Questions tagged [ssl]
Secure Sockets Layer (SSL) is a cryptographic protocols that provide communication security over the Internet.
0
votes
0answers
23 views
Do I need client or server cert for mySQL master/master replication?
WE use pkitool to sign any certificate using our own CA and there are two options to sign a certificates:
using --sign, which creates a client-cert
Using --server, which creates a server-cert
The ...
1
vote
0answers
58 views
Unable to Connect to SQL Server 2005 through ODBC drivers from Windows 2012 server
We are unable to connect to a specific Database server which has SQL Server 2005 installed on Windows 2003 server from any of the Windows Server 2012. It used to work till last week, the only change ...
0
votes
1answer
62 views
How to set up signed SSL Root and Leaf certificates on a PostgreSQL 11 database on Ubuntu and Windows 10 Power BI plus PostgreSQL?
I have Power BI and PostgreSQL 11 installed on Windows 10 and my primary PostgreSQL 11 database on Ubuntu 18.10 Linux. I edited the postgresql.conf and pg_hba.conf files correctly to the IP Adresses ...
0
votes
0answers
18 views
How to use the Percona Toolkit to connect to Azure Database for MySQL when SSL is enabled
I am attempting to use the pt-show-grants to connected to a MySQL instance with SSL enabled.
$ pt-show-grants --version
pt-show-grants 3.0.9
If I attempt to connect to my database without any ...
1
vote
1answer
26 views
SQL Services Wont Start After Removing TLS [duplicate]
I need to remove TLS 1.0 from one of my SQL servers. When I do so and then reboot the server the SQL services dont start automatically. When I attempt to start them I get an error that it cant be done....
2
votes
1answer
163 views
how to generate the root CA.pem in mongodb for configuring the ssl certificates?
I am trying to configure the SSL certificates in the MongoDB community edition.
The configuration of my mongod.conf
net:
port: 27017
bindIp: 0.0.0.0 # Enter 0.0.0.0,:: to bind to all IPv4 and ...
0
votes
0answers
22 views
SSL certificate is not sent to MySql Server while connecting from MySql C connector
I am writing a C program to communicate to MySql server (running on linux) as root, for whom REQUIRE SSL is set. In this program I am using following function call (from libmysqlclient.so) to set SSL ...
0
votes
1answer
55 views
How do I debug/set up MariaDB SSL connection?
[ I originally posted this on ServerFault but then was pointed at this community ]
Since moving from MySQL to a newer MariaDB installation on Debian 9, I a struggling with SSL connections.
I have ...
0
votes
1answer
68 views
Postgres still connecting via SSL - despite invalid certificates
I'm playing around with SSL connections to a test postgres server and I'm finding I can still initiate an SSL connection despite invalid certificates. (The valid date has expired)
I have enforced SSL ...
1
vote
0answers
31 views
Force psqlODBC Postgres drivers to use Windows Trusted Root Certificate Store
I need to configure my client software to use SSL when connecting to a postgres database (sslmode=verify-full). The configuration requires me to specify a root certificate file in the following ...
0
votes
1answer
62 views
How to remotely manage (with PhpMyAdmin) a MySQL RDS on a load-balanced AWS Elastic Beanstalk setup?
Although there are similar questions and topics, I can't find a solution that currently works.
I specifically wrote remotely manage because I'd like to use my home computer's PhpMyAdmin to directly ...
0
votes
1answer
37 views
Does requiring SSL matter if using AWS RDS and AWS EC2 in a VPC
I have a MySQL RDS DB and am connecting it through an EC2 instance.
My RDS isn't publicly accessible, so I think it can only be connected to through my EC2 instances.
I see at this link https://...
0
votes
1answer
82 views
Mariabackup Throws Unknown Argument Error
I have just installed the MariaDB backup tool based on Percona Xtrabackup, Mariabackup, on my CentOS 7 system with MariaDB v10.1. However, when I try to test using this tool, it fails immediately ...
0
votes
0answers
17 views
MySQL 5.5 replication over SSL broken after upgrading OpenSSL, OS
I've got an issue where, after upgrading a replication slave from Ubuntu 14.04 to 16.04, this slave can no longer connect to its master using SSL.
Setup before the upgrade:
1 master, 2 slaves, ALL ...
1
vote
1answer
126 views
Connection string for connecting mongo database with SSL enabled
Am facing some below problem in my mongodb replication environment
I have 3 replica set environment with SSL enabled and ssl mode as preferSSL
3 servers has 3 different Key file with common CA file
...
1
vote
0answers
37 views
SSRS default URL not being referenced from Windows application
I have installed and configured SSRS and when I check the URL via HTTP it works fine (I haven't configured SSL).
When I try to run a report from the Windows application, I get the following error ...
0
votes
2answers
66 views
How to verify SSL always being used on Postgresql 9.6
I have a sensitive application with app server and db on separate machines, and in the case of the slave db, in separate data-centers.
Although I believe my postgresqls are configured to always use ...
1
vote
0answers
62 views
SSL certificate for MS SQL Server
I'm trying to implement SSL certificate on a SQL Server and I already tried two methods. I tried with lets encrypt service and self certificate generated on Powershell.
In the first scenario I can ...
0
votes
1answer
59 views
`Encrypt Connection` causes an invalid certificate error even though server-side encryption is forced
I have a SQL Server set up to force encrypted connections from all client. It has a standard SSL certificate, using Let's Encrypt as the CA. Browsing to the server via a web browser verifies that the ...
1
vote
1answer
28 views
Using a real certificate with rethinkdb cert chain bundle
I know the rethinkdb guide uses a self signed cert as an example. If I wanted to use a real certificate that I purchased, how can I add the bundle to the server conf? I add the certificate I purchased ...
1
vote
3answers
147 views
MySQL SSL replication error 2026
I've been searching and testing for hours and still can't figure this out. MySQL version 5.7.23 on both slave and master.
Replication over SSL is failing with the following error message:
Slave I/...
1
vote
1answer
20 views
Why MongoDB not running SSL?
I need to run MongoDB with SSL, the version that is currently installed is 3.4.16 without SSL.
Can I download 3.4.16 with SSL and just stop the service copy the Bin files across and then start up the ...
1
vote
1answer
346 views
Postgresql install adding openssl
I install postgresql in my ubuntu Server 18.04 LTS, and I want it support OpenSSL.
I do the lengthy way with PostgreSQL source code installation, where I can select the openssl feature:
./...
2
votes
0answers
806 views
Configuration of TCP/IP with SSL and TLS for Oracle
I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
1
vote
1answer
336 views
SQL Server 2012 not loading its self-generated SSL certificate
I have a requirement to remove the SSL certificate that is being used by a SQL Server 2012 SP4 database instance for data in transit encryption.
The client wants the SQL Server to load its self-...
2
votes
1answer
2k views
Is it impossible to force MariaDB users to SSL?
First of all, my english is really bad, so sorry for my english mistakes.
I have a MariaDB 10.2.15. I installed SSL, and its working fine, but I cant force use SSL to users.
my.cnf:
[mysqld]
ssl
ssl-...
1
vote
1answer
2k views
MongoDB SSL peer certificate validation failed: unable to get issuer certificate
I have enabled SSL on MongoDB with optional SSL connection: preferred.
I have used lets encrypt in order to obtain SSL certificates. SSLs works as expected and in mongod.log file I can see that:
...
0
votes
1answer
71 views
SSL errors with Couchdb on Ubuntu 14.04
I am beginning to set up CouchDB on an Ubuntu 14.04 Server (yes, it expires next year) and I'm having troubles setting up SSL connections. For the moment, I don't have any CA signed certs for it, so I'...
2
votes
1answer
554 views
MongoDB gives certificate not trusted while openSSL says keys is OK
I have used let's encrypt to generate SSL certification. All the private key, chain and certificate is generated by `let's encrypt.
Now to use it in MongoDB I first merged privkey.pem and cert.pem ...
1
vote
1answer
39 views
How to stop MySQL recreating SSL files on restart
We're using MySQL 5.7.22. Each time I restart MySQL it creates a set of SSL files ( ca-key.pem etc) in the datadir.
The problem is that I already have these files on the server, in /etc/mysql/ssl.
...
2
votes
1answer
779 views
PostgreSQL - SSL connection without providing the root-ca certificate?
I set the following parameters to enable SSL on my PostgreSQL server:
ssl = True
ssl_ca_file = 'path-to-root-ca'
ssl_cert_file = 'path-to-server-crt'
ssl_key_file = 'path-to-server-key'
For my ...
1
vote
1answer
272 views
SSLServerHasCertificateAuthority is false but the certificate is signed by a trusted CA
I am enabling TLS/SSL encryption on a remote MongoDB instance (running on Windows Server 2012 R2). On the instance's server, devserver.external, I have created an SSL certificate. The CN on the ...
0
votes
1answer
202 views
How do I manage SSL credentials for multiple Postgres connections?
We're setting up Redash and need to connect to multiple Data Sources that are Postgres databases that require SSL connections. I have a postgres.key and postgres.crt file from each database. Redash is ...
4
votes
2answers
3k views
MySQL SSL error: Unable to get private key
Getting an error while trying to enable encryption:
[ERROR] SSL error: Unable to get private key from '/etc/mysql/ssl/nginx.key'
[Warning] Failed to set up SSL because of the following SSL library ...
4
votes
1answer
2k views
How to enable force ssl on AWS Aurora Postgres?
In AWS's direct postgres offering RDS Postgres, you can require SSL by setting the parameter group item rds.force_ssl to 1.
This is as per the RDS postgres documentation: https://docs.aws.amazon.com/...
4
votes
3answers
692 views
How do I test if MySQL “require secure transport” is working?
I activated the checkbox named "require secure transport" in the options file, found in the MySQL Workbench.
How do I know if MySQL "require secure transport" is working? Should I use command line at ...
1
vote
1answer
7k views
mysql workbench failed to connect at localhost:3306 with user root ssl connection error: ssl is required but the server doesn't support it [closed]
Not sure what the answers are, but I will say that I have not found the answers on how to make this work again.
The keyword support makes me think that a payment is required for this feature, but I'm ...
2
votes
2answers
633 views
Update expiring Mongo cluster SSL certificate
I have a multi-node mongo cluster using SSL requireSSL and the certificates are going to expire. Is there a zero-downtime method to update the certs? I know the easiest way would be to stop all nodes, ...
0
votes
1answer
330 views
Oracle JDBC TLS connection fails (handshake_failure) after OS upgrade
I have an Oracle Database 12.1 server running on Oracle Linux 6.
Secure (TLS) connections were working fine until I decided to update the underlying operating system (yum update) and reboot the ...
0
votes
1answer
61 views
Disable CertificateRequest in ServerHello in MySQL/MariaDB
I configured SSL (not mutual SSL) in MySQL. I created a user like this.
CREATE USER 'username'@'%' IDENTIFIED BY 'passowrd';
GRANT ALL ON db_name.* TO 'username'@'%' REQUIRE SSL;
But, in ...
2
votes
0answers
140 views
Postgresql: Enable TLS for localhost connections
What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
0
votes
1answer
1k views
Configure wallet location in sqlnet.ora and listener.ora
I have a host containing multiple DBs and the connection to the DBs need to be SSL enabled. Since each DB has a unique wallet, I specify the wallet location in sqlnet.ora as:
WALLET_LOCATION=(SOURCE=(...
1
vote
0answers
151 views
Mongoimport with SSL
I want to dump a database in a remote server www.myweb.io with ssl. The mongo version is 2.6.12. It seems that I have to use mongoimport. I am looking at /etc/nginx/sites-enabled/myweb.io:
server {
...
0
votes
1answer
232 views
Rule of thumb on what changes require a database reboot
I am working on enabling SSL for database listeners. As a part of it, I have to modify the sqlnet.ora and listener.ora files. Does this require a database bouncing to take effect? Is there a general ...
0
votes
2answers
407 views
MongoDB SSL Enabling/Configuration
I have created self signed Certificated by using openssl and have mongodb.pem(mongodb.key + mongodb.cert) file generated from openssl. Also i have my mongodb-ssl.conf file as follows
storage:
...
1
vote
1answer
1k views
SQL Server Self Signed Cert - no private key?
I recently turn on SSL encryption using SQL server self-signed cert then I start to ponder more about
1) encryption algorithm, authentication method
It seems that the encryption/hashing algorithm ...
1
vote
1answer
857 views
Mutual authentication via SSL Oracle 11g
I configure mutual authentication via SSL between client (Windows 7) and server (Windows Server 2008 R2). I create wallet via Oracle Wallet Manager (OWM) both on client and server, then I create ...
0
votes
1answer
326 views
Pulling data on SSL expiration from SQL server
I am trying to figure this out and seems to be out of thoughts and need your inputs to help me figure out on this.
We have implemented SSL across our 200+ servers, SQL2012 & 2014.
These cert are ...
3
votes
1answer
284 views
How can I setup replication with the DNS name instead of the Server Name
We are using SSL certificates from a public CA on each SQL Server in our (push) transactional replication topology, and wish to have the EncryptionLevel = 2 for our Distributor Agents. Currently ...
2
votes
2answers
822 views
Does MySQL or MariaDB have a master option to strictly require TLS for ALL connections, no matter what?
When setting up new MySQL or MariaDB servers, I am much more concerned about security than performance. The MySQL and MariaDB documentation use the words "allow" and "permit" around all the SSL ...
