Questions tagged [tls-1.2]

Transport Layer Security (TLS) is a protocol that provides privacy and data integrity between two communicating applications.

Filter by
Sorted by
Tagged with
0 votes
1 answer
178 views

Unable to start MySQL with SSL support

I've generated a handful of certificates for my MySQL 8.0.30 (mysql-server.x86_64 8.0.30-1.module+el8.6.0+16523+5cb0e868 @rhel-8-for-x86_64-appstream-rpms) on RHEL 8.7 and I'm running into an issue... ...
Kevin Huntly's user avatar
0 votes
1 answer
184 views

Is there a way for mongodb clients to connect to mongodb server (SSL/TLS enabled) without client certificates?

I am trying to setup a MongoDB with SSL/TLS enabled. I'm just wondering is there a way for clients to connect to my mongodb server without having a client certificate that would not compromise the ...
JRA's user avatar
  • 129
0 votes
0 answers
3k views

ORA-28759: failure to open file

I have implemented oracle wallet using orapki utility following this guide : https://stackoverflow.com/questions/63834638/how-to-change-protocol-for-oracle-database-connection-in-asp-net-core However, ...
Ali's user avatar
  • 195
0 votes
1 answer
2k views

DBeaver error returned connecting to Db2 database using SSL/TLS with hostname validation error

I have configured SSL/TLS on Db2/Linux v11.5.7.0. In DBeaver 22.1.5 (Java GUI program to access database) in Driver properties I have configured parameter: sslConnection to true and DBeaver ...
folow's user avatar
  • 303
0 votes
1 answer
486 views

TLS Connection Looking For Wallet in Default Location despite using MY_WALLET_DIRECTORY

I'm finding hints here and there that this is a known issue, but just wanted to ask here directly to confirm. I have a typical client-server TLS connection. We have multiple database instances server-...
Jeff Bauersfeld's user avatar
0 votes
1 answer
4k views

can SQLSRV32.DLL broker a TLS 1.2 handshake?

Are there updates to SQLSRV32.DLL driver to support TLS 1.2? Version 10.00.18362 seems to broker a successful #TLS 1.2 handshake to #SQLServer 2016 https://sqlvandalism.com/2017/03/22/what-client-...
EngineeringSQL's user avatar
0 votes
1 answer
1k views

MongoDB TLS unable to get issuer certificate

I'm setting up a MongoDB server, and wanted to use TLS from a proper CA and DNS. I got a domain name and put an A record in, linking to my server. Afterwards, I applied for a SSL certificate on ...
mosfeta's user avatar
0 votes
2 answers
10k views

Test connection failed because of an error in initializing provider. DBNETLIB ConnectionOpen SecDoClientHandshake SSL security error

I'm running all Windows 2016 Servers. I've got MS SQL 2016 installed on one. For whatever reason, we cannot connect to the SQL Server unless we enable TLS 1.0 which is obviously not cool. I found ...
Steven's user avatar
  • 11
0 votes
1 answer
832 views

SQL Server 2017 and TLS - client requirements

I am testing something around SSL\TLS and SQL Server 2017. I have enabled TLS on a test SQL Server instance by creating a self-signed cert and doing the required steps to add it to the Windows ...
Alan B's user avatar
  • 417
0 votes
1 answer
120 views

Enabling TLS and TLS-MA simultaneously for different clients of a Oracle DB

We have a requirement where we want to enable TLS-MA for some of the clients connecting to a specific Oracle database while the other clients can continue to use TLS with server certificate. We are ...
NoviceProgrammer's user avatar
3 votes
0 answers
273 views

Configure SQL server to force encryption programmatically

I'd like to enable the ForceEncryption flag for SQL server programmatically. I tried: Set-ItemProperty ` -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\...
Ceilingfish's user avatar
0 votes
1 answer
1k views

Enabling TLSv1 in postgres12 / openssl1.1.1f

After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1. I ...
clamp's user avatar
  • 101
0 votes
0 answers
92 views

After enabling SSL in Oracle user must log in twice

I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
user3150146's user avatar
0 votes
1 answer
2k views

Unable to connect to SQL Server from one machine; "an existing connection was forcably closed by the remote host"

Connecting to the SQL Server (2008 R2 SP3 - KB 4057113) with SSMS version 18 yields: A connection was successfully established with the server, but then an error occurred during the login process. (...
Joshua's user avatar
  • 416
0 votes
1 answer
1k views

SQL Server 2014 SP3 DB emailer TLS 1.2 support

I have SQL Server 2014 (SP3-CU4) 12.0.6329.1 running on Windows Server 2012R2 with .NET 3.5.30729.4926 installed I can't get Database emailer to work with TLS 1.2 I tried everything in the article "...
kkuderko's user avatar
4 votes
1 answer
3k views

Why does TLS1.2 break connections to SQL Server?

NOTE: Requested to move the question from StackOverflow to dba Don't know if this is really a SQL Server problem or not. Client moved to TLS 1.2, it broke an app that connects to SQL Server 2017 and ...
Marinaio's user avatar
  • 197
3 votes
1 answer
4k views

Limit TLS and Cipher Suites on SQL Server 2016-2019

I'm wanting to configure some SQL 2016+ servers to use only TLS 1.2+ and a subset of Cipher suite options (no ciphers considered weak or compromized). I'm having trouble tracking down how to ...
Tracker1's user avatar
  • 201
0 votes
1 answer
44 views

How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?

I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
Kun Ren's user avatar
  • 113
4 votes
1 answer
1k views

Some basic questions about SQL and TLS 1.0 and 1.2

(I don't believe this is a duplicate of any other TLS-related question, like the authoritative question about SQL Compatibility with TLS or its many duplicates, or questions about specific TLS-related ...
BradC's user avatar
  • 9,784
5 votes
1 answer
3k views

TLS 1.2 breaks SQL Server linked servers

As part of a recent security blitz we set up TLS 1.2 on all of our servers. Last night I flipped the "Force Encryption" flag on all of our SQL Servers and since then I've had a weird issue with linked ...
Gavin Harris's user avatar
0 votes
0 answers
599 views

Schannel 36871 Error when sending emails from Database Mail - after upgrading to SQL Server 2016

I have recently upgraded from SQL Server 2014 ENT to 2016 ENT, and now I cannot send emails from Database Mail. I get the usual The mail could not be sent to the recipients because of the mail ...
Dina's user avatar
  • 1,467
22 votes
4 answers
45k views

Enable TLS 1.2 for SQL Server 2016 database mail

I have been puzzled by this issue for almost 1 week. Hopefully someone in our community has experienced the same issue and already found a solution. So here is my problem: As per our company policy, ...
jyao's user avatar
  • 2,983
2 votes
0 answers
2k views

Configuration of TCP/IP with SSL and TLS for Oracle

I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
Arnaldo Raxach's user avatar
2 votes
1 answer
9k views

Enable TLS 1.2 and disable SSL 3 on SQL Server 2008 [closed]

I know similar questions have been asked. What I'm asking for are concrete instructions on what to do, or not do, for my particular installation. I have some questions that I can't find the answer to, ...
Jam's user avatar
  • 145
0 votes
1 answer
47 views

Is it possible to use one certificate with aliases for MongoDB cluster?

I currently configure a MongoDB cluster to use TLS certificate. It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
Antoine's user avatar
  • 361
3 votes
1 answer
29k views

Where is MSOLEDBSQL provider driver? "The 'MSOLEDBSQL' provider is not registered on the local machine."

This has been going on. At first MS said they will not support TLS1.2 for OLEDB then they said, they will. You can read about it here, where they said, the support comes in March 2018 Now it looks ...
T.S.'s user avatar
  • 196
3 votes
1 answer
15k views

Application Server is not able to connect to SQL Server database when TLS 1.2 or 1.1 is enabled

In our environment, SQL Server 2012 Servers whenever TLS 1.2 or TLS 1.1 is enabled Application Server is not able to connect to the database.The same issue is observed only on MS SQL Server 2012 ...
Sin's user avatar
  • 31
1 vote
0 answers
474 views

Does SQL Server TLS1.1 support only come bundled with TLS 1.2 support in 2008 R2?

I strongly suspect that Microsoft introduced TLS 1.1 support in 2008 R2 in the same updates that they introduced TLS 1.2 support but I can't find any documented evidence of this. I understand that TLS ...
Meadowlark Bradsher's user avatar
0 votes
1 answer
748 views

TLS 1.2 Implementation Validation

I have a validation question regarding implementation of TLS 1.2. What tools, scripts, processes, etc.. can be used to validate that TLS 1.2 is working when clients, webserver, and SQL Servers are ...
user3344488's user avatar
2 votes
0 answers
206 views

Postgresql: Enable TLS for localhost connections

What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
Greta B.'s user avatar
2 votes
2 answers
2k views

Error after applying SQL Server 2008 R2 Upgrade 10.50.6542 (Latest Build)

First the problem: Since I applied the latest patch to SQL Server 2008 R2 (released on March 3, 2016) that should have taken my server to build 10.50.6542 I can't connect anymore. This patch is to ...
Martin Surasky's user avatar
3 votes
2 answers
5k views

SSRS using external images through tls 1.2 leaves src(unknown)

One of our SSRS reports loads images from external sources and one of these sources has been locked down to tls 1.2 (which is fair and we're expecting more of our clients to be doing this in the ...
Ste Bov's user avatar
  • 2,041
3 votes
1 answer
2k views

Linked Server Setup Error - SSL Provider: The client and server cannot communicate, because

I am trying to setup a linked server and ending up with the following error. Error: SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm. Environment:...
Santhoshkumar KB's user avatar
1 vote
1 answer
3k views

SQL Server Express support for TLS1.2

I have installed SQL Server 2014 Express Edition ( 12.0.2000.8 x64 ) on a Windows server 2012 machine. Because of the POODLE vulnerability, our IT department is going to disable TLS 1.0 and all ...
SMammai's user avatar
  • 11
2 votes
0 answers
365 views

Does TLS 1.2 for SQL Server require SHA2/SHA256 certificates?

After reviewing SQL Server compatibility with New TLS Standards and much Googling, I think we've got the updates and settings needed to disable TLS 1.0 on SQL Server 2008 R2 with .NET 3.5.1. But I'...
Paul's user avatar
  • 143
1 vote
0 answers
528 views

TLS 1.0 disabled causing errors when requests come from SQL Server to a Webserver

The issue that I have at the moment is that when I disable TLS 1.0 (due to PCI Compliance) on a web server that hosts our external application, a stored procedure is called from a different server ...
user1807615's user avatar
0 votes
1 answer
8k views

How to enable TLS1.2 for port 1433

I have received vulnerability on Microsoft SQL server 2008 (RTM) [high] [1433/tcp/mssql] TLS Version 1.2 Protocol Not Enabled TLS v1.2 is not enabled on this port. Already enabled TLS 1.2 on OS ...
Karthik's user avatar
8 votes
1 answer
5k views

What are the "GDR" vs "QFE" hotfixes for SQL Server 2008 R2 SP3?

I'd always assumed that higher patch numbers were necessarily later releases, but now I'm not so sure. Looking at the SQL Server Build List for SQL Server 2008 R2 SP3, there are two possible ways to ...
BradC's user avatar
  • 9,784