Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.

learn more… | top users | synonyms

15
votes
1answer
4k views

MySQL 5.1.66 SSL connection error ERROR 2026 (HY000)

UPDATE2 Using WireShark I found out the problem string (I hope I did): 28 | 9.582638 | 192.168.18.128 | 192.168.18.129 | MySQL Response Error 1043 And the error is (according to docs): Error: ...
8
votes
3answers
4k views

SQL server service won’t start after disabling TLS 1.0 and SSL 3.0

Because of security reasons, we disabled TLS 1.0 and older protocols on our windows, and enabled just TLS 1.1 and TLS 1.2 under the following registry path: ...
5
votes
2answers
120 views

SQL Server compatibility with New TLS Standards

The major browsers are moving beyond SSL3.0 and TLS1.0 . The PCI Security Council has declared an end-of-life date for these protocols to be considered sufficiently strong encryption. We need to ...
5
votes
1answer
64 views

query to determine forceencryption state

I'm trying to confirm whether or not force encryption is currently set and/or if the current connection is secure or not. Is there a SQL query I can run that will give me that information or do I ...
5
votes
1answer
3k views

SQL Server Report Manager 404 using HTTPS

OK. I have scoured the Internet for information on trying to fix this and found nothing that deals with my situation. I started here, that lead me to here, that lead me to looking at netsh commands ...
4
votes
1answer
2k views

SQL Server SSL connection - What am I missing?

I am trying to set up my SQL Server 2008 R2 instance so that it only accepts SSL connections. My understanding is that once this is set up, any client machine should need to have a certificate ...
4
votes
2answers
2k views

Sql server service wont start after disabling TLS 1.0 and SSL 3.0 on windows

We have been hardening our servers for some time now and recently we disabled SSL 3.0 because of the poodle attack. When I did this on one of our test servers SQL Server failed to start up after the ...
4
votes
1answer
293 views

What are the best practices for backing up a secured SQL Server 2012?

I want to state right off the bat that I'm not looking for information on how to backup a SQL Server. I've got that taken care of. I'm looking for some form of documentation that will tell me the ...
4
votes
2answers
157 views

SQL Server SSL connection

Is it possible if I wanted to set up SQL Server 2008 R2 instance so that it only accepts SSL Connection? I am getting different answers and based on my testing, it will accept non-SSL connection even ...
3
votes
2answers
2k views

Disabled SSL on SQL Server, now connection fails

I have a customer that is worried about the latest SSL vulnerability POODLE. They have a utility (IIS Crypto 1.4) that disables SSL 2.0-3.0 on the servers they run it on. They have disabled SSL on ...
3
votes
1answer
46 views

Why has my slave server stopped connecting to master in MySQL replication?

We have MySQL replication setup and it has been running without issue for some time. This server acts as a slave and a master (it replicates through to another server). This morning I received an ...
3
votes
1answer
129 views

MS SQL Server using SSL Connection over the Web?

I'm looking to have an external SQL Server 2008R2 Express instance and be able to connect to this via SSL using a 'sql.my-domain.com' address. So far, I've looked at a few Microsoft links on the ...
3
votes
1answer
1k views

“Force Encryption” vs “Force Protocol Encryption” in SQL Server

I'm trying to understand how the different settings affect the behaviour of my server-client communication. On the server I have installed a self-signed CA with an issued exchange cert which also has ...
3
votes
0answers
18 views

Create an SSL connection with ODBC driver to MySQL(5.6) using openSSL

I want to create an asymmetric SSL connection from MySQL to an ODBC driver but don't fully know how to generate the keys and certificates (I'm using openSSL as recommended here: ...
3
votes
1answer
69 views

Who can explain mongodb with ssl?

I created certificates according to the instructions on the official website of MongoDB, but it doesn't work properly. I have a replica set and self-signed certificates. I need a full encryption ...
2
votes
2answers
2k views

Having a PostgreSQL database exposed to the internet

I've seen on DBA and other sites that exposing a database to the Internet is a particularly bad idea, but I noticed that PostgreSQL has SSL-certificate-only authentication. Does this make it any safer ...
2
votes
1answer
911 views

Loop through all users in MySQL and add REQUIRE SSL flag

How do I loop through all users (we have > 3000) in a MySQL database, and add the REQUIRE SSL flag to the every account? I don't want to modify the existing users permissions, host, or password, ...
2
votes
2answers
138 views

If an account has REQUIRE SUBJECT, does it still need a password?

I'm in the process of setting up SSL-secured replication between two servers. Each server has its own public/private keypair, and the CA cert is just the concatenation of the two public certs, like ...
2
votes
1answer
23 views

Starting MySQL with SSL option using systemd

Can someone explain how to start a MySQL server with SSL options enabled using systemd? I've generated certificates and edited the my.cnf file to enable SSL but I'm not sure how to restart MySQL so ...
2
votes
1answer
409 views

MySQL ssl setup failed

I am following word by word of http://dev.mysql.com/doc/refman/5.0/en/creating-ssl-certs.html for creating SSL certificates to setup SSL enable replication but it is not working for me. Steps which I ...
2
votes
1answer
2k views

How to setup Oracle SSL using self-signed certificate between client and DB?

I want my DB to send the data to the client in an encrypted way. I Googled and found that Oracle has SSL. Unfortunately, I can't find a step by step tutorial which explains how to create a ...
2
votes
1answer
2k views

How can I verify I'm using SSL to connect to mysql?

I have configured my server to allow SSL, and have modified my client ~/.my.cnf so I use SSL: [client] ssl ssl-cipher=DHE-RSA-AES256-SHA ssl-ca=~/certs/ca-cert.pem When I log in with my client and ...
2
votes
1answer
106 views

How can client retrieve SQL Server pubic SSL certificate?

Can a user retrieve the connection certificate for an SQL Server instance (similar to how someone can retrieve an HTTP certificate)? If so, how? Context If encryption is requested by the SQL Server ...
2
votes
0answers
203 views

Implementation of SSL ON SQL SERVER DEFAULT INSTANCE

We've purchased an SSL certificate for our Server with a specific CN and implemented the certificate on IIS. We imported the same certificate on the SQL Server machine. However, when trying to ...
2
votes
0answers
75 views

Can you force pgpool to require SSL connections?

Can you force pgpool to drop non-ssl connections? I know you can with postgresql (Force PostgreSQL clients to use SSL?), but dropping that same syntax (hostssl instead of host) results in a ...
1
vote
1answer
2k views

MS SQL Server accepts non-SSL connections even with Force Encryption enabled on the server side

I am forcing encryption on my MS SQL server. My intention is to reject any client connection that does not use SSL to connect. Am I on the right track? Here are my detailed steps : makecert -r -pe ...
1
vote
1answer
153 views

Encrypted Connection on Sql Server

I want to make SQL server connection encrypted. I know that a certificate is needed, but I haven't been able to. So far, I: created certificate in IIS. added certificate in MMC "Certificates" ...
1
vote
1answer
266 views

Explain PostgreSql ssl_cipher values: ALL:!ADH:!LOW:!EXP:!MD5:@STRENGTH

In the postgresql.conf file, one can configure authorized values for ssl_cipher. Yet I could not find documentation explaining what the ALL, ADH, LOW, EXP, MD5 and STRENGTH values correspond to. MD5 ...
1
vote
1answer
325 views

How to connect to an Amazon PostgreSQL database using SSL

I'm trying to log into an Amazon PostgreSQL DBS using SSL. I have all credentials but my psql version doesn't seem to support SSL. I've tried searching Postgres docs but all I see is how it has ...
1
vote
1answer
80 views

MySQL Replication using SSL

I am in the process of replicating my database so i can have a master slave configuration, one of the issues i have is with security i am basically generating my server/client keys and certificates ...
1
vote
1answer
42 views

can't authenticate ssl user account

I need to setup replication via SSL. 2 nodes master/master for H/A. Then 2 slave nodes for backup. Node 3 will slave off of node 1, and node 4 will slave off of node 2 for redundant backups. Nodes 3 ...
1
vote
1answer
3k views

How to setup SSL in SQL Server 2012 with own certificate?

Environment: Windows 7 Professional x64 in a domain, running SQL Server 2012. I have local admin rights, so messing up the system is easy. My SQL Server instances are SQLEXPRESS and MSSQLSERVER. FQDN ...
1
vote
0answers
91 views

Can we configure Certificate-based Authentication to connect(logon) sql client?

Can we configure Certificate-based Authentication to connect(logon) sql client? or any other method to connect sql client using mutual authentication(sql server and sql client)?
1
vote
0answers
195 views

MySQL SSL using MariaDB JDBC Driver

We have the following setup: Ec2 instance running a jboss server with mariadb (1.1.7) datasources setup to connect to an rds instance running MySQL 5.6.21. We would like to turn on SSL on for this ...
1
vote
0answers
629 views

SSL on AWS Postgres RDS

I was reading this: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/CHAP_PostgreSQL.html#PostgreSQL.Concepts.General.SSL Step 2 says "Install the certificate in your operating system", but I ...
1
vote
0answers
125 views

MySQL SSL Master-Slave replication not syncing

I have originally posted this thread on stackoverflow and after a comment I moved it here. The original post can be found here. I have setup a typical Master-Slave replication scheme for my MySQL ...
0
votes
2answers
963 views

Unable to access OEM 11g after upgrading to Firefox ver 37.0.1

I upgraded my browser (Firefox) to the latest version 37.0.1. Thereafter, OEM 11g is not accessible. Here are the errors: **Secure Connection Failed** The connection to ...
0
votes
1answer
448 views

PostgreSQL dblink password encrypted or not?

I have two PostgreSQL servers: server 1: 192.168.0.1 server 2: 192.168.0.2 I want to connect to the database on server 2 from server 1. I do it like this: SELECT ...
0
votes
1answer
637 views

Do I need client certs for mysql ssl replication?

I'm setting up mysql replication using SSL, and have found two different guides. The first one creates both client and server certs, while the second one only creates server certs. I don't know ...
0
votes
1answer
2k views

Does SQL Server require SSLv3?

We have a Windows 2008 R2 server running SQL 2012 Express RTM (11.0.2100.60). All three protocols (shared memory, named pipes, TCP/IP) are enabled for the server and both 32-bit and 64-bit clients. ...
0
votes
2answers
480 views

no pg_hba.conf entry for host “10.1.1.91”, user “user” database “testing”, SSL off

I've come across different versions of this same issue on stackoverflow and on this forum. I've tried the recommendations posted on these forums but I am still unable to connect to a database. I've ...
0
votes
1answer
71 views

Using a SSL-cert from a trusted CA offline to comunicate with SQL Server

I'm setting up a secure link between client machines and an SQL database server on a intranet without Internet-access. The question I have is if I can buy and use a cert from a trusted CA on a local ...
0
votes
1answer
95 views

Securing an Internet Database Connection

I am looking to setup a website and database that are connected via the internet, and am looking to secure the connection. The connection will probably not be over a VPN, so shall be openly exposed. ...
0
votes
1answer
155 views

MongoDB SSL Certs

I have built MongoDB with support for SSL and am wondering how it works with certs signed by a certificate authority? I have a wild card cert for the domain, so if I have mdb(1|2|3|4).domain.com and ...
0
votes
0answers
52 views

have_ssl disabled in MySQL (windows)

I want to enable SSL connection in MySQL. I've tried all the possibilities over the internet. But still I'm unable to figure out what exactly went wrong. Here's what I did so far. I followed ...
0
votes
0answers
12 views

how to choose version of mongodb,suported ssl

My Server is centos 6.5 64bit. I want to install mongodb 3.0.2. But it shows that it is not supported ssl. is These anothor way to install mongodb 3.0.2 of supported ssl?
0
votes
0answers
30 views

Getting SSL Working

So, I'm trying to configure PostgreSQL to allow SSL connections, on a Windows box. First, per http://www.postgresql.org/docs/9.4/static/auth-pg-hba-conf.html I added this line to pg_hba.conf (and ...
0
votes
0answers
151 views

workbench failed to connect — ssh

What are the connection parameters? How do I confirm each value? Workbench error: Lost connection to MySQL server at 'reading initial communication packet', system error: 0 I can easily ...
0
votes
0answers
44 views

password based ssh authentication with MySQL Workbench

I know that it's possible to configure SSH to use keys only, and to disable password based authentication. That being said, can I do the following from MySQL Workbench? I've tried more than a few ...
0
votes
0answers
60 views

MySQL Socket connections and SSL

I'm currently running over some final tweaks and security measures for my MySQL server deployments. Mainly I'm running Google's Golang and connect to the MySQL database through a Socket connection. ...