Re: can't authenticate ssl user account

2015-07-21 Thread Tim Dunphy
Hi Reindel, you client configuration shows no indication for SSL, i see it in my.cnf > only in the [mysqld] section and remember when you initrialize replication > you need to specify it there too > > i doubt there is anything to change the logging but since you *know* what > tha

Re: can't authenticate ssl user account

2015-07-21 Thread Reindl Harald
Am 21.07.2015 um 05:03 schrieb Tim Dunphy: I see absolutely NO indication as to why the login for the 'slave2' user (that requires SSL) is failing So my questions are 1) how to I bump up the verbosity on the logs so I can get an indication as to why this is failing? 2) what is the b

can't authenticate ssl user account

2015-07-20 Thread Tim Dunphy
Hey all, I need to setup replication via SSL. 2 nodes master/master for H/A. Then 2 slave nodes for backup. Node 3 will slave off of node 1, and node 4 will slave off of node 2 for redundant backups. Nodes 3 & 4 will store backups to a directory mapped to S3 via S3FS. All nodes are phys

Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Reindl Harald
support anything better than DHE-RSA-AES128-SHA > (AES256 is supported but not more secure than AES128) > > * no ECHDE > * no AES-GCM > * no SHA256 Below are commands used for cert creation :- /opt/scr-openssl/ssl/bin/openssl ecparam -out ecc_ecdsa_root.key

Re: Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Bhushan Rane
Thanks for instant reply. As suggested I tried with ECDHE-RSA-AES128-GCM-SHA256 and ECDHE-RSA-AES128-SHA but no luck. Created new certs for EC - configured my.cnf with new certs. Below are commands used for cert creation :- /opt/scr-openssl/ssl/bin/openssl ecparam -out

Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Reindl Harald
Am 17.03.2015 um 13:21 schrieb Bhushan Rane: I have compiled MySQL with openssl, I am able to connect to MySQL over SSL with TLS1.0 ciphers. But when I tried to connect with TLS1.2 ciphers connection fails with error MySQL / MariaDB don't support anything better than DHE-RSA-AES12

MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Bhushan Rane
I have compiled MySQL with openssl, I am able to connect to MySQL over SSL with TLS1.0 ciphers. But when I tried to connect with TLS1.2 ciphers connection fails with error. === MySQL server version :- 5.6.23-log Source distribution Custom OpenSSL version :- OpenSSL 1.0.1j 15 Oct

Re: Failed to setup SSL

2012-11-24 Thread Jackie Zhang
Thanks, Michael. I used the absolute paths but it still does not work. I think the problem is not because of the relative path because the example showed in the manual also uses relative path (see below): shell> *mysqld --ssl-ca=ca-cert.pem \* *--ssl-cert=server-cert.

Re: Failed to setup SSL

2012-11-24 Thread Michael Dykman
I had noticed that the paths to your certificates were expressed as relative paths. I think at least part of Reindl's recommendation was to express fully qualified paths to your certs and to examined the permissions on those files carefully. SSL is very particular about rejecting security

Re: Failed to setup SSL

2012-11-24 Thread Jackie Zhang
Dear Reindl, Thanks a lot for the reply! I tried your scripts (the only difference is the openssl.cnf because I don't have it) Unfortunately, I still failed to start the server with the same message: 121124 17:00:06 [Warning] Failed to setup SSL 121124 17:00:06 [Warning] SSL error: Fail

Re: Failed to setup SSL

2012-11-24 Thread Reindl Harald
Am 25.11.2012 00:30, schrieb Jackie Zhang: > Hello everyone, > > I want to setup SSL for mysql server. I followed the manual on > http://dev.mysql.com/doc/refman/5.5/en/ssl-connections.html > > I first generated the certificates and key files by strictly following the > f

Re: Problems Connecting with SSL

2011-02-25 Thread Joerg Bruehe
Hi! Martin Gainty wrote: > [[...]] > > joerg ..any thoughts on this matter?? Sorry - none. I never dealt with the inner workings of the SSL library. Just seeing file descriptor 2 (standard error) used for socket operations makes me assume *very* strongly that something went wrong we

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
> perhaps a misconfiguration on the failing client .. > can you go to successful client, enable DEBUG level > debugging and log the connection and then go to the > failing client..enable DEBUG level debugging and log > the connection to the failing client this would determine > deltas between the

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
> Interesting that you can request advice from finland vs > calling from redwood shores CA for technical advice > > first take a look at: > http://dev.mysql.com/doc/refman/5.0/en/secure-basics.html > > once you've determined the algorithm you will want to implement

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
> Sorry, but I have to start with a negative remark: > Why, oh why, don't you mention the version number you > are using? I hope it is some roughly current 5.1, but > I'd rather like you to tell it. Doh! Right you are! Sorry, that was totally my bad. mysql> select version(); ++ | ve

Re: Problems Connecting with SSL

2011-02-25 Thread Joerg Bruehe
Hi Tim, all! Sorry, but I have to start with a negative remark: Why, oh why, don't you mention the version number you are using? I hope it is some roughly current 5.1, but I'd rather like you to tell it. Tim Gustafson wrote: > I have three mySQL server, all of which are SSL-enab

Problems Connecting with SSL

2011-02-24 Thread Tim Gustafson
I have three mySQL server, all of which are SSL-enable and all of which are generally accessible from remote clients over SSL. However, one of my FreeBSD mySQL clients is having problems connecting to any of the servers. Running mySQL under truss reports the following

MySQL replication SSL

2010-11-10 Thread Paul Nowosielski
Dear All, I'm trying to get SSL connections for all mysql slave and masters. I have one box that will not use SSL for some reason. When I start this slave it can not connect because it's not using SSL. show slave status\G

Re: Slave using SSL?

2010-11-10 Thread Claudio Nanni
To me it really looks you are SSL replicating. In my experience If you are replicating in SSL either it works or not, I dont remember what should be there at "Master SSL Cipher", but I remember I had clear problems when SSL replication was not working. Claudio 2010/11/10 Paul N

Slave using SSL?

2010-11-10 Thread Paul Nowosielski
Hey can anyone tell me is my slave is utilizing SSL? I am unsure why the Master SSL Cipher is not listed under show slave status. Here's some info: mysql> show slave status\G *** 1. row *** Slave_IO_State: Waiting for master

Verify replication slave is using SSL

2010-11-01 Thread Paul Nowosielski
Dear All, I just want to verify my rep slave is using ssl. When I run this command mysql> \s I get: mysql> \s -- mysql Ver 14.12 Distrib 5.0.77, for redhat-linux-gnu (x86_64) using readline 5.1 Connection id: 5 Current database: Current user: r...@loc

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Yves Goergen
On 18.08.2010 20:42 CE(S)T, Mark Matthews wrote: > For what it's worth, the MySQL JDBC driver has had client-side SSL > require (i.e. "requireSSL=true") since 2003 and the ADO.Net driver > has had "SSL Mode=Required" since 2009. Cool, so would it be possi

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Mark Matthews
On Aug 18, 2010, at 1:34 PM, Shawn Green (MySQL) wrote: > On 8/18/2010 2:22 PM, Anders Kaseorg wrote: >> On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: >>> If the server specifies REQUIRES SSL then that client cannot connect >>> without going through the full SSL val

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/18/2010 2:22 PM, Anders Kaseorg wrote: On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: If the server specifies REQUIRES SSL then that client cannot connect without going through the full SSL validation process. This means that Mallory would need to present the same security credentials

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Anders Kaseorg
On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: > If the server specifies REQUIRES SSL then that client cannot connect > without going through the full SSL validation process. This means that > Mallory would need to present the same security credentials that Alice > has in order to

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/17/2010 6:13 PM, Yves Goergen wrote: ... snip ... (Oh look, the "MySQL" guy already has an oracle.com e-mail address...) And for a for about two years before that, I had a sun.com email address, too. MySQL has not been an independent company for quite a while. Google it if you don't b

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/17/2010 6:02 PM, Anders Kaseorg wrote: On Wed, 2010-08-11 at 14:23 -0400, Shawn Green (MySQL) wrote: On 8/9/2010 5:27 PM, Yves Goergen wrote: What's that supposed to mean? If there's no way to force the connection into SSL, it is entirely useless. Anyone on the wire could simp

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Anders Kaseorg
On Wed, 18 Aug 2010, Yves Goergen wrote: > Since MySQL is now Oracle […] Yves, I think we should be treating this security issue seriously, and working with Shawn and the MySQL team towards solving it constructively, instead of just taking potshots at their new company. Anders -- MySQL General

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Yves Goergen
To solve it, there needs to be a > way to force the use of SSL from the client side. I have another suggestion: remove SSL support from MySQL alltogether and declare the protocol as unsafe and only use it over secure networks like VPN. Since MySQL is now Oracle and it's not Oracle's main b

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Anders Kaseorg
On Wed, 2010-08-11 at 14:23 -0400, Shawn Green (MySQL) wrote: > On 8/9/2010 5:27 PM, Yves Goergen wrote: > > What's that supposed to mean? If there's no way to force the connection > > into SSL, it is entirely useless. Anyone on the wire could simply > > pretend that

Re: How to use SSL? (SSL is enabled but not used)

2010-08-11 Thread Shawn Green (MySQL)
On 8/9/2010 5:27 PM, Yves Goergen wrote: Does anybody know how to use SSL-secured connections to a MySQL server? Has anybody done that at all? In the manual I have now found the following statement: http://dev.mysql.com/doc/refman/5.1/en/ssl-options.html Note that use of --ssl does not

Re: How to use SSL? (SSL is enabled but not used)

2010-08-09 Thread Yves Goergen
Does anybody know how to use SSL-secured connections to a MySQL server? Has anybody done that at all? In the manual I have now found the following statement: http://dev.mysql.com/doc/refman/5.1/en/ssl-options.html > Note that use of --ssl does not require an SSL connection. For > example,

How to use SSL? (SSL is enabled but not used)

2010-07-26 Thread Yves Goergen
Hello, I have setup a MySQL 5.1 server on Ubuntu Linux 10.4 and created an SSL certificate and key. I updated the MySQL configuration to point to the SSL files. There's no error message at startup in MySQL's error log. (Before I granted the process access to the SSL files through AppAr

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-23 Thread Joerg Bruehe
to MySQL 5.1. Specifically if the source is the MySQL manual, there is absolutely no reason to use the 5.0 manual when you are dealing with 5.1, there is a 5.1 manual available. > > Would be nice if someone on the list with prior experience would > comment Discussing SSL: it is included with curr

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread a . smith
information on setting up SSL on Windows ? Neil -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread Tompkins Neil
Hi I found this documentation. However, I need more information on setting up SSL on Windows ? Neil On Wed, Jul 21, 2010 at 3:39 PM, wrote: > Google? > http://dev.mysql.com/doc/refman/5.0/en/replication-solutions-ssl.html > > This is for MySQL 5.1, I imagine its probably the sam

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread a . smith
and Windows 2003 with MySQL 5.1.46. Normal master to master replication between the two server is running fine. However, we now want to set-up the replication with SSL to ensure that all data which is replicated both ways between the two servers is encrypted. Currently on the Ubuntu 10.04 server

Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread Tompkins Neil
Hi, We are running Ubuntu 10.04 LTS with MySQL 5.1.46 and Windows 2003 with MySQL 5.1.46. Normal master to master replication between the two server is running fine. However, we now want to set-up the replication with SSL to ensure that all data which is replicated both ways between the two

Re: ssl questions

2009-10-12 Thread Neil Tompkins
-basics.html -- Muhammad Subair On Thu, Oct 8, 2009 at 6:03 PM, Tompkins Neil > wrote: Hi I wondered how you are getting on with installing SSL for mysql 5.1 server. We are looking to install it too. Do you have any pointers/ recommendations ? Regards Neil On Tue, Sep 8, 2009 at 11:36 PM, qt4

Re: ssl questions

2009-10-11 Thread muhammad subair
w you are getting on with installing SSL for mysql 5.1 server. > We are looking to install it too. Do you have any pointers/recommendations > ? > > Regards > Neil > > On Tue, Sep 8, 2009 at 11:36 PM, qt4x11 wrote: > > > I'm trying to set up my mysql 5.1 se

Re: ssl questions

2009-10-08 Thread Tompkins Neil
Hi I wondered how you are getting on with installing SSL for mysql 5.1 server. We are looking to install it too. Do you have any pointers/recommendations ? Regards Neil On Tue, Sep 8, 2009 at 11:36 PM, qt4x11 wrote: > I'm trying to set up my mysql 5.1 server to work over ssl, I

ssl questions

2009-09-08 Thread qt4x11
I'm trying to set up my mysql 5.1 server to work over ssl, I'm following the directions at http://dev.mysql.com/doc/refman/5.0/en/secure-connections.html. I've confirmed that my server supports ssl mysql> SHOW VARIABLES LIKE 'have_ssl'; +---+

SSL Logs in MySQL

2009-07-12 Thread Sharath Chalasani
Hello there, I am getting connected to MySQL through SSL. I want to see the logs of SSL getting trigerred when someone access MySQL database from any application or URL. Where do I need to modify or edit the configuration, in order to see the SSL logs? I can only see the query logs as of now

MySql SSL Error

2009-07-11 Thread Sharath Chalasani
Hello there, I have setup SSL for MySql server. I can login into mysql by mentioning the root CA cert. On the other side, I have a Directory Server URL, which is trying to access the MySQL. I have updated the query logs. Wherever a connection happens from the directory server to the MySQL

problem with ssl connection

2009-04-14 Thread Stefano Elmopi
Hi, Is there someone who is able to connect to an MySQL instance connection via ssl, from a client located on a different server than where is the MySQL instance, using the only option --ssl-ca ? I'm not able, I can only connect if I use the options --ssl-ca, --ssl- cert and --ss

Re: SSL Connections

2009-03-31 Thread Stefano Elmopi
Hi Andy, I used the same user. I list the steps that I made: on the server MySQL (10.43.249.17) I created the user: GRANT ALL PRIVILEGES ON *.* TO 'pippo'@'%' IDENTIFIED BY '*'; then, on the same server: mysql --ssl-ca=/root/openssl/cacert.pem -u pippo -p

Re: SSL Connections

2009-03-30 Thread Andy Shellam
local one doesn't, that would explain it. What are your MySQL versions on both your server and remote client? What errors do you get on your client? Regards, Andy Stefano Elmopi wrote: Hi, I'm trying to make connections ssl. I followed the MySQL guide and I've configur

SSL Connections

2009-03-30 Thread Stefano Elmopi
Hi, I'm trying to make connections ssl. I followed the MySQL guide and I've configured the server then I created a normal user, without the REQUIRE SSL. On the same server can connect with the only option: mysql --ssl-ca=cacert.pem -u Pluto -p but if I try to connect from anoth

Re: Need a Brief Overview - SSL Connections

2009-03-29 Thread Andy Shellam
Hi Seth, I implemented SSL successfully just a couple of weeks ago on 5.1.30, and I too found some aspects confusing. Here's my answers from my own experience so please forgive me if they're inaccurate. 1) On the server side, I believe ssl-ca, ssl-cert and ssl-key are all r

Need a Brief Overview - SSL Connections

2009-03-28 Thread Seth Willits
Howdy, I've read through all of the MySQL docs on SSL and I just need a brief overview of a few things to understand some things that aren't crystal clear to me since I'm not very familiar with SSL. 1) Which SSL options are *required*? It seems that only ssl-key is _alway

Trying again, SSL between client and server using SslOption/mysql_ssl_set ( C++/C )

2008-12-18 Thread Edward Diener
I have a few questions about the parameters for SslOption/mysql_ssl_set ( C++/C ) and about SSL in general between the server and the client. I do understand what a certificate, a private key, and a public key is in general but I am having trouble understandng how they work in MySql. 1) Are the

SSL between client and server using SslOption/mysql_ssl_set ( C++/C )

2008-12-17 Thread Edward Diener
I have a few questions about the parameters for SslOption/mysql_ssl_set ( C++/C ) and about SSL in general between the server and the client. I do understand what a certificate, a private key, and a public key is in general but I am having trouble understandng how they work in MySql. 1) Are

Building MySql for Windows with SSL

2008-12-15 Thread Edward Diener
In the MySql manual section 5.5.7.2 it specifies how to build MySql on a Unix/Linux platform with SSL by using 'configure'. I need to build MySql for Windows with SSL support. In section 2.4.15.6.1 for building MySql for Windows itr specifies the available options for using win/confi

Re: About combine ssl with mysql.

2008-12-12 Thread Chandru
can you please share how you have solved that? Did u use mysql -u root -p --ssl when connecting? Regards, Chandru www.mafiree.com On Fri, Dec 12, 2008 at 1:15 PM, Moon's Father wrote: > I have solved this problem. > ^_^ > > On Fri, Dec 12, 2008 at 10:54 AM, Moon's Fa

Re: About combine ssl with mysql.

2008-12-11 Thread Moon's Father
I have solved this problem. ^_^ On Fri, Dec 12, 2008 at 10:54 AM, Moon's Father wrote: > Hi. > I want to know how to connect mysqld with ssl encryption from windows or > linux system. > Any reply will be appreciated. > > Here is my status. > > mysql> status >

SSL Connection and emty SSL_CIPHER

2008-08-31 Thread Jonas Meurer
Hello, I just started playing around with SSL enabled connections to the MySQL server, and so far I got everything working except that the SSL_CIPHER variable always stays empty. First I created a CA cert+key pair, then both a MySQL Server and Client cert+key pair, both signed by the CA cert. I

Re: mysql 5.0.51b and ssl

2008-06-23 Thread kalin m
there any flags i can change in the Makefile for the mysql build? does it have to be a 'shared'? static?! thanks... kalin m wrote: hi all... i just installed openssl 0.9.8h and trying to build mysql 5.0.51b with it on a freebsd 7 machine. i get this: /usr/bin/ld: /usr/lo

mysql 5.0.51b and ssl

2008-06-23 Thread kalin m
hi all... i just installed openssl 0.9.8h and trying to build mysql 5.0.51b with it on a freebsd 7 machine. i get this: /usr/bin/ld: /usr/local/ssl/lib/libssl.a(t1_srvr.o): relocation R_X86_64_32 can not be used when making a shared object; recompile with -fPIC /usr/local/ssl/lib/libssl.a

Clarification on SSL options needed

2008-02-20 Thread Ulf Magnusson
Hello, I'm trying to set up SSL for my MySQL server. As my understanding of SSL is still a bit shaky and the MySQL documentation on the subject a bit terse, I thought I'd ask a few questions to make sure I haven't misunderstood anything: 1. Is the --ssl-ca option to mysqld the pub

Re: SSL Problem with outdated zertificates

2007-09-05 Thread Samuel Vogel
Actually I fixed the problem by generating a whole new set of SSL certificates! Thanks for the help! Regards, Samy [EMAIL PROTECTED] schrieb: Hey, This morning the default timespan of ssl certificates took my servers down... Everything was running fine, but this morning the SSL encrypted

SSL Problem with outdated zertificates

2007-09-04 Thread samy-delux
Hey, This morning the default timespan of ssl certificates took my servers down... Everything was running fine, but this morning the SSL encrypted MySQL connections stopped working! Then I realized that the Problem was, that the certificates ran out this morning. The first solution that I

Re: 5.1.14-beta with ssl build failure

2007-01-05 Thread Aaron Cannon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 It is unfortunate that mysql does not offer a binary version with ssl support for Linux. Does anyone know why? It can't be for export reasons, as they do offer a windows version with SSL support. Aaron Cannon - -- Skype: cannona MSN/Wi

Re: 5.1.14-beta with ssl build failure

2007-01-05 Thread Duncan Hutty
Chris White wrote: Duncan Hutty wrote: I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather

Re: 5.1.14-beta with ssl build failure

2007-01-04 Thread Chris White
Duncan Hutty wrote: I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather unrelated, I wondered if

5.1.14-beta with ssl build failure

2007-01-04 Thread Duncan Hutty
I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather unrelated, I wondered if something odd was afoot

Unable to GRANT REPLICATION REQUIRE X509 and SSL

2006-11-30 Thread Amit Dor-Shifer
Is it possible to require both secure connections and x509 verification on a replication user? If so, what's the syntax? I couldn't find references to this use in the manual, lists or bug tracking system. Using mysql 4.1.21 10x, Amit -- MySQL General Mailing List For list archives: http://lists.m

using SSL certificates when connecting to mysqld

2006-11-29 Thread Amit Dor-Shifer
Hi. mysql --version mysql Ver 14.7 Distrib 4.1.21, for pc-linux-gnu (i686) using readline 5.1 I'm trying to secure a replication connection between a master and a slave. However, seems to me that the issue I'm facing relates to any SSL client<->server connection, so the

Re: SSL Connections Feature?

2006-11-22 Thread Kieran Kelleher
enable client connections over SSL to support secure offsite replication, however it seems the prebuilt binaries do not have the SSL option built in. So I guess I need to build MySQL from source with the SSL option. I have not found too much in the MySQL Manual or via Google, Has anyone got a

SSL on MySQL 5.0.22

2006-06-26 Thread Asif Lodhi
Hi, How can I connect from a Windows client (VB/ODBC Connector) to a MySQL Server 5.0.22, also running on Windows (Max version installed as a service using Local-Service Account) with all tables using InnoDB storage engine USING SSL? Perhaps using OpenSSL on a Linux-based installation would be

SSL on MySQL 5.0.22

2006-06-26 Thread Asif Lodhi
Hi, I am using 5.0.22 on Windows. As I read in the reference manual, almost "ALL" SSL values/options are specific to 5.1.x versions. Do I stand _ANY_ chance to use SSL anyway? Specifically, I want to know exactly HOW I can enable SSL support for MySQL on Windows using which options,

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 14:46 (+0100), Paul DuBois wrote: > --ssl on the client side (mysql) isn't sufficient to enable an SSL > connection, as stated in the manual. That's why Joerg indicated the > use of the other options. Why do I need to provide the client with a certificate? I do

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 12:47 (+0100), Joerg Bruehe wrote: > I said I am no SSL expert, I just go by this quote from the manual: Yes, I saw that. But it doesn't apply on Query Browser because there is no such option available in the UI. Btw, I cannot connect to MySQL5+SSL with Query Browser/Win b

Re: How to find out about SSL connection?

2006-05-31 Thread Joerg Bruehe
rver which does not support SSL, or does not have it switched on (lacks a certificate). Below was *after* I enabled SSL in the server. *before* there was no warning but an unencrypted connection. Yes, I got that - so you desire the client to inform you if it has to use an un-encrypted

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 10:21 (+0100), Joerg Bruehe wrote: > According to your description below, where you got "Could not connect > ...", you are given this warning if establishing the connection fails. > So the remaining case is a client trying to connect to a server which > do

Re: How to find out about SSL connection?

2006-05-31 Thread Joerg Bruehe
k that the client should actually inform me when I select "use SSL" and it doesn't. By some kind of information / warning after you had selected that button, the client tried, and the connsection did not get established. Yes, I understand that desire. According to your description be

Re: How to find out about SSL connection?

2006-05-30 Thread Yves Goergen
actually inform me when I select "use SSL" and it doesn't. Now I think I managed to make MySQL 5 accept SSL connections, at least that have_openssl variable has turned from DISABLED to YES. I added an SSL certificate to the my.cnf file. But now I can only connect to the server from Quer

Re: How to find out about SSL connection?

2006-05-30 Thread Joerg Bruehe
Hi Yves, all! Yves Goergen wrote: On 21.05.2006 00:16 (+0100), Yves Goergen wrote: Hello, I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL 4.0 and 5.0 database server, both on Linux. In Query Browser, I can check the options "Use SSL if available" but h

Re: How to find out about SSL connection?

2006-05-30 Thread Yves Goergen
On 21.05.2006 00:16 (+0100), Yves Goergen wrote: > Hello, > I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL > 4.0 and 5.0 database server, both on Linux. In Query Browser, I can > check the options "Use SSL if available" but how do I know if it

Re: How to find out about SSL connection?

2006-05-21 Thread Phil Robbins
Why am I suddenly getting huge volumes of mail about SQL? What forum is this, and how do I get out of it? ++ Phil Robbins Auckland New Zealand ++ _ Discover fun and games at @ http://xtramsn.co

Re: How to find out about SSL connection?

2006-05-21 Thread Yves Goergen
On 21.05.2006 07:35 (+0100), paul rivers wrote: > Are you certain? Which version are you running? I don't have it on MySQL 4.0 and on MySQL 5.0 it has the value "0" so I guess it's not connecting through SSL. -- Yves Goergen "LonelyPixel" <[EMAIL PROTECTE

Re: How to find out about SSL connection?

2006-05-20 Thread Yves Goergen
On 21.05.2006 00:38 (+0100), paul rivers wrote: > - Inspect the 'show status' variable of Ssl_accepts after a connection > attempt on an otherwise quiet mysql instance. I have no such status variable in my server. -- Yves Goergen "LonelyPixel" <[EMAIL PROTECTED]> http://beta.unclassified.de – My

RE: How to find out about SSL connection?

2006-05-20 Thread paul rivers
, May 20, 2006 3:39 PM To: 'Yves Goergen'; 'List: MySQL' Subject: RE: How to find out about SSL connection? I've wrestled with the same question. The only options I came up with were: - Do as you suggest and require SSL for the account. - Inspect the 'show status&#x

RE: How to find out about SSL connection?

2006-05-20 Thread paul rivers
I've wrestled with the same question. The only options I came up with were: - Do as you suggest and require SSL for the account. - Inspect the 'show status' variable of Ssl_accepts after a connection attempt on an otherwise quiet mysql instance. - Sniff the traffic between cl

How to find out about SSL connection?

2006-05-20 Thread Yves Goergen
Hello, I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL 4.0 and 5.0 database server, both on Linux. In Query Browser, I can check the options "Use SSL if available" but how do I know if it is available and used? I couldn't find any SQL command to sh

SSL connection problems with Fedora Core 4

2006-02-02 Thread Julian C. Dunn
I'm trying to set up SSL connectivity to a Fedora Core 4 server running mysql-server-4.1.16-1.FC4.1 and not having much success. I keep getting ERROR 2026 (HY000): SSL connection error no matter what I do. I followed the directions on http://dev.mysql.com/doc/refman/4.1/en/secure-c

Re: SSL Overhead

2006-01-27 Thread Gleb Paharenko
Hello. When running our benchmark tests using secure connections (all data encrypted with internal SSL support) performance was 55% slower than with unencrypted connections. See: http://dev.mysql.com/doc/refman/5.0/en/compile-and-link-options.html Khalid Hanif wrote: > Hi Guys, >

SSL Overhead

2006-01-27 Thread Khalid Hanif
Hi Guys, What sort of overheads am I expecting to get when running MySQL 5.0.18 in SSL mode? I need to decide whether to run MySQL in SSL mode, or use CIPE (on RHEL 3). Thanks, Khalid -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http

replication with ssl

2006-01-05 Thread Christopher Carver
Hello, I am trying to ensure replication between master and slave is using ssl. I followed the instructions in section 6.4 of the reference guide and simply added REQUIRE SSL to the end of the grant statement when creating the replication user. Replication works when I don't require

Re: SSL connection error

2005-10-18 Thread Gleb Paharenko
Hello. First check the contents of /var/log/messages. SELinux usually puts there some notes about what it is doing. I'm not a SELinux expert, but quick search at fedora.redhat.com has shown me that I should use system-config-securitylevel utility for configuring SELinux. Israel Ferná

Re: SSL connection error

2005-10-18 Thread Israel Fernández Cabrera
Previous Message > > >From: Israel Fernández CabreraDate: October 17 2005 10:18pm > > >Subject: SSL connection error > > >Get Plain Text > > > > > >Hi all > > > > > >I'm back with a new subject may be the last o

Re: SSL connection error

2005-10-18 Thread Gleb Paharenko
L General Discussion« Previous Message >From: Israel Fernández Cabrera Date: October 17 2005 10:18pm >Subject: SSL connection error >Get Plain Text > >Hi all > >I'm back with a new subject may be the last one was not attractive :) >I'

SSL connection error

2005-10-17 Thread Israel Fernández Cabrera
etc/my.cnf file with the ssl-ca, ssl-cert and ssl-key for the client and the mysqld sections of the my.cnf file. My problem is that mysqld log an error describing that it has no permission to read the certificate file, I've been with this for more than 3 days. I'm attaching ls output, my.

Re: Mysql with SSL connections

2005-10-15 Thread Gleb Paharenko
Hello. >The fact is that I cant start mysql with ssl support using the >/etc/ec/d/init.d/mysql script. But the interesting thing is that if I copy First of all, you should find the error log. See: http://dev.mysql.com/doc/refman/4.1/en/error-log.html Israel Fern$ndez Cabrera &

Re: Fwd: Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
MySQL daemon runs by the way, but without SSL support, mysqladmin tests return SSL connection error too... On 10/13/05, RedRed!com IT Department <[EMAIL PROTECTED]> wrote: > > Israel Fernández Cabrera wrote: > > Well I've done more than that I wrote a custom init script wi

Fwd: Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
Well I've done more than that I wrote a custom init script with the simplest possible start function containig just the following line: /usr/bin/mysqld_safe & and SSL does not work eather... please help... best regards Israel -- Forwarded message -- From: RedR

Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
Hi folk! I'm new to mysql and to databases... I'm using Fedora Core 4 with mysql 4.1.11-2 I need some application clients to connect the server using SSL connections. I've created and tested x509 certificates using the way mysql documentation explain, I've modified the /etc

Re: MySQL win32 and SSL

2005-01-25 Thread Karam Chand
Even I had the same problem and couldnt use SSL on windows. The developers have legal issues when using SSL on windows. I think there is some development going on using CryptoAPI but I am not too sure. My advice, dont even try on Windows. Atleast it was a big pain in ass for me. Karam --- Jose

MySQL win32 and SSL

2005-01-25 Thread Jose Antonio
Dear all, I need SSL support for MySQL. I've checked the documentation and it seems that for windows there is no SSL support in the binaries. In addition the documentation in the examples is for Linux. Has anyone has used MySQL with SSL in windows? If so ... how? How easy is to set it up?

Re: Help using SSL from VB client, using MyODBC

2004-11-11 Thread Gleb Paharenko
'm kind of new to the SSL scene. > I've read all I can find on MySQL.org about setting up and using SSL. > > I'm on MySLQ 4.20 and have built mysql after configuring with --use-vio > and --use-openssl. HAVE_OPENSSL = YES. I can handle setting up the > user t

Help using SSL from VB client, using MyODBC

2004-11-10 Thread William Blair Wagner
I'm kind of new to the SSL scene. I've read all I can find on MySQL.org about setting up and using SSL. I'm on MySLQ 4.20 and have built mysql after configuring with --use-vio and --use-openssl. HAVE_OPENSSL = YES. I can handle setting up the user talbe and GRANTS to require SS

  1   2   3   >