find a step by step tutorial which explains how to create a ...
2
votes
1answer
2k views

How can I verify I'm using SSL to connect to mysql?

I have configured my server to allow SSL, and have modified my client ~/.my.cnf so I use SSL: [client] ssl ssl-cipher=DHE-RSA-AES256-SHA ssl-ca=~/certs/ca-cert.pem When I log in with my client and ...
2
votes
1answer
122 views

How can client retrieve SQL Server pubic SSL certificate?

Can a user retrieve the connection certificate for an SQL Server instance (similar to how someone can retrieve an HTTP certificate)? If so, how? Context If encryption is requested by the SQL Server ...
2
votes
1answer
218 views

Implementation of SSL ON SQL SERVER DEFAULT INSTANCE

We've purchased an SSL certificate for our Server with a specific CN and implemented the certificate on IIS. We imported the same certificate on the SQL Server machine. However, when trying to ...
2
votes
0answers
78 views

Can you force pgpool to require SSL connections?

Can you force pgpool to drop non-ssl connections? I know you can with postgresql (Force PostgreSQL clients to use SSL?), but dropping that same syntax (hostssl instead of host) results in a ...
1
vote
1answer
2k views

MS SQL Server accepts non-SSL connections even with Force Encryption enabled on the server side

I am forcing encryption on my MS SQL server. My intention is to reject any client connection that does not use SSL to connect. Am I on the right track? Here are my detailed steps : makecert -r -pe ...
1
vote
1answer
158 views

Encrypted Connection on Sql Server

I want to make SQL server connection encrypted. I know that a certificate is needed, but I haven't been able to. So far, I: created certificate in IIS. added certificate in MMC "Certificates" ...
1
vote
1answer
291 views

Explain PostgreSql ssl_cipher values: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH

In the postgresql.conf file, one can configure authorized values for ssl_cipher. Yet I could not find documentation explaining what the ALL, ADH, LOW, EXP, MD5 and STRENGTH values correspond to. MD5 ...
1
vote
1answer
375 views

How to connect to an Amazon PostgreSQL database using SSL

I'm trying to log into an Amazon PostgreSQL DBS using SSL. I have all credentials but my psql version doesn't seem to support SSL. I've tried searching Postgres docs but all I see is how it has ...
1
vote
1answer
83 views

MySQL Replication using SSL

I am in the process of replicating my database so i can have a master slave configuration, one of the issues i have is with security i am basically generating my server/client keys and certificates ...
1
vote
1answer
58 views

can't authenticate ssl user account

I need to setup replication via SSL. 2 nodes master/master for H/A. Then 2 slave nodes for backup. Node 3 will slave off of node 1, and node 4 will slave off of node 2 for redundant backups. Nodes 3 ...
1
vote
1answer
3k views

How to setup SSL in SQL Server 2012 with own certificate?

Environment: Windows 7 Professional x64 in a domain, running SQL Server 2012. I have local admin rights, so messing up the system is easy. My SQL Server instances are SQLEXPRESS and MSSQLSERVER. FQDN ...
1
vote
1answer
35 views

SSL error during SQL Server install

During my SQL Server 2014 Enterprise installation efforts, I encountered an error near the end of the install that has prevented completion. A connection was successfully established with the ...
1
vote
0answers
169 views

Can we configure Certificate-based Authentication to connect(logon) sql client?

Can we configure Certificate-based Authentication to connect(logon) sql client? or any other method to connect sql client using mutual authentication(sql server and sql client)?
1
vote
0answers
230 views

MySQL SSL using MariaDB JDBC Driver

We have the following setup: Ec2 instance running a jboss server with mariadb (1.1.7) datasources setup to connect to an rds instance running MySQL 5.6.21. We would like to turn on SSL on for this ...
1
vote
0answers
657 views

SSL on AWS Postgres RDS

I was reading this: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.SSL Step 2 says "Install the certificate in your operating system", but I ...
1
vote
0answers
126 views

MySQL SSL Master-Slave replication not syncing

I have originally posted this thread on stackoverflow and after a comment I moved it here. The original post can be found here. I have setup a typical Master-Slave replication scheme for my MySQL ...
0
votes
2answers
1k views

Unable to access OEM 11g after upgrading to Firefox ver 37.0.1

I upgraded my browser (Firefox) to the latest version 37.0.1. Thereafter, OEM 11g is not accessible. Here are the errors: **Secure Connection Failed** The connection to ...
0
votes
1answer
490 views

PostgreSQL dblink password encrypted or not?

I have two PostgreSQL servers: server 1: 192.168.0.1 server 2: 192.168.0.2 I want to connect to the database on server 2 from server 1. I do it like this: SELECT ...
0
votes
1answer
687 views

Do I need client certs for mysql ssl replication?

I'm setting up mysql replication using SSL, and have found two different guides. The first one creates both client and server certs, while the second one only creates server certs. I don't know ...
0
votes
2answers
2k views

Does SQL Server require SSLv3?

We have a Windows 2008 R2 server running SQL 2012 Express RTM (11.0.2100.60). All three protocols (shared memory, named pipes, TCP/IP) are enabled for the server and both 32-bit and 64-bit clients. ...
0
votes
2answers
550 views

no pg_hba.conf entry for host “10.1.1.91”, user “user” database “testing”, SSL off

I've come across different versions of this same issue on stackoverflow and on this forum. I've tried the recommendations posted on these forums but I am still unable to connect to a database. I've ...
0
votes
1answer
76 views

Using a SSL-cert from a trusted CA offline to comunicate with SQL Server

I'm setting up a secure link between client machines and an SQL database server on a intranet without Internet-access. The question I have is if I can buy and use a cert from a trusted CA on a local ...
0
votes
1answer
99 views

Securing an Internet Database Connection

I am looking to setup a website and database that are connected via the internet, and am looking to secure the connection. The connection will probably not be over a VPN, so shall be openly exposed. ...
0
votes
1answer
174 views

MongoDB SSL Certs

I have built MongoDB with support for SSL and am wondering how it works with certs signed by a certificate authority? I have a wild card cert for the domain, so if I have mdb(1|2|3|4).domain.com and ...
0
votes
1answer
13 views

mysqlbinlog: unknown variable ssl_key or ssl_cert or ssl_ca

I am trying to recover binlog from a remote server using mysqlbinlog client program, however it appears that mysqlbinlog doesn't recognize the SSL options that's required to establish SSL connect to ...
0
votes
0answers
78 views

have_ssl disabled in MySQL (windows)

I want to enable SSL connection in MySQL. I've tried all the possibilities over the internet. But still I'm unable to figure out what exactly went wrong. Here's what I did so far. I followed ...
0
votes
0answers
14 views

how to choose version of mongodb,suported ssl

My Server is centos 6.5 64bit. I want to install mongodb 3.0.2. But it shows that it is not supported ssl. is These anothor way to install mongodb 3.0.2 of supported ssl?
0
votes
0answers
33 views

Getting SSL Working

So, I'm trying to configure PostgreSQL to allow SSL connections, on a Windows box. First, per http://www.postgresql.org/docs/9.4/static/auth-pg-hba-conf.html I added this line to pg_hba.conf (and ...