Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>XP and Windows 7 use different permission structures on certificates. If you're using a PFX from the Certificate Store, Win7 would ask for elevation when trying to make your connection. If you can't grant it -- if your application is headless, for example -- the connection would time out.</p> <p>Open the certificate manager (<a href="http://blogs.southworks.net/fboerr/2007/12/02/view-the-certificate-store/" rel="nofollow">try this</a>) and look for the certificate you're using to authenticate to MySQL. You may need an available public key and your public key may have the wrong permissions. <a href="http://blogs.msdn.com/b/healthvaultfaq/archive/2011/02/21/certificate-loading-problem-or-error-loading-certificate-in-iis-7-and-later-versions.aspx" rel="nofollow">Look here</a> for details on how to change permissions.</p> <p>There's also a chance you may have your certificate in the wrong store, but this can also be fixed with the Certificate Store MMC snap-in.</p> <p>If you're using your PFX from a file and importing it into the store is an option, try that. Otherwise you'll most likely need to set permissions on the certificate after import before connection.</p> <p>The server logs, if available, could also give you information on why a your connection failed. Here are some options:</p> <ul> <li>If the server isn't seeing a certificate at all, it's likely a permissions issue on the client end in accessing the certificate.</li> <li>If the server sees a certificate but can't authenticate it, this is often a public key issue. The PFX format is a holder meta-format and not all PFX files contain the correct components. This could also clue you into what @Dremation said, your certificate may just not be installed on the server.</li> <li>There is also a chance that your clocks are unsynchronized. If you can check the server clock, make sure it's correctly and frequently synchronized to some standard clock. Then make sure your client is as well. The rule-of-thumb maximum skew is 5 minutes, so 2.5 minutes in opposite directions on the client and server would cause an authentication failure.</li> <li>There should be an option somewhere on your client to adjust the number of retry attempts. If this is a certificate error and you can get it to fail on the first attempt, at least you'll get a certificate error immediately, instead of the issue being wrapped in a connection timeout.</li> </ul>
    singulars
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. This table or related slice is empty.
    2. VO
      singulars
      1. This table or related slice is empty.
    1. This table or related slice is empty.
 

Querying!

 
Guidance

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload