Questions tagged [tls-1.2]
Transport Layer Security (TLS) is a protocol that provides privacy and data integrity between two communicating applications.
34
questions
0
votes
0
answers
32
views
TLS Encryption Logging/Auditing in Oracle
I use Oracle only occasionally, but have heard that it is pretty easy to verify if your Oracle encryption is working (e.g. this post Verify if the client is connecting to the Oracle database using ...
0
votes
1
answer
1k
views
can SQLSRV32.DLL broker a TLS 1.2 handshake?
Are there updates to SQLSRV32.DLL driver to support TLS 1.2? Version 10.00.18362 seems to broker a successful #TLS 1.2 handshake to #SQLServer 2016
https://sqlvandalism.com/2017/03/22/what-client-...
- 579
0
votes
1
answer
150
views
MongoDB TLS unable to get issuer certificate
I'm setting up a MongoDB server, and wanted to use TLS from a proper CA and DNS.
I got a domain name and put an A record in, linking to my server. Afterwards, I applied for a SSL certificate on ...
- 1
0
votes
2
answers
4k
views
Test connection failed because of an error in initializing provider. DBNETLIB ConnectionOpen SecDoClientHandshake SSL security error
I'm running all Windows 2016 Servers. I've got MS SQL 2016 installed on one. For whatever reason, we cannot connect to the SQL Server unless we enable TLS 1.0 which is obviously not cool.
I found ...
- 11
0
votes
1
answer
345
views
SQL Server 2017 and TLS - client requirements
I am testing something around SSL\TLS and SQL Server 2017. I have enabled TLS on a test SQL Server instance by creating a self-signed cert and doing the required steps to add it to the Windows ...
- 417
0
votes
1
answer
73
views
Enabling TLS and TLS-MA simultaneously for different clients of a Oracle DB
We have a requirement where we want to enable TLS-MA for some of the clients connecting to a specific Oracle database while the other clients can continue to use TLS with server certificate.
We are ...
- 101
2
votes
0
answers
182
views
Configure SQL server to force encryption programmatically
I'd like to enable the ForceEncryption flag for SQL server programmatically.
I tried:
Set-ItemProperty `
-Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\...
- 121
0
votes
1
answer
619
views
Enabling TLSv1 in postgres12 / openssl1.1.1f
After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1.
I ...
- 101
0
votes
0
answers
57
views
After enabling SSL in Oracle user must log in twice
I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
0
votes
1
answer
1k
views
Unable to connect to SQL Server from one machine; "an existing connection was forcably closed by the remote host"
Connecting to the SQL Server (2008 R2 SP3 - KB 4057113) with SSMS version 18 yields:
A connection was successfully established with the server, but then an error occurred during the login process. (...
- 382
0
votes
1
answer
1k
views
SQL Server 2014 SP3 DB emailer TLS 1.2 support
I have SQL Server 2014 (SP3-CU4) 12.0.6329.1 running on Windows Server 2012R2 with .NET 3.5.30729.4926 installed
I can't get Database emailer to work with TLS 1.2
I tried everything in the article "...
- 11
3
votes
1
answer
2k
views
Why does TLS1.2 break connections to SQL Server?
NOTE: Requested to move the question from StackOverflow to dba
Don't know if this is really a SQL Server problem or not.
Client moved to TLS 1.2, it broke an app that connects to SQL Server 2017 and ...
- 187
3
votes
1
answer
2k
views
Limit TLS and Cipher Suites on SQL Server 2016-2019
I'm wanting to configure some SQL 2016+ servers to use only TLS 1.2+ and a subset of Cipher suite options (no ciphers considered weak or compromized). I'm having trouble tracking down how to ...
- 201
0
votes
1
answer
34
views
How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?
I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
- 113
4
votes
1
answer
1k
views
Some basic questions about SQL and TLS 1.0 and 1.2
(I don't believe this is a duplicate of any other TLS-related question, like the authoritative question about SQL Compatibility with TLS or its many duplicates, or questions about specific TLS-related ...
- 9,624
5
votes
1
answer
2k
views
TLS 1.2 breaks SQL Server linked servers
As part of a recent security blitz we set up TLS 1.2 on all of our servers. Last night I flipped the "Force Encryption" flag on all of our SQL Servers and since then I've had a weird issue with linked ...
- 135
0
votes
0
answers
529
views
Schannel 36871 Error when sending emails from Database Mail - after upgrading to SQL Server 2016
I have recently upgraded from SQL Server 2014 ENT to 2016 ENT, and now I cannot send emails from Database Mail. I get the usual
The mail could not be sent to the recipients because of the mail ...
- 1,447
20
votes
4
answers
32k
views
Enable TLS 1.2 for SQL Server 2016 database mail
I have been puzzled by this issue for almost 1 week. Hopefully someone in our community has experienced the same issue and already found a solution.
So here is my problem:
As per our company policy, ...
- 2,915
2
votes
0
answers
2k
views
Configuration of TCP/IP with SSL and TLS for Oracle
I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
- 125
1
vote
1
answer
7k
views
Enable TLS 1.2 and disable SSL 3 on SQL Server 2008 [closed]
I know similar questions have been asked. What I'm asking for are concrete instructions on what to do, or not do, for my particular installation. I have some questions that I can't find the answer to, ...
- 135
0
votes
1
answer
39
views
Is it possible to use one certificate with aliases for MongoDB cluster?
I currently configure a MongoDB cluster to use TLS certificate.
It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
- 361
3
votes
1
answer
24k
views
Where is MSOLEDBSQL provider driver? "The 'MSOLEDBSQL' provider is not registered on the local machine."
This has been going on. At first MS said they will not support TLS1.2 for OLEDB then they said, they will. You can read about it here, where they said, the support comes in March 2018
Now it looks ...
- 177
3
votes
1
answer
14k
views
Application Server is not able to connect to SQL Server database when TLS 1.2 or 1.1 is enabled
In our environment, SQL Server 2012 Servers whenever TLS 1.2 or TLS 1.1 is enabled Application Server is not able to connect to the database.The same issue is observed only on MS SQL Server 2012 ...
- 31
1
vote
0
answers
460
views
Does SQL Server TLS1.1 support only come bundled with TLS 1.2 support in 2008 R2?
I strongly suspect that Microsoft introduced TLS 1.1 support in 2008 R2 in the same updates that they introduced TLS 1.2 support but I can't find any documented evidence of this. I understand that TLS ...
0
votes
1
answer
671
views
TLS 1.2 Implementation Validation
I have a validation question regarding implementation of TLS 1.2.
What tools, scripts, processes, etc.. can be used to validate that TLS 1.2 is working when clients, webserver, and SQL Servers are ...
2
votes
0
answers
195
views
Postgresql: Enable TLS for localhost connections
What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
- 21
2
votes
2
answers
2k
views
Error after applying SQL Server 2008 R2 Upgrade 10.50.6542 (Latest Build)
First the problem: Since I applied the latest patch to SQL Server 2008 R2 (released on March 3, 2016) that should have taken my server to build 10.50.6542 I can't connect anymore. This patch is to ...
- 763
2
votes
1
answer
4k
views
SSRS using external images through tls 1.2 leaves src(unknown)
One of our SSRS reports loads images from external sources and one of these sources has been locked down to tls 1.2 (which is fair and we're expecting more of our clients to be doing this in the ...
- 1,991
3
votes
1
answer
2k
views
Linked Server Setup Error - SSL Provider: The client and server cannot communicate, because
I am trying to setup a linked server and ending up with the following error.
Error:
SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm.
Environment:...
- 551
1
vote
1
answer
3k
views
SQL Server Express support for TLS1.2
I have installed SQL Server 2014 Express Edition ( 12.0.2000.8 x64 ) on a Windows server 2012 machine.
Because of the POODLE vulnerability, our IT department is going to disable TLS 1.0 and all ...
- 11
2
votes
0
answers
310
views
Does TLS 1.2 for SQL Server require SHA2/SHA256 certificates?
After reviewing SQL Server compatibility with New TLS Standards and much Googling, I think we've got the updates and settings needed to disable TLS 1.0 on SQL Server 2008 R2 with .NET 3.5.1.
But I'...
- 143
1
vote
0
answers
504
views
TLS 1.0 disabled causing errors when requests come from SQL Server to a Webserver
The issue that I have at the moment is that when I disable TLS 1.0 (due to PCI Compliance) on a web server that hosts our external application, a stored procedure is called from a different server ...
- 11
0
votes
1
answer
7k
views
How to enable TLS1.2 for port 1433
I have received vulnerability on Microsoft SQL server 2008 (RTM)
[high] [1433/tcp/mssql] TLS Version 1.2 Protocol Not Enabled
TLS v1.2 is not enabled on this port.
Already enabled TLS 1.2 on OS ...
- 1
8
votes
1
answer
4k
views
What are the "GDR" vs "QFE" hotfixes for SQL Server 2008 R2 SP3?
I'd always assumed that higher patch numbers were necessarily later releases, but now I'm not so sure.
Looking at the SQL Server Build List for SQL Server 2008 R2 SP3, there are two possible ways to ...
- 9,624