Questions tagged [tls-1.2]
Transport Layer Security (TLS) is a protocol that provides privacy and data integrity between two communicating applications.
32
questions
0
votes
2answers
791 views
Test connection failed because of an error in initializing provider. DBNETLIB ConnectionOpen SecDoClientHandshake SSL security error
I'm running all Windows 2016 Servers. I've got MS SQL 2016 installed on one. For whatever reason, we cannot connect to the SQL Server unless we enable TLS 1.0 which is obviously not cool.
I found ...
0
votes
1answer
74 views
SQL Server 2017 and TLS - client requirements
I am testing something around SSL\TLS and SQL Server 2017. I have enabled TLS on a test SQL Server instance by creating a self-signed cert and doing the required steps to add it to the Windows ...
0
votes
0answers
48 views
Yet Another error 10054 after disabling TLS 1.0
We've got:
SQL Server 2012 SP4-OD 11.0.7469.6 running on
Windows server 2012 R2 Build 9600 with
.NET Framework 3.5.30729.4926 installed, while
SPN registers perfectly at SQL Server startup.
That ...
0
votes
1answer
57 views
Enabling TLS and TLS-MA simultaneously for different clients of a Oracle DB
We have a requirement where we want to enable TLS-MA for some of the clients connecting to a specific Oracle database while the other clients can continue to use TLS with server certificate.
We are ...
2
votes
0answers
101 views
Configure SQL server to force encryption programmatically
I'd like to enable the ForceEncryption flag for SQL server programmatically.
I tried:
Set-ItemProperty `
-Path "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\MSSQLServer\MSSQLServer\...
0
votes
1answer
270 views
Enabling TLSv1 in postgres12 / openssl1.1.1f
After upgrading a server to postgres12 / OpenSSL 1.1.1f (Ubuntu 20.04) I got tlsv1 alert protocol version error messages from a client using an old openssl 1.0.1 library supporting only tlsv1.
I ...
0
votes
0answers
46 views
After enabling SSL in Oracle user must log in twice
I've enabled SSL for my Oracle 12c DB. The lsnr starts up fine and I can access it via a sqlplus / as sysdba (no password auth there, it's OS local). However, if I attempt to connect as a user which ...
0
votes
1answer
1k views
Unable to connect to SQL Server from one machine; "an existing connection was forcably closed by the remote host"
Connecting to the SQL Server (2008 R2 SP3 - KB 4057113) with SSMS version 18 yields:
A connection was successfully established with the server, but then an error occurred during the login process. (...
0
votes
1answer
384 views
SQL Server 2014 SP3 DB emailer TLS 1.2 support
I have SQL Server 2014 (SP3-CU4) 12.0.6329.1 running on Windows Server 2012R2 with .NET 3.5.30729.4926 installed
I can't get Database emailer to work with TLS 1.2
I tried everything in the article "...
3
votes
1answer
1k views
Why does TLS1.2 break connections to SQL Server?
NOTE: Requested to move the question from StackOverflow to dba
Don't know if this is really a SQL Server problem or not.
Client moved to TLS 1.2, it broke an app that connects to SQL Server 2017 and ...
3
votes
1answer
1k views
Limit TLS and Cipher Suites on SQL Server 2016-2019
I'm wanting to configure some SQL 2016+ servers to use only TLS 1.2+ and a subset of Cipher suite options (no ciphers considered weak or compromized). I'm having trouble tracking down how to ...
0
votes
1answer
28 views
How to secure my data queried from my local MySQL server on a remote machine with root shared with untrusted entity?
I have a remote client machine put in a server center owned by an entity who must also have the root of the client machine according to industry regulations. The client machine runs a C++ program that ...
4
votes
1answer
929 views
Some basic questions about SQL and TLS 1.0 and 1.2
(I don't believe this is a duplicate of any other TLS-related question, like the authoritative question about SQL Compatibility with TLS or its many duplicates, or questions about specific TLS-related ...
5
votes
1answer
2k views
TLS 1.2 breaks SQL Server linked servers
As part of a recent security blitz we set up TLS 1.2 on all of our servers. Last night I flipped the "Force Encryption" flag on all of our SQL Servers and since then I've had a weird issue with linked ...
0
votes
0answers
457 views
Schannel 36871 Error when sending emails from Database Mail - after upgrading to SQL Server 2016
I have recently upgraded from SQL Server 2014 ENT to 2016 ENT, and now I cannot send emails from Database Mail. I get the usual
The mail could not be sent to the recipients because of the mail ...
9
votes
3answers
15k views
Enable TLS 1.2 for SQL Server 2016 database mail
I have been puzzled by this issue for almost 1 week. Hopefully someone in our community has experienced the same issue and already found a solution.
So here is my problem:
As per our company policy, ...
2
votes
0answers
2k views
Configuration of TCP/IP with SSL and TLS for Oracle
I am trying to configure the connections to my Oracle database with tcp / ip using ssl I have been guided by the procedure of the site https://oracle-base.com/articles/misc/configure-tcpip-with-ssl-...
1
vote
1answer
5k views
Enable TLS 1.2 and disable SSL 3 on SQL Server 2008 [closed]
I know similar questions have been asked. What I'm asking for are concrete instructions on what to do, or not do, for my particular installation. I have some questions that I can't find the answer to, ...
0
votes
1answer
36 views
Is it possible to use one certificate with aliases for MongoDB cluster?
I currently configure a MongoDB cluster to use TLS certificate.
It could be far more easier to deploy, one certificate with aliases accross all cluster, instead of one certificate per node. But there ...
3
votes
1answer
19k views
Where is MSOLEDBSQL provider driver? "The 'MSOLEDBSQL' provider is not registered on the local machine."
This has been going on. At first MS said they will not support TLS1.2 for OLEDB then they said, they will. You can read about it here, where they said, the support comes in March 2018
Now it looks ...
3
votes
1answer
14k views
Application Server is not able to connect to SQL Server database when TLS 1.2 or 1.1 is enabled
In our environment, SQL Server 2012 Servers whenever TLS 1.2 or TLS 1.1 is enabled Application Server is not able to connect to the database.The same issue is observed only on MS SQL Server 2012 ...
1
vote
0answers
449 views
Does SQL Server TLS1.1 support only come bundled with TLS 1.2 support in 2008 R2?
I strongly suspect that Microsoft introduced TLS 1.1 support in 2008 R2 in the same updates that they introduced TLS 1.2 support but I can't find any documented evidence of this. I understand that TLS ...
0
votes
1answer
603 views
TLS 1.2 Implementation Validation
I have a validation question regarding implementation of TLS 1.2.
What tools, scripts, processes, etc.. can be used to validate that TLS 1.2 is working when clients, webserver, and SQL Servers are ...
2
votes
0answers
192 views
Postgresql: Enable TLS for localhost connections
What are the advantages and disadvantages to enable TLS to a Postgresql that only gets connections on localhost?
2
votes
2answers
2k views
Error after applying SQL Server 2008 R2 Upgrade 10.50.6542 (Latest Build)
First the problem: Since I applied the latest patch to SQL Server 2008 R2 (released on March 3, 2016) that should have taken my server to build 10.50.6542 I can't connect anymore. This patch is to ...
2
votes
1answer
3k views
SSRS using external images through tls 1.2 leaves src(unknown)
One of our SSRS reports loads images from external sources and one of these sources has been locked down to tls 1.2 (which is fair and we're expecting more of our clients to be doing this in the ...
3
votes
1answer
1k views
Linked Server Setup Error - SSL Provider: The client and server cannot communicate, because
I am trying to setup a linked server and ending up with the following error.
Error:
SSL Provider: The client and server cannot communicate, because they do not possess a common algorithm.
Environment:...
1
vote
1answer
3k views
SQL Server Express support for TLS1.2
I have installed SQL Server 2014 Express Edition ( 12.0.2000.8 x64 ) on a Windows server 2012 machine.
Because of the POODLE vulnerability, our IT department is going to disable TLS 1.0 and all ...
2
votes
0answers
277 views
Does TLS 1.2 for SQL Server require SHA2/SHA256 certificates?
After reviewing SQL Server compatibility with New TLS Standards and much Googling, I think we've got the updates and settings needed to disable TLS 1.0 on SQL Server 2008 R2 with .NET 3.5.1.
But I'...
1
vote
0answers
474 views
TLS 1.0 disabled causing errors when requests come from SQL Server to a Webserver
The issue that I have at the moment is that when I disable TLS 1.0 (due to PCI Compliance) on a web server that hosts our external application, a stored procedure is called from a different server ...
0
votes
1answer
6k views
How to enable TLS1.2 for port 1433
I have received vulnerability on Microsoft SQL server 2008 (RTM)
[high] [1433/tcp/mssql] TLS Version 1.2 Protocol Not Enabled
TLS v1.2 is not enabled on this port.
Already enabled TLS 1.2 on OS ...
8
votes
1answer
4k views
What are the "GDR" vs "QFE" hotfixes for SQL Server 2008 R2 SP3?
I'd always assumed that higher patch numbers were necessarily later releases, but now I'm not so sure.
Looking at the SQL Server Build List for SQL Server 2008 R2 SP3, there are two possible ways to ...