Questions tagged [ssl]
Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.
178
questions
0
votes
0
answers
12
views
Generate MySQL/MariaDB SSL certificates from my wildcard certificate (*.mycompany.com)
I'm configuring a series of MariaDB servers with SSL protection. I was able to do it creating different self-signed certificates, as everybody can do just following some of the multiple tutorials you ...
- 101
2
votes
1
answer
56
views
Is an SSL Certificate Authority Chain "Secret"
We've recently signed up to use MariaDB's SkySQL package, however are new to the use of SSL Certificate Chains when connecting (having only really used SSH tunnels in the past).
We have the key which ...
- 23
0
votes
0
answers
43
views
How do I configure DB2 on Windows with SSL so that I can connect via ODBC?
DB2 11.5 running on Windows Server 2016 Standard
SQL Server 14.0.3430.2
I'm able to set up ODBC with some DB2 databases, but when the DB2 database is secured with an SSL certificate, which they call ...
1
vote
1
answer
35
views
Should a client connecting to a server via a unix-socket be encrypted?
Does a client connection need encryption if the only connection option is via unix socket? e.g. my.cnf
[mysqld]
socket = /run/mysqld/mysqld.sock
I'm considering these options, but I'd prefer not to ...
- 143
2
votes
1
answer
98
views
SQL Server Profiler - Client unable to establish connection
Spanking brand-new installations of:
Visual Studio 2022 Community (VS)
SQL Server 2019 Dev (SQL)
SQL Server Management Studio v18.10 (SSMS)
There are no other Visual Studio or SQL Server instances ...
- 21
2
votes
2
answers
114
views
After installing a new SSL certificate, my MSSQL server is no longer able to be restarted
I installed a SSL certificate using a pfx file, taking the hash and putting it inside the certificate key of SuperSocketNetLib, I restarted the MSSQL server using the MSSQL Management Tool, and upon ...
- 121
0
votes
3
answers
209
views
Setup Secure LDAP over SSL/TLS (LDAPS) for PostgreSQL
Haven’t had much luck while trying several ways to implement LDAPS for PostgreSQL.
pg_hba.conf
hostssl all +test_ldap 0.0.0.0/0 ldap ldapserver=dc2.ad.foobar.com ldapport=636 ldapscheme=ldaps ldaptls=...
- 11
0
votes
1
answer
97
views
MongoDB TLS unable to get issuer certificate
I'm setting up a MongoDB server, and wanted to use TLS from a proper CA and DNS.
I got a domain name and put an A record in, linking to my server. Afterwards, I applied for a SSL certificate on ...
- 1
0
votes
1
answer
33
views
Can SQL server verify client with SSL cert, that tries to connect to it?
Pretty sure that it's stupid question, but still would be very happy to get answer or some explanation or point to the documentation.
Right now I'm configuring SSL connection to PostgreSQL server with ...
- 103
0
votes
0
answers
27
views
Encrypted ODBC driver fails when job is scheduled in SQL Server Agent
I have installed an ODBC driver (system DSN) on a SQL server to connect to an external database. It uses SSL encryption. In SSMS I am able to query it using a linked server and openquery(). In C# ...
- 101
1
vote
0
answers
31
views
PostgreSQL cannot work when opens SSL on Windows 10
I am not sure this topic will fit here but I don't know ask it where.
I am trying to open the SSL of PostgreSQL 10.16 on Windows10.
I read a lot of documents about creating an SSL certificate to ...
- 11
0
votes
0
answers
228
views
Postgres: ODBC: ERROR: SSL connection has been closed unexpectedly; Error while executing the query
I'm currently in Australia and so is the database.
Staff attempting to connect to the database from overseas (USA, UK) consistently run into the error: ERROR: SSL connection has been closed ...
- 1
0
votes
1
answer
98
views
MySQL SSL Setup
I am using the MySQL 5.7 SSL Setup Guide (combined with a few other guides on the website + google searches).
I have a replica and source working, I am now trying to configure SSL.
My understanding is ...
- 113
1
vote
1
answer
38
views
SQL Server Secure and Unsecure Traffic Configuration Help
I have a SQL Server 2017 instance that I have configured to listen on multiple ports 1433 and 1234. I would like to know if its possible to have one port (1234) accept only secure connections while ...
- 388
0
votes
1
answer
146
views
Connect windows 2000 to sql server 2016
I have a really old piece of industrial equipment that connects from windows professional to a sql server 2008r2 on win 2008R2, not completely patched.
We cannot replace the windows 2000, but would ...
1
vote
1
answer
455
views
Not able to connect to Mongodb vie mongo shell
I am no able to connect to mongodb via mongo shell.
command:
sudo mongo --tls --tlsCertificateKeyFile server.pem --tlsCAFile CA_INTERMEDIATE --host "mongodb://xxx:xxx@some-url:27020/data_base?ssl=...
- 11
1
vote
1
answer
847
views
How to enable use of SSL in MySQL server?
I have 2 devices on my local network: a remote MySQL server (using MariaDB 10.3) and a laptop (acting as a client with Python). I need to connect to a remote MySQL server via Python using SSL ...
- 125
0
votes
0
answers
36
views
Can't connect to postgresql database with SSL using GSSAPI
With postgresql 12.4, I've got this in pg_hba.conf:
hostssl all all 192.168.0.0 255.255.0.0 gss map=myrealm
but whenever I try to connect with:
psql 'postgresql://hostname/database?sslmode=require'
...
- 101
0
votes
0
answers
319
views
postgresql server, can connect with SSL, permission denied
I installed and used a Postgresql server a while back and have been using it with Postgis.
I would like to use my letsencrypt certificates with the server so i followed this article:
https://medium....
- 141
1
vote
1
answer
5k
views
Can we enable tls 1.0 on MSSQL Server 2019 on database level? if yes then how?
i am running sql server 2019 on Linux box and trying to connect using a Windows server 2016 client, how can we enable TLS 1.0 for SQL Server 2019 on the Database/instance level.
TIA.
Rafay Pervaiz
0
votes
1
answer
511
views
Enabling TLSv1 in postgres12 / openssl1.1.1f
After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1.
I ...
- 101
0
votes
0
answers
34
views
Is my connection using SSL or not?
I have two MySQL 5.7 databases ([db1] 5.7.27 and [db2] 5.7.29)
(n.b. db1 is Linux, db2 is Windows)
I have created a basic user on db1:
CREATE USER 'ssltest'@'%' IDENTIFIED BY 'ssltest';
GRANT ALL ON *....
- 1,920
1
vote
1
answer
170
views
SQL Server - Why am I getting TCP connections without sessions?
I enabled SSL with Forced Encryption enabled, using a self-signed certificate.
Then I've set up automated monitoring to detect not secured connections (seems redundant, I know, but bear with me here), ...
- 346
0
votes
1
answer
632
views
psql command, how to enforce certificate check?
I have created a cockroachdb v20.1.0 cluster based on this: https://www.cockroachlabs.com/docs/stable/deploy-cockroachdb-on-premises.html
I have also created a test user like this:
CREATE USER test ...
- 393
0
votes
0
answers
54
views
After enabling SSL in Oracle user must log in twice
I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
0
votes
1
answer
264
views
For SSL renewal procedure in Db2 LUW , DO i need to create CSR request for each instance residing in same server?
I am trying to renew my SSL certs . Stuck here if we need to have create a Certificate Signing Request for each instance residing on the same server and send it to CA who will provide us the ...
- 1
0
votes
0
answers
1k
views
How to turn off SSL for Postgres for remote connections?
After changing the pg_hba.conf file and setting it to 0.0.0.0/0 and editing the postgresql.conf file to listen_addresses='*', Postgres is still not accepting connections from a remote system.
I think ...
0
votes
1
answer
106
views
ssl with postgresql 12
I tried following the docs for the same.
It says postgres.conf will have service.crt for ssl_cert_file, but it has /etc/ssl/certs/ssl-cert-snakeoil.pem
and now I can't proceed with it.
Any insight ...
anny
0
votes
1
answer
99
views
How to reject unvalidated SSL client connections from the MongoDB server?
I have setup a MongoDB server with a self-signed server certificate, and when I use the server validation method in Compass along with the CA certificate, it works well. However, I am still able to ...
0
votes
1
answer
131
views
Status show SSL is in use even though I did not set up certificate on the client side?
I want to set up SSL connections to a distant MariaDB server. I followed the instructions here. I generated the certificate for the server, restarted it, and got this:
+---------------------+---------...
- 147
0
votes
0
answers
89
views
Encryption in transit not working in MongoDB
I am using MongoDB 4.0.6 with 3 node replica set. I am upgrading my cluster to use SSL, below are steps which i am following :
1) generated CA.pem, server.pem and client.pem file and updated in my ...
0
votes
1
answer
1k
views
SSL Configuration fails with a warning MySQL 8.0
Hi I am trying to set up a MySQL server 8.0.16 on RHEL 7.5. The configuration I am willing to include for this server contains SSL related options.
The MySQL server is initialized but with a warning ...
0
votes
1
answer
3k
views
Verify if the client is connecting to the Oracle database using native network encryption
My environment is as below -
Server: Oracle 12C 12.1.0.2.v17 ( AWS RDS Service)
Client: Windows 2012 machine with Oracle 19C 64 bit full client
Tools : SQL Developer and Toad on the client machine
I ...
- 107
1
vote
1
answer
1k
views
Using letsencrypt with postgresql [closed]
I'm trying to use letsencrypt to generate certs in order to encrypt communication between a remote client and my postgresql database server. I'm not sure how to get started on setting this up. What ...
- 35
0
votes
1
answer
84
views
How to find SSL root cert that made connection to the database in PostgreSQL?
When we connect to postgreSQL via ssl-mode=verify-full how will I make sure if the certificate I passed is used while making the connection?
With ssl_is_used(); shows only true or false. Is there ...
- 425
0
votes
1
answer
4k
views
How to generate a self-signed SSL certificate for MS SQL server 2008 R2 using OpenSSL?
Using OpenSSL, I'd like to generate a self-signed certificate for usage with Microsoft SQL server 2008 R2. This might be unusual, but I'd like to learn what's going on behind the scenes.
I have ...
- 111
1
vote
1
answer
3k
views
Remove expired certificate SQL Server
I am trying to delete an expired certificate from my database server. The certificate was used to encrypt connections to sql server 2014 r2. We no longer have a need to encrypt connections and so we ...
- 11
2
votes
2
answers
285
views
Configuring SQL Server for SSL Encryption
I'm new to the DBA role and I've been tasked with configuring a SQL Server install for a client, with the requirement that databases will be distributed across two instances. Connections to one of ...
2
votes
2
answers
731
views
MariaDB/MySQL SSL Replication Failure
After searching for a solution for the last 6 hours, I have come up dry in my attempt to add SSL to the replication. I managed to get it to connect with SSL via the mysql command line tool without ...
- 133
0
votes
1
answer
33
views
How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?
I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
- 113
0
votes
0
answers
70
views
Do I need client or server cert for mySQL master/master replication?
WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates:
using --sign, which creates a client-cert
Using --server, which creates a server-cert
The ...
- 101
1
vote
0
answers
261
views
Unable to Connect to SQL Server 2005 through ODBC drivers from Windows 2012 server
We are unable to connect to a specific Database server which has SQL Server 2005 installed on Windows 2003 server from any of the Windows Server 2012. It used to work till last week, the only change ...
- 11
1
vote
2
answers
2k
views
How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?
I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
1
vote
1
answer
277
views
SQL Services Wont Start After Removing TLS [duplicate]
I need to remove TLS 1.0 from one of my SQL servers. When I do so and then reboot the server the SQL services dont start automatically. When I attempt to start them I get an error that it cant be done....
- 11
2
votes
1
answer
5k
views
how to generate the root CA.pem in mongodb for configuring the ssl certificates?
I am trying to configure the SSL certificates in the MongoDB community edition.
The configuration of my mongod.conf
net:
port: 27017
bindIp: 0.0.0.0 # Enter 0.0.0.0,:: to bind to all IPv4 and ...
- 123
0
votes
1
answer
1k
views
How do I debug/set up MariaDB SSL connection?
[ I originally posted this on ServerFault but then was pointed at this community ]
Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections.
I have ...
- 101
0
votes
1
answer
1k
views
Postgres still connecting via SSL - despite invalid certificates
I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)
I have enforced SSL ...
1
vote
0
answers
127
views
Force psqlODBC Postgres drivers to use Windows Trusted Root Certificate Store
I need to configure my client software to use SSL when connecting to a postgres database (sslmode=verify-full). The configuration requires me to specify a root certificate file in the following ...
- 111
0
votes
1
answer
706
views
How to remotely manage (with PhpMyAdmin) a MySQL RDS on a load-balanced AWS Elastic Beanstalk setup?
Although there are similar questions and topics, I can't find a solution that currently works.
I specifically wrote remotely manage because I'd like to use my home computer's PhpMyAdmin to directly ...
- 101
5
votes
1
answer
512
views
Does requiring SSL matter if using AWS RDS and AWS EC2 in a VPC
I have a MySQL RDS DB and am connecting it through an EC2 instance.
My RDS isn't publicly accessible, so I think it can only be connected to through my EC2 instances.
I see at this link https://...
- 51