Re: can't authenticate ssl user account

2015-07-21 Thread Tim Dunphy
Hi Reindel, you client configuration shows no indication for SSL, i see it in my.cnf only in the [mysqld] section and remember when you initrialize replication you need to specify it there too i doubt there is anything to change the logging but since you *know* what that user requires

Re: can't authenticate ssl user account

2015-07-21 Thread Reindl Harald
Am 21.07.2015 um 05:03 schrieb Tim Dunphy: I see absolutely NO indication as to why the login for the 'slave2' user (that requires SSL) is failing So my questions are 1) how to I bump up the verbosity on the logs so I can get an indication as to why this is failing? 2) what is the best way

can't authenticate ssl user account

2015-07-20 Thread Tim Dunphy
Hey all, I need to setup replication via SSL. 2 nodes master/master for H/A. Then 2 slave nodes for backup. Node 3 will slave off of node 1, and node 4 will slave off of node 2 for redundant backups. Nodes 3 4 will store backups to a directory mapped to S3 via S3FS. All nodes are physical

MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Bhushan Rane
I have compiled MySQL with openssl, I am able to connect to MySQL over SSL with TLS1.0 ciphers. But when I tried to connect with TLS1.2 ciphers connection fails with error. === MySQL server version :- 5.6.23-log Source distribution Custom OpenSSL version :- OpenSSL 1.0.1j 15 Oct

Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Reindl Harald
Am 17.03.2015 um 13:21 schrieb Bhushan Rane: I have compiled MySQL with openssl, I am able to connect to MySQL over SSL with TLS1.0 ciphers. But when I tried to connect with TLS1.2 ciphers connection fails with error MySQL / MariaDB don't support anything better than DHE-RSA-AES128-SHA

Re: MySQL - SSL - with TLS1.2 cipher AES256-SHA256 / DHE-RSA-AES256-SHA256

2015-03-17 Thread Reindl Harald
anything better than DHE-RSA-AES128-SHA (AES256 is supported but not more secure than AES128) * no ECHDE * no AES-GCM * no SHA256 Below are commands used for cert creation :- /opt/scr-openssl/ssl/bin/openssl ecparam -out ecc_ecdsa_root.key -name secp384r1 -genkey echo -e

Re: Failed to setup SSL

2012-11-24 Thread Reindl Harald
Am 25.11.2012 00:30, schrieb Jackie Zhang: Hello everyone, I want to setup SSL for mysql server. I followed the manual on http://dev.mysql.com/doc/refman/5.5/en/ssl-connections.html I first generated the certificates and key files by strictly following the following link, http

Re: Failed to setup SSL

2012-11-24 Thread Jackie Zhang
Dear Reindl, Thanks a lot for the reply! I tried your scripts (the only difference is the openssl.cnf because I don't have it) Unfortunately, I still failed to start the server with the same message: 121124 17:00:06 [Warning] Failed to setup SSL 121124 17:00:06 [Warning] SSL error: Failed

Re: Failed to setup SSL

2012-11-24 Thread Michael Dykman
I had noticed that the paths to your certificates were expressed as relative paths. I think at least part of Reindl's recommendation was to express fully qualified paths to your certs and to examined the permissions on those files carefully. SSL is very particular about rejecting security files

Re: Failed to setup SSL

2012-11-24 Thread Jackie Zhang
Thanks, Michael. I used the absolute paths but it still does not work. I think the problem is not because of the relative path because the example showed in the manual also uses relative path (see below): shell *mysqld --ssl-ca=ca-cert.pem \* *--ssl-cert=server-cert.pem

Re: Problems Connecting with SSL

2011-02-25 Thread Joerg Bruehe
Hi Tim, all! Sorry, but I have to start with a negative remark: Why, oh why, don't you mention the version number you are using? I hope it is some roughly current 5.1, but I'd rather like you to tell it. Tim Gustafson wrote: I have three mySQL server, all of which are SSL-enable and all

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
Sorry, but I have to start with a negative remark: Why, oh why, don't you mention the version number you are using? I hope it is some roughly current 5.1, but I'd rather like you to tell it. Doh! Right you are! Sorry, that was totally my bad. mysql select version(); ++ |

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
Interesting that you can request advice from finland vs calling from redwood shores CA for technical advice first take a look at: http://dev.mysql.com/doc/refman/5.0/en/secure-basics.html once you've determined the algorithm you will want to implement take a look at SSL 1,2,3 and TLS

Re: Problems Connecting with SSL

2011-02-25 Thread Tim Gustafson
perhaps a misconfiguration on the failing client .. can you go to successful client, enable DEBUG level debugging and log the connection and then go to the failing client..enable DEBUG level debugging and log the connection to the failing client this would determine deltas between the

Re: Problems Connecting with SSL

2011-02-25 Thread Joerg Bruehe
Hi! Martin Gainty wrote: [[...]] joerg ..any thoughts on this matter?? Sorry - none. I never dealt with the inner workings of the SSL library. Just seeing file descriptor 2 (standard error) used for socket operations makes me assume *very* strongly that something went wrong well before

Problems Connecting with SSL

2011-02-24 Thread Tim Gustafson
I have three mySQL server, all of which are SSL-enable and all of which are generally accessible from remote clients over SSL. However, one of my FreeBSD mySQL clients is having problems connecting to any of the servers. Running mySQL under truss reports the following

Slave using SSL?

2010-11-10 Thread Paul Nowosielski
Hey can anyone tell me is my slave is utilizing SSL? I am unsure why the Master SSL Cipher is not listed under show slave status. Here's some info: mysql show slave status\G *** 1. row *** Slave_IO_State: Waiting for master to send

Re: Slave using SSL?

2010-11-10 Thread Claudio Nanni
To me it really looks you are SSL replicating. In my experience If you are replicating in SSL either it works or not, I dont remember what should be there at Master SSL Cipher, but I remember I had clear problems when SSL replication was not working. Claudio 2010/11/10 Paul Nowosielski

MySQL replication SSL

2010-11-10 Thread Paul Nowosielski
Dear All, I'm trying to get SSL connections for all mysql slave and masters. I have one box that will not use SSL for some reason. When I start this slave it can not connect because it's not using SSL. show slave status\G *** 1. row

Verify replication slave is using SSL

2010-11-01 Thread Paul Nowosielski
Dear All, I just want to verify my rep slave is using ssl. When I run this command mysql \s I get: mysql \s -- mysql Ver 14.12 Distrib 5.0.77, for redhat-linux-gnu (x86_64) using readline 5.1 Connection id: 5 Current database: Current user: r...@localhost SSL

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/17/2010 6:02 PM, Anders Kaseorg wrote: On Wed, 2010-08-11 at 14:23 -0400, Shawn Green (MySQL) wrote: On 8/9/2010 5:27 PM, Yves Goergen wrote: What's that supposed to mean? If there's no way to force the connection into SSL, it is entirely useless. Anyone on the wire could simply pretend

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/17/2010 6:13 PM, Yves Goergen wrote: ... snip ... (Oh look, the MySQL guy already has an oracle.com e-mail address...) And for a for about two years before that, I had a sun.com email address, too. MySQL has not been an independent company for quite a while. Google it if you don't

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Anders Kaseorg
On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: If the server specifies REQUIRES SSL then that client cannot connect without going through the full SSL validation process. This means that Mallory would need to present the same security credentials that Alice has in order to qualify

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Shawn Green (MySQL)
On 8/18/2010 2:22 PM, Anders Kaseorg wrote: On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: If the server specifies REQUIRES SSL then that client cannot connect without going through the full SSL validation process. This means that Mallory would need to present the same security credentials

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Mark Matthews
On Aug 18, 2010, at 1:34 PM, Shawn Green (MySQL) wrote: On 8/18/2010 2:22 PM, Anders Kaseorg wrote: On Wed, 18 Aug 2010, Shawn Green (MySQL) wrote: If the server specifies REQUIRES SSL then that client cannot connect without going through the full SSL validation process. This means

Re: How to use SSL? (SSL is enabled but not used)

2010-08-18 Thread Yves Goergen
On 18.08.2010 20:42 CE(S)T, Mark Matthews wrote: For what it's worth, the MySQL JDBC driver has had client-side SSL require (i.e. requireSSL=true) since 2003 and the ADO.Net driver has had SSL Mode=Required since 2009. Cool, so would it be possible to also have this in the MySQL Workbench

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Anders Kaseorg
On Wed, 2010-08-11 at 14:23 -0400, Shawn Green (MySQL) wrote: On 8/9/2010 5:27 PM, Yves Goergen wrote: What's that supposed to mean? If there's no way to force the connection into SSL, it is entirely useless. Anyone on the wire could simply pretend that the server doesn't support SSL and so

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Yves Goergen
it, there needs to be a way to force the use of SSL from the client side. I have another suggestion: remove SSL support from MySQL alltogether and declare the protocol as unsafe and only use it over secure networks like VPN. Since MySQL is now Oracle and it's not Oracle's main business, regarding recent bad

Re: How to use SSL? (SSL is enabled but not used)

2010-08-17 Thread Anders Kaseorg
On Wed, 18 Aug 2010, Yves Goergen wrote: Since MySQL is now Oracle […] Yves, I think we should be treating this security issue seriously, and working with Shawn and the MySQL team towards solving it constructively, instead of just taking potshots at their new company. Anders -- MySQL General

Re: How to use SSL? (SSL is enabled but not used)

2010-08-11 Thread Shawn Green (MySQL)
On 8/9/2010 5:27 PM, Yves Goergen wrote: Does anybody know how to use SSL-secured connections to a MySQL server? Has anybody done that at all? In the manual I have now found the following statement: http://dev.mysql.com/doc/refman/5.1/en/ssl-options.html Note that use of --ssl does

Re: How to use SSL? (SSL is enabled but not used)

2010-08-09 Thread Yves Goergen
Does anybody know how to use SSL-secured connections to a MySQL server? Has anybody done that at all? In the manual I have now found the following statement: http://dev.mysql.com/doc/refman/5.1/en/ssl-options.html Note that use of --ssl does not require an SSL connection. For example

How to use SSL? (SSL is enabled but not used)

2010-07-26 Thread Yves Goergen
Hello, I have setup a MySQL 5.1 server on Ubuntu Linux 10.4 and created an SSL certificate and key. I updated the MySQL configuration to point to the SSL files. There's no error message at startup in MySQL's error log. (Before I granted the process access to the SSL files through AppArmor

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-23 Thread Joerg Bruehe
if the source is the MySQL manual, there is absolutely no reason to use the 5.0 manual when you are dealing with 5.1, there is a 5.1 manual available. Would be nice if someone on the list with prior experience would comment Discussing SSL: it is included with current versions of MySQL 5.1

Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread Tompkins Neil
Hi, We are running Ubuntu 10.04 LTS with MySQL 5.1.46 and Windows 2003 with MySQL 5.1.46. Normal master to master replication between the two server is running fine. However, we now want to set-up the replication with SSL to ensure that all data which is replicated both ways between the two

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread a . smith
10.04 LTS with MySQL 5.1.46 and Windows 2003 with MySQL 5.1.46. Normal master to master replication between the two server is running fine. However, we now want to set-up the replication with SSL to ensure that all data which is replicated both ways between the two servers is encrypted. Currently

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread Tompkins Neil
Hi I found this documentation. However, I need more information on setting up SSL on Windows ? Neil On Wed, Jul 21, 2010 at 3:39 PM, a.sm...@ukgrid.net wrote: Google? http://dev.mysql.com/doc/refman/5.0/en/replication-solutions-ssl.html This is for MySQL 5.1, I imagine its probably

Re: Setting Up MySSQL replication with SSL on Ubuntu and Windows

2010-07-21 Thread a . smith
this documentation. However, I need more information on setting up SSL on Windows ? Neil -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http://lists.mysql.com/mysql?unsub=arch...@jab.org

Re: ssl questions

2009-10-12 Thread Neil Tompkins
/secure-basics.html -- Muhammad Subair On Thu, Oct 8, 2009 at 6:03 PM, Tompkins Neil neil.tompk...@googlemail.com wrote: Hi I wondered how you are getting on with installing SSL for mysql 5.1 server. We are looking to install it too. Do you have any pointers/ recommendations ? Regards

Re: ssl questions

2009-10-11 Thread muhammad subair
I wondered how you are getting on with installing SSL for mysql 5.1 server. We are looking to install it too. Do you have any pointers/recommendations ? Regards Neil On Tue, Sep 8, 2009 at 11:36 PM, qt4x11 qt4...@gmail.com wrote: I'm trying to set up my mysql 5.1 server to work over ssl

Re: ssl questions

2009-10-08 Thread Tompkins Neil
Hi I wondered how you are getting on with installing SSL for mysql 5.1 server. We are looking to install it too. Do you have any pointers/recommendations ? Regards Neil On Tue, Sep 8, 2009 at 11:36 PM, qt4x11 qt4...@gmail.com wrote: I'm trying to set up my mysql 5.1 server to work over ssl

ssl questions

2009-09-08 Thread qt4x11
I'm trying to set up my mysql 5.1 server to work over ssl, I'm following the directions at http://dev.mysql.com/doc/refman/5.0/en/secure-connections.html. I've confirmed that my server supports ssl mysql SHOW VARIABLES LIKE 'have_ssl'; +---+---+ | Variable_name | Value

SSL Logs in MySQL

2009-07-12 Thread Sharath Chalasani
Hello there, I am getting connected to MySQL through SSL. I want to see the logs of SSL getting trigerred when someone access MySQL database from any application or URL. Where do I need to modify or edit the configuration, in order to see the SSL logs? I can only see the query logs as of now

MySql SSL Error

2009-07-11 Thread Sharath Chalasani
Hello there, I have setup SSL for MySql server. I can login into mysql by mentioning the root CA cert. On the other side, I have a Directory Server URL, which is trying to access the MySQL. I have updated the query logs. Wherever a connection happens from the directory server to the MySQL

problem with ssl connection

2009-04-14 Thread Stefano Elmopi
Hi, Is there someone who is able to connect to an MySQL instance connection via ssl, from a client located on a different server than where is the MySQL instance, using the only option --ssl-ca ? I'm not able, I can only connect if I use the options --ssl-ca, --ssl- cert and --ssl-key

Re: SSL Connections

2009-03-31 Thread Stefano Elmopi
Hi Andy, I used the same user. I list the steps that I made: on the server MySQL (10.43.249.17) I created the user: GRANT ALL PRIVILEGES ON *.* TO 'pippo'@'%' IDENTIFIED BY '*'; then, on the same server: mysql --ssl-ca=/root/openssl/cacert.pem -u pippo -p Enter password: Welcome

SSL Connections

2009-03-30 Thread Stefano Elmopi
Hi, I'm trying to make connections ssl. I followed the MySQL guide and I've configured the server then I created a normal user, without the REQUIRE SSL. On the same server can connect with the only option: mysql --ssl-ca=cacert.pem -u Pluto -p but if I try to connect from another host, I

Re: SSL Connections

2009-03-30 Thread Andy Shellam
one doesn't, that would explain it. What are your MySQL versions on both your server and remote client? What errors do you get on your client? Regards, Andy Stefano Elmopi wrote: Hi, I'm trying to make connections ssl. I followed the MySQL guide and I've configured the server then I

Re: Need a Brief Overview - SSL Connections

2009-03-29 Thread Andy Shellam
Hi Seth, I implemented SSL successfully just a couple of weeks ago on 5.1.30, and I too found some aspects confusing. Here's my answers from my own experience so please forgive me if they're inaccurate. 1) On the server side, I believe ssl-ca, ssl-cert and ssl-key are all required

Need a Brief Overview - SSL Connections

2009-03-28 Thread Seth Willits
Howdy, I've read through all of the MySQL docs on SSL and I just need a brief overview of a few things to understand some things that aren't crystal clear to me since I'm not very familiar with SSL. 1) Which SSL options are *required*? It seems that only ssl-key is _always_ required

Trying again, SSL between client and server using SslOption/mysql_ssl_set ( C++/C )

2008-12-18 Thread Edward Diener
I have a few questions about the parameters for SslOption/mysql_ssl_set ( C++/C ) and about SSL in general between the server and the client. I do understand what a certificate, a private key, and a public key is in general but I am having trouble understandng how they work in MySql. 1

SSL between client and server using SslOption/mysql_ssl_set ( C++/C )

2008-12-17 Thread Edward Diener
I have a few questions about the parameters for SslOption/mysql_ssl_set ( C++/C ) and about SSL in general between the server and the client. I do understand what a certificate, a private key, and a public key is in general but I am having trouble understandng how they work in MySql. 1

Building MySql for Windows with SSL

2008-12-15 Thread Edward Diener
In the MySql manual section 5.5.7.2 it specifies how to build MySql on a Unix/Linux platform with SSL by using 'configure'. I need to build MySql for Windows with SSL support. In section 2.4.15.6.1 for building MySql for Windows itr specifies the available options for using win/configure

Re: About combine ssl with mysql.

2008-12-12 Thread Chandru
can you please share how you have solved that? Did u use mysql -u root -p --ssl when connecting? Regards, Chandru www.mafiree.com On Fri, Dec 12, 2008 at 1:15 PM, Moon's Father yueliangdao0...@gmail.comwrote: I have solved this problem. ^_^ On Fri, Dec 12, 2008 at 10:54 AM, Moon's Father

Re: About combine ssl with mysql.

2008-12-11 Thread Moon's Father
I have solved this problem. ^_^ On Fri, Dec 12, 2008 at 10:54 AM, Moon's Father yueliangdao0...@gmail.comwrote: Hi. I want to know how to connect mysqld with ssl encryption from windows or linux system. Any reply will be appreciated. Here is my status. mysql status

SSL Connection and emty SSL_CIPHER

2008-08-31 Thread Jonas Meurer
Hello, I just started playing around with SSL enabled connections to the MySQL server, and so far I got everything working except that the SSL_CIPHER variable always stays empty. First I created a CA cert+key pair, then both a MySQL Server and Client cert+key pair, both signed by the CA cert. I

mysql 5.0.51b and ssl

2008-06-23 Thread kalin m
hi all... i just installed openssl 0.9.8h and trying to build mysql 5.0.51b with it on a freebsd 7 machine. i get this: /usr/bin/ld: /usr/local/ssl/lib/libssl.a(t1_srvr.o): relocation R_X86_64_32 can not be used when making a shared object; recompile with -fPIC /usr/local/ssl/lib/libssl.a

Re: mysql 5.0.51b and ssl

2008-06-23 Thread kalin m
flags i can change in the Makefile for the mysql build? does it have to be a 'shared'? static?! thanks... kalin m wrote: hi all... i just installed openssl 0.9.8h and trying to build mysql 5.0.51b with it on a freebsd 7 machine. i get this: /usr/bin/ld: /usr/local/ssl/lib/libssl.a

Clarification on SSL options needed

2008-02-20 Thread Ulf Magnusson
Hello, I'm trying to set up SSL for my MySQL server. As my understanding of SSL is still a bit shaky and the MySQL documentation on the subject a bit terse, I thought I'd ask a few questions to make sure I haven't misunderstood anything: 1. Is the --ssl-ca option to mysqld the public key used

Re: SSL Problem with outdated zertificates

2007-09-05 Thread Samuel Vogel
Actually I fixed the problem by generating a whole new set of SSL certificates! Thanks for the help! Regards, Samy [EMAIL PROTECTED] schrieb: Hey, This morning the default timespan of ssl certificates took my servers down... Everything was running fine, but this morning the SSL encrypted

SSL Problem with outdated zertificates

2007-09-04 Thread samy-delux
Hey, This morning the default timespan of ssl certificates took my servers down... Everything was running fine, but this morning the SSL encrypted MySQL connections stopped working! Then I realized that the Problem was, that the certificates ran out this morning. The first solution that I

Re: 5.1.14-beta with ssl build failure

2007-01-05 Thread Duncan Hutty
Chris White wrote: Duncan Hutty wrote: I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather

Re: 5.1.14-beta with ssl build failure

2007-01-05 Thread Aaron Cannon
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 It is unfortunate that mysql does not offer a binary version with ssl support for Linux. Does anyone know why? It can't be for export reasons, as they do offer a windows version with SSL support. Aaron Cannon - -- Skype: cannona MSN/Windows

5.1.14-beta with ssl build failure

2007-01-04 Thread Duncan Hutty
I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather unrelated, I wondered if something odd was afoot

Re: 5.1.14-beta with ssl build failure

2007-01-04 Thread Chris White
Duncan Hutty wrote: I attempted to build 5.1.14-beta with ssl support and it failed (output below). It builds quite happily on this system without the ssl support parameter to configure. Since it appears to fail in an area (timezone system) that to me seems rather unrelated, I wondered

Unable to GRANT REPLICATION REQUIRE X509 and SSL

2006-11-30 Thread Amit Dor-Shifer
Is it possible to require both secure connections and x509 verification on a replication user? If so, what's the syntax? I couldn't find references to this use in the manual, lists or bug tracking system. Using mysql 4.1.21 10x, Amit -- MySQL General Mailing List For list archives:

using SSL certificates when connecting to mysqld

2006-11-29 Thread Amit Dor-Shifer
Hi. mysql --version mysql Ver 14.7 Distrib 4.1.21, for pc-linux-gnu (i686) using readline 5.1 I'm trying to secure a replication connection between a master and a slave. However, seems to me that the issue I'm facing relates to any SSL client-server connection, so the scenario I'll

Re: SSL Connections Feature?

2006-11-22 Thread Kieran Kelleher
to enable client connections over SSL to support secure offsite replication, however it seems the prebuilt binaries do not have the SSL option built in. So I guess I need to build MySQL from source with the SSL option. I have not found too much in the MySQL Manual or via Google, Has anyone got

SSL on MySQL 5.0.22

2006-06-26 Thread Asif Lodhi
Hi, I am using 5.0.22 on Windows. As I read in the reference manual, almost ALL SSL values/options are specific to 5.1.x versions. Do I stand _ANY_ chance to use SSL anyway? Specifically, I want to know exactly HOW I can enable SSL support for MySQL on Windows using which options, variables

SSL on MySQL 5.0.22

2006-06-26 Thread Asif Lodhi
Hi, How can I connect from a Windows client (VB/ODBC Connector) to a MySQL Server 5.0.22, also running on Windows (Max version installed as a service using Local-Service Account) with all tables using InnoDB storage engine USING SSL? Perhaps using OpenSSL on a Linux-based installation would

Re: How to find out about SSL connection?

2006-05-31 Thread Joerg Bruehe
that the client should actually inform me when I select use SSL and it doesn't. By some kind of information / warning after you had selected that button, the client tried, and the connsection did not get established. Yes, I understand that desire. According to your description below, where you got Could

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 10:21 (+0100), Joerg Bruehe wrote: According to your description below, where you got Could not connect ..., you are given this warning if establishing the connection fails. So the remaining case is a client trying to connect to a server which does not support SSL, or does

Re: How to find out about SSL connection?

2006-05-31 Thread Joerg Bruehe
does not support SSL, or does not have it switched on (lacks a certificate). Below was *after* I enabled SSL in the server. *before* there was no warning but an unencrypted connection. Yes, I got that - so you desire the client to inform you if it has to use an un-encrypted connection, because

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 12:47 (+0100), Joerg Bruehe wrote: I said I am no SSL expert, I just go by this quote from the manual: Yes, I saw that. But it doesn't apply on Query Browser because there is no such option available in the UI. Btw, I cannot connect to MySQL5+SSL with Query Browser/Win but I can

Re: How to find out about SSL connection?

2006-05-31 Thread Yves Goergen
On 31.05.2006 14:46 (+0100), Paul DuBois wrote: --ssl on the client side (mysql) isn't sufficient to enable an SSL connection, as stated in the manual. That's why Joerg indicated the use of the other options. Why do I need to provide the client with a certificate? I don't have one and I also

Re: How to find out about SSL connection?

2006-05-30 Thread Yves Goergen
On 21.05.2006 00:16 (+0100), Yves Goergen wrote: Hello, I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL 4.0 and 5.0 database server, both on Linux. In Query Browser, I can check the options Use SSL if available but how do I know if it is available and used? I couldn't

Re: How to find out about SSL connection?

2006-05-30 Thread Joerg Bruehe
Hi Yves, all! Yves Goergen wrote: On 21.05.2006 00:16 (+0100), Yves Goergen wrote: Hello, I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL 4.0 and 5.0 database server, both on Linux. In Query Browser, I can check the options Use SSL if available but how do I know

Re: How to find out about SSL connection?

2006-05-30 Thread Yves Goergen
select use SSL and it doesn't. Now I think I managed to make MySQL 5 accept SSL connections, at least that have_openssl variable has turned from DISABLED to YES. I added an SSL certificate to the my.cnf file. But now I can only connect to the server from Query Browser without the SSL checkbox. When

Re: How to find out about SSL connection?

2006-05-21 Thread Yves Goergen
On 21.05.2006 07:35 (+0100), paul rivers wrote: Are you certain? Which version are you running? I don't have it on MySQL 4.0 and on MySQL 5.0 it has the value 0 so I guess it's not connecting through SSL. -- Yves Goergen LonelyPixel [EMAIL PROTECTED] http://beta.unclassified.de – My web

Re: How to find out about SSL connection?

2006-05-21 Thread Phil Robbins
Why am I suddenly getting huge volumes of mail about SQL? What forum is this, and how do I get out of it? ++ Phil Robbins Auckland New Zealand ++ _ Discover fun and games at @

How to find out about SSL connection?

2006-05-20 Thread Yves Goergen
Hello, I'm using MySQL Query Browser on Windows XP to connect to a remote MySQL 4.0 and 5.0 database server, both on Linux. In Query Browser, I can check the options Use SSL if available but how do I know if it is available and used? I couldn't find any SQL command to show me the encryption status

RE: How to find out about SSL connection?

2006-05-20 Thread paul rivers
I've wrestled with the same question. The only options I came up with were: - Do as you suggest and require SSL for the account. - Inspect the 'show status' variable of Ssl_accepts after a connection attempt on an otherwise quiet mysql instance. - Sniff the traffic between client and server

RE: How to find out about SSL connection?

2006-05-20 Thread paul rivers
, May 20, 2006 3:39 PM To: 'Yves Goergen'; 'List: MySQL' Subject: RE: How to find out about SSL connection? I've wrestled with the same question. The only options I came up with were: - Do as you suggest and require SSL for the account. - Inspect the 'show status' variable of Ssl_accepts after

Re: How to find out about SSL connection?

2006-05-20 Thread Yves Goergen
On 21.05.2006 00:38 (+0100), paul rivers wrote: - Inspect the 'show status' variable of Ssl_accepts after a connection attempt on an otherwise quiet mysql instance. I have no such status variable in my server. -- Yves Goergen LonelyPixel [EMAIL PROTECTED] http://beta.unclassified.de – My web

SSL connection problems with Fedora Core 4

2006-02-02 Thread Julian C. Dunn
I'm trying to set up SSL connectivity to a Fedora Core 4 server running mysql-server-4.1.16-1.FC4.1 and not having much success. I keep getting ERROR 2026 (HY000): SSL connection error no matter what I do. I followed the directions on http://dev.mysql.com/doc/refman/4.1/en/secure-create

SSL Overhead

2006-01-27 Thread Khalid Hanif
Hi Guys, What sort of overheads am I expecting to get when running MySQL 5.0.18 in SSL mode? I need to decide whether to run MySQL in SSL mode, or use CIPE (on RHEL 3). Thanks, Khalid -- MySQL General Mailing List For list archives: http://lists.mysql.com/mysql To unsubscribe:http

Re: SSL Overhead

2006-01-27 Thread Gleb Paharenko
Hello. When running our benchmark tests using secure connections (all data encrypted with internal SSL support) performance was 55% slower than with unencrypted connections. See: http://dev.mysql.com/doc/refman/5.0/en/compile-and-link-options.html Khalid Hanif wrote: Hi Guys, What sort

replication with ssl

2006-01-05 Thread Christopher Carver
Hello, I am trying to ensure replication between master and slave is using ssl. I followed the instructions in section 6.4 of the reference guide and simply added REQUIRE SSL to the end of the grant statement when creating the replication user. Replication works when I don't require ssl

Re: SSL connection error

2005-10-18 Thread Gleb Paharenko
Discussion« Previous Message From: Israel Fernández Cabrera Date: October 17 2005 10:18pm Subject: SSL connection error Get Plain Text Hi all I'm back with a new subject may be the last one was not attractive :) I'm using mysql 4.1.11-2 in Fedora Core 4. I need to set

Re: SSL connection error

2005-10-18 Thread Israel Fernández Cabrera
:18pm Subject: SSL connection error Get Plain Text Hi all I'm back with a new subject may be the last one was not attractive :) I'm using mysql 4.1.11-2 in Fedora Core 4. I need to set up mysql connections over SLL I follow the mysql manual instructions, create certificates

Re: SSL connection error

2005-10-18 Thread Gleb Paharenko
Hello. First check the contents of /var/log/messages. SELinux usually puts there some notes about what it is doing. I'm not a SELinux expert, but quick search at fedora.redhat.com has shown me that I should use system-config-securitylevel utility for configuring SELinux. Israel

SSL connection error

2005-10-17 Thread Israel Fernández Cabrera
file with the ssl-ca, ssl-cert and ssl-key for the client and the mysqld sections of the my.cnf file. My problem is that mysqld log an error describing that it has no permission to read the certificate file, I've been with this for more than 3 days. I'm attaching ls output, my.cnf file, mysqld.log

Re: Mysql with SSL connections

2005-10-15 Thread Gleb Paharenko
Hello. The fact is that I cant start mysql with ssl support using the /etc/ec/d/init.d/mysql script. But the interesting thing is that if I copy First of all, you should find the error log. See: http://dev.mysql.com/doc/refman/4.1/en/error-log.html Israel Fern$ndez Cabrera [EMAIL

Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
Hi folk! I'm new to mysql and to databases... I'm using Fedora Core 4 with mysql 4.1.11-2 I need some application clients to connect the server using SSL connections. I've created and tested x509 certificates using the way mysql documentation explain, I've modified the /etc/my.cnf [mysqld

Fwd: Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
Well I've done more than that I wrote a custom init script with the simplest possible start function containig just the following line: /usr/bin/mysqld_safe and SSL does not work eather... please help... best regards Israel -- Forwarded message -- From: RedRed!com

Re: Fwd: Mysql with SSL connections

2005-10-13 Thread Israel Fernández Cabrera
by the way, but without SSL support, mysqladmin tests return SSL connection error too... On 10/13/05, RedRed!com IT Department [EMAIL PROTECTED] wrote: Israel Fernández Cabrera wrote: Well I've done more than that I wrote a custom init script with the simplest possible start function containig

MySQL win32 and SSL

2005-01-25 Thread Jose Antonio
Dear all, I need SSL support for MySQL. I've checked the documentation and it seems that for windows there is no SSL support in the binaries. In addition the documentation in the examples is for Linux. Has anyone has used MySQL with SSL in windows? If so ... how? How easy is to set it up? What

Re: MySQL win32 and SSL

2005-01-25 Thread Karam Chand
Even I had the same problem and couldnt use SSL on windows. The developers have legal issues when using SSL on windows. I think there is some development going on using CryptoAPI but I am not too sure. My advice, dont even try on Windows. Atleast it was a big pain in ass for me. Karam --- Jose

Re: Help using SSL from VB client, using MyODBC

2004-11-11 Thread Gleb Paharenko
to the SSL scene. I've read all I can find on MySQL.org about setting up and using SSL. I'm on MySLQ 4.20 and have built mysql after configuring with --use-vio and --use-openssl. HAVE_OPENSSL = YES. I can handle setting up the user talbe and GRANTS to require SSL for users and connections

Help using SSL from VB client, using MyODBC

2004-11-10 Thread William Blair Wagner
I'm kind of new to the SSL scene. I've read all I can find on MySQL.org about setting up and using SSL. I'm on MySLQ 4.20 and have built mysql after configuring with --use-vio and --use-openssl. HAVE_OPENSSL = YES. I can handle setting up the user talbe and GRANTS to require SSL for users

mysql ssl support

2004-09-30 Thread Andy Wong
Hi All, I'm confused by seemingly conflicting information between the mysql doc, the high performance mysql book, and a mysql press release (http://www.mysql.com/news-and-events/press-release/release_2003_05.html) regarding mysql's SSL support. What's the difference between mysql 4.0's SSL

  1   2   3   >