Questions tagged [ssl]
Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.
164
questions
0
votes
0answers
8 views
Why has replication stopped working with “ASN: bad other signature confirmation” error?
We have had replication running for over two years, from a master to a slave, using SSL. Yesterday, it suddenly stopped working.
Neither the master or slave have undergone updates and none of the ...
0
votes
0answers
25 views
postgresql server, can connect with SSL, permission denied
I installed and used a Postgresql server a while back and have been using it with Postgis.
I would like to use my letsencrypt certificates with the server so i followed this article:
https://medium....
0
votes
1answer
29 views
Can we enable tls 1.0 on MSSQL Server 2019 on database level? if yes then how?
i am running sql server 2019 on Linux box and trying to connect using a Windows server 2016 client, how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level.
TIA.
0
votes
1answer
42 views
Enabling TLSv1 in postgres12 / openssl1.1.1f
After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1.
I ...
0
votes
0answers
16 views
Is my connection using SSL or not?
I have two MySQL 5.7 databases ([db1] 5.7.27 and [db2] 5.7.29)
(n.b. db1 is Linux, db2 is Windows)
I have created a basic user on db1:
CREATE USER 'ssltest'@'%' IDENTIFIED BY 'ssltest';
GRANT ALL ON *....
0
votes
0answers
10 views
Replication refuses to use SSL
I have two MySQL 5.7 Servers (5.7.29 and 5.7.31)
I have created a set of SSL certificates and copied them to both the source and replica DB's so they both have the same certificates in place.
On my ...
1
vote
1answer
57 views
SQL Server - Why am I getting TCP connections without sessions?
I enabled SSL with Forced Encryption enabled, using a self-signed certificate.
Then I've set up automated monitoring to detect not secured connections (seems redundant, I know, but bear with me here), ...
0
votes
0answers
19 views
SSL Encryption Renew
When we request CSR for SSL encryption renew , can we use same label or different label could be used ? After importing the signed certificate into Db2 server ,What steps we need to follow on db2 ...
0
votes
1answer
28 views
psql command, how to enforce certificate check?
I have created a cockroachdb v20.1.0 cluster based on this: https://www.cockroachlabs.com/docs/stable/deploy-cockroachdb-on-premises.html
I have also created a test user like this:
CREATE USER test ...
0
votes
0answers
31 views
After enabling SSL in Oracle user must log in twice
I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
0
votes
1answer
60 views
For SSL renewal procedure in Db2 LUW , DO i need to create CSR request for each instance residing in same server?
I am trying to renew my SSL certs . Stuck here if we need to have create a Certificate Signing Request for each instance residing on the same server and send it to CA who will provide us the ...
0
votes
0answers
73 views
MySQL 5.6 - Can I disable SSL for a single user
Server version: 5.6.21-70.1-log
Linux
SSL Keys
ssl-ca=/etc/mysql-ssl/ca-cert.pem
ssl-cert=/etc/mysql-ssl/server-cert.pem
ssl-key=/etc/mysql-ssl/server-key.pem
skip-name-resolve
skip-external-locking
...
0
votes
0answers
86 views
How to turn off SSL for Postgres for remote connections?
After changing the pg_hba.conf file and setting it to 0.0.0.0/0 and editing the postgresql.conf file to listen_addresses='*', Postgres is still not accepting connections from a remote system.
I think ...
0
votes
1answer
23 views
ssl with postgresql 12
I tried following the docs for the same.
It says postgres.conf will have service.crt for ssl_cert_file, but it has /etc/ssl/certs/ssl-cert-snakeoil.pem
and now I can't proceed with it.
Any insight ...
0
votes
1answer
23 views
How to reject unvalidated SSL client connections from the MongoDB server?
I have setup a MongoDB server with a self-signed server certificate, and when I use the server validation method in Compass along with the CA certificate, it works well. However, I am still able to ...
0
votes
1answer
23 views
Status show SSL is in use even though I did not set up certificate on the client side?
I want to set up SSL connections to a distant MariaDB server. I followed the instructions here. I generated the certificate for the server, restarted it, and got this:
+---------------------+---------...
0
votes
0answers
54 views
Encryption in transit not working in MongoDB
I am using MongoDB 4.0.6 with 3 node replica set. I am upgrading my cluster to use SSL, below are steps which i am following :
1) generated CA.pem, server.pem and client.pem file and updated in my ...
0
votes
1answer
219 views
SSL Configuration fails with a warning MySQL 8.0
Hi I am trying to set up a MySQL server 8.0.16 on RHEL 7.5. The configuration I am willing to include for this server contains SSL related options.
The MySQL server is initialized but with a warning ...
0
votes
1answer
412 views
Using letsencrypt with postgresql [closed]
I'm trying to use letsencrypt to generate certs in order to encrypt communication between a remote client and my postgresql database server. I'm not sure how to get started on setting this up. What ...
0
votes
1answer
29 views
How to find SSL root cert that made connection to the database in PostgreSQL?
When we connect to postgreSQL via ssl-mode=verify-full how will I make sure if the certificate I passed is used while making the connection?
With ssl_is_used(); shows only true or false. Is there ...
0
votes
0answers
520 views
Error 2026: SSL Connection Error: Failed to verify the server certificate via X509 certificate matching functions
MySQL Server: Enterprise Edition 8.0.16-Commercial
OS: RHEL 7.5 (Maipo) 3.10.0-862.11.6.el7.x86_64
I am trying to understand SSL/TLS enabled connections for MySQL servers. I am trying to configure it ...
0
votes
0answers
1k views
How to generate a self-signed SSL certificate for MS SQL server 2008 R2 using OpenSSL?
Using OpenSSL, I'd like to generate a self-signed certificate for usage with Microsoft SQL server 2008 R2. This might be unusual, but I'd like to learn what's going on behind the scenes.
I have ...
1
vote
1answer
824 views
Remove expired certificate SQL Server
I am trying to delete an expired certificate from my database server. The certificate was used to encrypt connections to sql server 2014 r2. We no longer have a need to encrypt connections and so we ...
2
votes
1answer
117 views
Configuring SQL Server for SSL Encryption
I'm new to the DBA role and I've been tasked with configuring a SQL Server install for a client, with the requirement that databases will be distributed across two instances. Connections to one of ...
2
votes
2answers
327 views
MariaDB/MySQL SSL Replication Failure
After searching for a solution for the last 6 hours, I have come up dry in my attempt to add SSL to the replication. I managed to get it to connect with SSL via the mysql command line tool without ...
0
votes
1answer
25 views
How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?
I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
0
votes
0answers
45 views
Do I need client or server cert for mySQL master/master replication?
WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates:
using --sign, which creates a client-cert
Using --server, which creates a server-cert
The ...
1
vote
0answers
177 views
Unable to Connect to SQL Server 2005 through ODBC drivers from Windows 2012 server
We are unable to connect to a specific Database server which has SQL Server 2005 installed on Windows 2003 server from any of the Windows Server 2012. It used to work till last week, the only change ...
0
votes
1answer
922 views
How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?
I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
1
vote
1answer
147 views
SQL Services Wont Start After Removing TLS [duplicate]
I need to remove TLS 1.0 from one of my SQL servers. When I do so and then reboot the server the SQL services dont start automatically. When I attempt to start them I get an error that it cant be done....
2
votes
1answer
3k views
how to generate the root CA.pem in mongodb for configuring the ssl certificates?
I am trying to configure the SSL certificates in the MongoDB community edition.
The configuration of my mongod.conf
net:
port: 27017
bindIp: 0.0.0.0 # Enter 0.0.0.0,:: to bind to all IPv4 and ...
0
votes
1answer
590 views
How do I debug/set up MariaDB SSL connection?
[ I originally posted this on ServerFault but then was pointed at this community ]
Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections.
I have ...
0
votes
1answer
644 views
Postgres still connecting via SSL - despite invalid certificates
I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)
I have enforced SSL ...
1
vote
0answers
57 views
Force psqlODBC Postgres drivers to use Windows Trusted Root Certificate Store
I need to configure my client software to use SSL when connecting to a postgres database (sslmode=verify-full). The configuration requires me to specify a root certificate file in the following ...
0
votes
1answer
448 views
How to remotely manage (with PhpMyAdmin) a MySQL RDS on a load-balanced AWS Elastic Beanstalk setup?
Although there are similar questions and topics, I can't find a solution that currently works.
I specifically wrote remotely manage because I'd like to use my home computer's PhpMyAdmin to directly ...
3
votes
1answer
381 views
Does requiring SSL matter if using AWS RDS and AWS EC2 in a VPC
I have a MySQL RDS DB and am connecting it through an EC2 instance.
My RDS isn't publicly accessible, so I think it can only be connected to through my EC2 instances.
I see at this link https://...
0
votes
1answer
285 views
Mariabackup Throws Unknown Argument Error
I have just installed the MariaDB backup tool based on Percona Xtrabackup, Mariabackup, on my CentOS 7 system with MariaDB v10.1. However, when I try to test using this tool, it fails immediately ...
0
votes
0answers
26 views
MySQL 5.5 replication over SSL broken after upgrading OpenSSL, OS
I've got an issue where, after upgrading a replication slave from Ubuntu 14.04 to 16.04, this slave can no longer connect to its master using SSL.
Setup before the upgrade:
1 master, 2 slaves, ALL ...
1
vote
1answer
641 views
Connection string for connecting mongo database with SSL enabled
Am facing some below problem in my mongodb replication environment
I have 3 replica set environment with SSL enabled and ssl mode as preferSSL
3 servers has 3 different Key file with common CA file
...
1
vote
0answers
56 views
SSRS default URL not being referenced from Windows application
I have installed and configured SSRS and when I check the URL via HTTP it works fine (I haven't configured SSL).
When I try to run a report from the Windows application, I get the following error ...
5
votes
2answers
6k views
How to verify SSL always being used on Postgresql 9.6
I have a sensitive application with app server and db on separate machines, and in the case of the slave db, in separate data-centers.
Although I believe my postgresqls are configured to always use ...
1
vote
0answers
272 views
SSL certificate for MS SQL Server
I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell.
In the first scenario I can ...
0
votes
1answer
949 views
`Encrypt Connection` causes an invalid certificate error even though server-side encryption is forced
I have a SQL Server set up to force encrypted connections from all client. It has a standard SSL certificate, using Let's Encrypt as the CA. Browsing to the server via a web browser verifies that the ...
1
vote
1answer
74 views
Using a real certificate with rethinkdb cert chain bundle
I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
3
votes
3answers
553 views
MySQL SSL replication error 2026
I've been searching and testing for hours and still can't figure this out. MySQL version 5.7.23 on both slave and master.
Replication over SSL is failing with the following error message:
Slave I/...
1
vote
1answer
31 views
Why MongoDB not running SSL?
I need to run MongoDB with SSL, the version that is currently installed is 3.4.16 without SSL.
Can I download 3.4.16 with SSL and just stop the service copy the Bin files across and then start up the ...
1
vote
1answer
837 views
Postgresql install adding openssl
I install postgresql in my ubuntu Server 18.04 LTS, and I want it support OpenSSL.
I do the lengthy way with PostgreSQL source code installation, where I can select the openssl feature:
./...
2
votes
0answers
2k views
Configuration of TCP/IP with SSL and TLS for Oracle
I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
1
vote
1answer
663 views
SQL Server 2012 not loading its self-generated SSL certificate
I have a requirement to remove the SSL certificate that is being used by a SQL Server 2012 SP4 database instance for data in transit encryption.
The client wants the SQL Server to load its self-...
3
votes
1answer
4k views
Is it impossible to force MariaDB users to SSL?
First of all, my english is really bad, so sorry for my english mistakes.
I have a MariaDB 10.2.15. I installed SSL, and its working fine, but I cant force use SSL to users.
my.cnf:
[mysqld]
ssl
ssl-...
