Skip to main content

Questions tagged [tls-1.2]

Transport Layer Security (TLS) is a protocol that provides privacy and data integrity between two communicating applications.

Filter by
Sorted by
Tagged with
1 vote
2 answers
84 views

Can one TLS certificate be used for multiple instances of SQL Server?

Windows 2022, SQL Server 2022, FCI cluster with 2 physical nodes. 5 instances of SQL Server running on the FCI cluster. I need to have TLS certification running on all 5 instances of SQL Server. Can a ...
SQL_Hacker's user avatar
0 votes
1 answer
68 views

How to connect in case Azure Cosmos DB default force use TLS/SSL?

My case: Client: Windows 10 x64. pgAdmin 4 version 8.4 (latest). Server: Cloud Azure Cosmos DB for PostgreSQL burstable, version 16. My connection string will be likes this jdbc:postgresql://c-...
Vy Do's user avatar
  • 219
0 votes
1 answer
685 views

How do i disable SSL on MySQL Community 8.0.36 on Ubuntu 23.10?

I wasn't paying attention when I was presented with the option to generate credentials for operating via SSL. Having gone through the whole process, I was advised to follow-up on installing ...
TheGeeko61's user avatar
0 votes
0 answers
156 views

MongoServerSelectionError: Client network socket disconnected before secure TLS connection was established on GKE Autopilot workload

We are in the process of migrating from CloudRun to GKE Autopilot. We have the same exact environment variables and the LoadBalancer service for the workload has the same port configuration as the ...
ift-436t's user avatar
0 votes
2 answers
268 views

mongodump refuses to connect with ssl

I have set up my mongod instance with the following config: net: port: 27017 bindIp: 0.0.0.0 ssl: mode: requireSSL PEMKeyFile: /config/mongo.pem CAFile: /config/ca.pem ...
taxfree's user avatar
0 votes
1 answer
2k views

[ODBC SQL Server Driver][DBNETLIB] SSL Security Error - Windows 2003 App Server to Remote SQL Server 2022 Connection

We have migrated the application databases from an old SQL Server 2000 instance running on Windows 2003 to a new SQL Server 2022 instance running on Windows 2022. The application tier has a number of ...
Fza's user avatar
  • 652
1 vote
0 answers
74 views

How can I enable server certificate verification when connecting to a remote host, but not when connecting via localhost?

When I add ssl-verify-server-cert to a [client-mariadb] section in the configuration files, the client correctly verifies the server certificate when connecting to a remote MariaDB instance. When ...
Nick's user avatar
  • 301
0 votes
0 answers
35 views

How can I get more verbose TLS certificate errors with MariaDB?

When attempting to connect to MariaDB from a remote client (command line on another server), I get the rather unhelpful: ERROR 1045 (28000): Access denied for user 'myuser'@'mydomain.com' (using ...
Nick's user avatar
  • 301
0 votes
0 answers
45 views

Why can I establish SSL Session to MYSQL from Mysql Client, but not DbEaver 8.0

[mysqld] ssl=ON ssl_ca=ca.pem ssl_cert=server-cert.pem ssl_key=server-key.pem require_secure_transport=ON tls_version=TLSv1.2,TLSv1.3 Results: mysql client remote = Tls Session connects. ...
DBA_OnDemand's user avatar
0 votes
1 answer
550 views

Unable to start MySQL with SSL support

I've generated a handful of certificates for my MySQL 8.0.30 (mysql-server.x86_64 8.0.30-1.module+el8.6.0+16523+5cb0e868 @rhel-8-for-x86_64-appstream-rpms) on RHEL 8.7 and I'm running into an issue... ...
Kevin Huntly's user avatar
2 votes
1 answer
587 views

Is there a way for mongodb clients to connect to mongodb server (SSL/TLS enabled) without client certificates?

I am trying to setup a MongoDB with SSL/TLS enabled. I'm just wondering is there a way for clients to connect to my mongodb server without having a client certificate that would not compromise the ...
JRA's user avatar
  • 149
0 votes
0 answers
6k views

ORA-28759: failure to open file

I have implemented oracle wallet using orapki utility following this guide : https://stackoverflow.com/questions/63834638/how-to-change-protocol-for-oracle-database-connection-in-asp-net-core However, ...
Ali's user avatar
  • 305
0 votes
1 answer
3k views

DBeaver error returned connecting to Db2 database using SSL/TLS with hostname validation error

I have configured SSL/TLS on Db2/Linux v11.5.7.0. In DBeaver 22.1.5 (Java GUI program to access database) in Driver properties I have configured parameter: sslConnection to true and DBeaver ...
folow's user avatar
  • 347
0 votes
1 answer
957 views

TLS Connection Looking For Wallet in Default Location despite using MY_WALLET_DIRECTORY

I'm finding hints here and there that this is a known issue, but just wanted to ask here directly to confirm. I have a typical client-server TLS connection. We have multiple database instances server-...
Jeff Bauersfeld's user avatar
0 votes
1 answer
5k views

can SQLSRV32.DLL broker a TLS 1.2 handshake?

Are there updates to SQLSRV32.DLL driver to support TLS 1.2? Version 10.00.18362 seems to broker a successful #TLS 1.2 handshake to #SQLServer 2016 https://sqlvandalism.com/2017/03/22/what-client-...
EngineeringSQL's user avatar
0 votes
1 answer
2k views

MongoDB TLS unable to get issuer certificate

I'm setting up a MongoDB server, and wanted to use TLS from a proper CA and DNS. I got a domain name and put an A record in, linking to my server. Afterwards, I applied for a SSL certificate on ...
mosfeta's user avatar
0 votes
2 answers
13k views

Test connection failed because of an error in initializing provider. DBNETLIB ConnectionOpen SecDoClientHandshake SSL security error

I'm running all Windows 2016 Servers. I've got MS SQL 2016 installed on one. For whatever reason, we cannot connect to the SQL Server unless we enable TLS 1.0 which is obviously not cool. I found ...
Steven's user avatar
  • 11
0 votes
1 answer
962 views

SQL Server 2017 and TLS - client requirements

I am testing something around SSL\TLS and SQL Server 2017. I have enabled TLS on a test SQL Server instance by creating a self-signed cert and doing the required steps to add it to the Windows ...
Alan B's user avatar
  • 407
0 votes
1 answer
144 views

Enabling TLS and TLS-MA simultaneously for different clients of a Oracle DB

We have a requirement where we want to enable TLS-MA for some of the clients connecting to a specific Oracle database while the other clients can continue to use TLS with server certificate. We are ...
NoviceProgrammer's user avatar
3 votes
0 answers
379 views

Configure SQL server to force encryption programmatically

I'd like to enable the ForceEncryption flag for SQL server programmatically. I tried: Set-ItemProperty ` -Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\...
Ceilingfish's user avatar
0 votes
1 answer
1k views

Enabling TLSv1 in postgres12 / openssl1.1.1f

After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1. I ...
clamp's user avatar
  • 101
0 votes
0 answers
159 views

After enabling SSL in Oracle user must log in twice

I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
user3150146's user avatar
0 votes
1 answer
2k views

Unable to connect to SQL Server from one machine; "an existing connection was forcably closed by the remote host"

Connecting to the SQL Server (2008 R2 SP3 - KB 4057113) with SSMS version 18 yields: A connection was successfully established with the server, but then an error occurred during the login process. (...
Joshua's user avatar
  • 426
0 votes
1 answer
2k views

SQL Server 2014 SP3 DB emailer TLS 1.2 support

I have SQL Server 2014 (SP3-CU4) 12.0.6329.1 running on Windows Server 2012R2 with .NET 3.5.30729.4926 installed I can't get Database emailer to work with TLS 1.2 I tried everything in the article "...
kkuderko's user avatar
5 votes
1 answer
4k views

Why does TLS1.2 break connections to SQL Server?

I have a Client who moved to TLS 1.2, which broke an app that connects to SQL Server 2017 and it got dumped on my lap. Being a Linux person all I can say is when they went back to TLS 1.1 it worked ...
Marinaio's user avatar
  • 207
3 votes
1 answer
6k views

Limit TLS and Cipher Suites on SQL Server 2016-2019

I'm wanting to configure some SQL 2016+ servers to use only TLS 1.2+ and a subset of Cipher suite options (no ciphers considered weak or compromized). I'm having trouble tracking down how to ...
Tracker1's user avatar
  • 201
0 votes
1 answer
48 views

How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?

I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
Kun Ren's user avatar
  • 113
4 votes
1 answer
2k views

Some basic questions about SQL and TLS 1.0 and 1.2

(I don't believe this is a duplicate of any other TLS-related question, like the authoritative question about SQL Compatibility with TLS or its many duplicates, or questions about specific TLS-related ...
BradC's user avatar
  • 10k
5 votes
1 answer
3k views

TLS 1.2 breaks SQL Server linked servers

As part of a recent security blitz we set up TLS 1.2 on all of our servers. Last night I flipped the "Force Encryption" flag on all of our SQL Servers and since then I've had a weird issue with linked ...
Gavin Harris's user avatar
0 votes
0 answers
630 views

Schannel 36871 Error when sending emails from Database Mail - after upgrading to SQL Server 2016

I have recently upgraded from SQL Server 2014 ENT to 2016 ENT, and now I cannot send emails from Database Mail. I get the usual The mail could not be sent to the recipients because of the mail ...
Dina's user avatar
  • 1,507
24 votes
4 answers
55k views

Enable TLS 1.2 for SQL Server 2016 database mail

I have been puzzled by this issue for almost 1 week. Hopefully someone in our community has experienced the same issue and already found a solution. So here is my problem: As per our company policy, ...
jyao's user avatar
  • 3,063
2 votes
0 answers
2k views

Configuration of TCP/IP with SSL and TLS for Oracle

I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
Arnaldo Raxach's user avatar
2 votes
1 answer
11k views

Enable TLS 1.2 and disable SSL 3 on SQL Server 2008 [closed]

I know similar questions have been asked. What I'm asking for are concrete instructions on what to do, or not do, for my particular installation. I have some questions that I can't find the answer to, ...
Jam's user avatar
  • 155
0 votes
1 answer
51 views

Is it possible to use one certificate with aliases for MongoDB cluster?

I currently configure a MongoDB cluster to use TLS certificate. It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
Antoine's user avatar
  • 361
3 votes
1 answer
32k views

Where is MSOLEDBSQL provider driver? "The 'MSOLEDBSQL' provider is not registered on the local machine."

This has been going on. At first MS said they will not support TLS1.2 for OLEDB then they said, they will. You can read about it here, where they said, the support comes in March 2018 Now it looks ...
T.S.'s user avatar
  • 216
3 votes
1 answer
15k views

Application Server is not able to connect to SQL Server database when TLS 1.2 or 1.1 is enabled

In our environment, SQL Server 2012 Servers whenever TLS 1.2 or TLS 1.1 is enabled Application Server is not able to connect to the database.The same issue is observed only on MS SQL Server 2012 ...
Sin's user avatar
  • 31
1 vote
0 answers
481 views

Does SQL Server TLS1.1 support only come bundled with TLS 1.2 support in 2008 R2?

I strongly suspect that Microsoft introduced TLS 1.1 support in 2008 R2 in the same updates that they introduced TLS 1.2 support but I can't find any documented evidence of this. I understand that TLS ...
Meadowlark Bradsher's user avatar
0 votes
1 answer
807 views

TLS 1.2 Implementation Validation

I have a validation question regarding implementation of TLS 1.2. What tools, scripts, processes, etc.. can be used to validate that TLS 1.2 is working when clients, webserver, and SQL Servers are ...
user3344488's user avatar
2 votes
0 answers
213 views

Postgresql: Enable TLS for localhost connections

What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
Greta B.'s user avatar
2 votes
2 answers
2k views

Error after applying SQL Server 2008 R2 Upgrade 10.50.6542 (Latest Build)

First the problem: Since I applied the latest patch to SQL Server 2008 R2 (released on March 3, 2016) that should have taken my server to build 10.50.6542 I can't connect anymore. This patch is to ...
Martin Surasky's user avatar
4 votes
2 answers
5k views

SSRS using external images through tls 1.2 leaves src(unknown)

One of our SSRS reports loads images from external sources and one of these sources has been locked down to tls 1.2 (which is fair and we're expecting more of our clients to be doing this in the ...
Ste Bov's user avatar
  • 2,091
3 votes
1 answer
2k views

Linked Server Setup Error - SSL Provider: The client and server cannot communicate, because

I am trying to setup a linked server and ending up with the following error. Error: SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm. Environment:...
Santhoshkumar KB's user avatar
1 vote
1 answer
3k views

SQL Server Express support for TLS1.2

I have installed SQL Server 2014 Express Edition ( 12.0.2000.8 x64 ) on a Windows server 2012 machine. Because of the POODLE vulnerability, our IT department is going to disable TLS 1.0 and all ...
SMammai's user avatar
  • 11
2 votes
0 answers
407 views

Does TLS 1.2 for SQL Server require SHA2/SHA256 certificates?

After reviewing SQL Server compatibility with New TLS Standards and much Googling, I think we've got the updates and settings needed to disable TLS 1.0 on SQL Server 2008 R2 with .NET 3.5.1. But I'...
Paul's user avatar
  • 143
1 vote
0 answers
546 views

TLS 1.0 disabled causing errors when requests come from SQL Server to a Webserver

The issue that I have at the moment is that when I disable TLS 1.0 (due to PCI Compliance) on a web server that hosts our external application, a stored procedure is called from a different server ...
user1807615's user avatar
0 votes
1 answer
9k views

How to enable TLS1.2 for port 1433

I have received vulnerability on Microsoft SQL server 2008 (RTM) [high] [1433/tcp/mssql] TLS Version 1.2 Protocol Not Enabled TLS v1.2 is not enabled on this port. Already enabled TLS 1.2 on OS ...
Karthik's user avatar
8 votes
1 answer
5k views

What are the "GDR" vs "QFE" hotfixes for SQL Server 2008 R2 SP3?

I'd always assumed that higher patch numbers were necessarily later releases, but now I'm not so sure. Looking at the SQL Server Build List for SQL Server 2008 R2 SP3, there are two possible ways to ...
BradC's user avatar
  • 10k