The openssl tag has no wiki summary.
0
votes
0answers
23 views
Missing configuration in Apache to achive mutual SSL authentcaion
After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform, I tried this scenario (see this diagram):
----------
...
-2
votes
1answer
37 views
Red hat enterprise linux how do i install apache with SSL HTTPS? i have CERTIFICATE, KEY, INTERMEDIATE (ROOT CA) from heart internet [closed]
How can i install SSL HTTPS in my apache webserver in Red hat enterprise linux? Only following is installed. And i have tried this website follow up but its not working it fails.
$ uname -a
...
0
votes
1answer
33 views
certificate extensions in generating and signing certificartes using openssl
References :
SSL Configurations for Intermediate certificate
How to add my own created certificate authority to system trusted repositories
Why I can't find a page which tell me what's the kinds ...
2
votes
0answers
34 views
SSL Configurations for Intermediate certificate
I had implement a mutual certificate authentication and it worked successfully for following steps :
create root ca (self-signed)
create server certificate and sign it with ca private key
create ...
1
vote
1answer
106 views
`openssl`: Subject Alternative Name
I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain:
$ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
0
votes
0answers
21 views
Best way of updating Openssl on Linux machine [duplicate]
I have a confusion to choose the best way for upgrading the OpenSSL on my Linux machine.
1*Through the yum Update.*
# yum update
I know this will update the entire packages. But If I want to ...
0
votes
1answer
65 views
upgrade OpenSSL from 0.9.8w to 1.0.0i or 1.0.1a on Linux server [duplicate]
I want to upgrade OpenSSL from 0.9.8w to 1.0.0I or 1.0.1a.
I am using
os.name Linux
os.version 2.6.18-164.9.1.el5
Any pointers or links would be very helpful.
Thanks in Advance.
2
votes
1answer
58 views
How to add multiple email adresses to an SSL certificate via the command line?
I know that by adding/modifying the SubjectAltName entry in openssl.cnf this can be achieved, but is there a way to do so without having to modify that file every time?
1
vote
1answer
84 views
Trailing space when generating md5
I apologize if this has already been answered, or if the answer is simpler than I realize, but I can't seem to figure out the following:
When I try to generate an md5 from a string, either with
echo ...
2
votes
2answers
536 views
Trying to install spotify with libssl1.0.0
I would like to install spotify client but it's complaining that it can't find the old libssl0.9.8 So I created a symlink to libssl1.0.0:
sudo ln -s /usr/lib/x86_64-linux-gnu/libssl.so**.1.0.0** ...
4
votes
1answer
191 views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
2
votes
1answer
324 views
Cli verification of digitally signed email
I am Alice and I've received signed email from Bob.
I use Web e-Mail client (e.g. GMail) and I see that one of attachements is smime.p7s.
I've found option "show original message" and saved contents ...
0
votes
1answer
302 views
openssl s_client hangs
I am trying to look at some ssl certs with openssl's s_client. For some reason it hangs with the connection open after spitting out the cert info.
Here is the command I am using and the output:
...
1
vote
2answers
1k views
Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”
Arch Linux 2011.08.19 (Linux 3.4.2 i686)
Apache 2.2.22 → 2.2.22 (recompile & reinstall)
OpenSSL 1.0.1.c-1
These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
4
votes
3answers
1k views
“openssl dgst -sha1” producing an extraneous “(stdin)= ” prefix and trailing newline
If you run this command on your Unix
echo -n "foo" | openssl dgst -sha1
You will get this output:
(stdin)= 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33
(followed by a newline).
How can I force ...
1
vote
1answer
159 views
How to display server's TLS certicicate details in terminal?
Having TLS certificate in local file, I can display its details using syntax like:
openssl x509 -text -noout -in cert_filename
Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
2
votes
2answers
2k views
FTP over SSL in AIX (UNIX)
Folks over at SO couldn't answer this, so I am posting over here.
I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
5
votes
1answer
422 views
TLS over unix pipe
Can I use TLS/SSL over Unix pipe with Unix command line?
I want the equivalent of
$ mkfifo /tmp/spipe
$ echo a|openssl s_server -acceptFifo /tmp/spipe &
[1] 25563
$ openssl s_client ...
5
votes
3answers
2k views
Safe way to pass password for >1 programs in bash
I'm writing a bash script, and need to ask user for his password and pass it to openssl. Whilst openssl can read the password itself, I need for two runs of the program and don't want to ask the user ...
7
votes
2answers
3k views
How do I convert a ssh-keygen public key into a format that openssl PEM_read_bio_RSA_PUBKEY() function will consume?
I'm having an issue generating a public key that the openssl PEM_read_bio_RSA_PUBKEY() function can consume. I keep getting errors.
Obviously I cannot simply use the ASCII string in the ssh-keygen ...
2
votes
1answer
273 views
How to disable SSLv2 in OpenSSH?
Due to the recent deprecation of SSLv2, is it possible to disable SSLv2 in OpenSSH?
Is OpenSSH even using SSLv2?
From digging around, I see the sshd is not compiled against openssl , but it is ...
1
vote
0answers
129 views
Implementation of eSTREAM ciphers available?
Is there a usable implementation of the eSTREAM stream cyphers available for Linux?
I was thinking to use that for encrypting data stored on tape drives, using it with tar.
Now, there are some basic ...
4
votes
2answers
445 views
libssl and libcrypto backward compatible?
I have an old server application that requires libssl.so.0.9.6 and libcrypto.so.0.9.6.
My issue is I currently have libssl.so.1.0.0a and libcrypto.so.1.0.0a on my system. I tried symlinking to the ...
3
votes
2answers
2k views
Trust a self signed PEM certificate
I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
5
votes
1answer
200 views
How do I extract all subjects of a cacertfile with the openssl command line?
Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)?
I tried openssl x509 -in ...
1
vote
0answers
183 views
Validating an OpenSSL Cipher List
Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically?
For example, ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On ...
1
vote
1answer
154 views
how to find the server key [closed]
When I run openssl s_client -connect 0.0.0.0:8006 I get the Server certificate as:
-----BEGIN CERTIFICATE-----
MIICSTCCAbKgAwIBAgIESfnb7zANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJ ….
From which ...
3
votes
2answers
2k views
How can I verify SSL certificates on the command line?
I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
2
votes
2answers
921 views
Run Ubuntu 10.04 LTS with Apache2 SSL with passphrase
I am setting up a Virtual Machine with Ubuntu 10.04 Lucid Lynx Server.
I have been reading the section on setting up Apache with an SSL certificate within the book : "Beginning Ubuntu LTS Server ...
1
vote
2answers
561 views
How can I update existing .crt file with new encrypted rsa .key file?
Suppose I have 2 files: an RSA key file client.key and a certification file client.crt.
I have created them without pass-phrase and now I have encrypted client.key file with pass-phrase by command:
...
5
votes
3answers
10k views
How to encrypt messages/text with RSA? (using openssl?)
I'm Bob.
I have Alice's public key. I want to send Alice an -> RSA <- encrypted message.
How can I do it using the openssl command?
The message is:
Hi Alice! Please bring malacpörkölt for dinner!
...
0
votes
3answers
3k views
nginx ./configure can't find openssl
I'm trying to install nginx and no matter what I do, nginx can't seem to find my openssl path. It looks like it's searching for files that don't exist in any of the openssl directories. Below is my ...
3
votes
4answers
5k views
How do I upgrade OpenSSL?
According to these instructions:
http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
I need to use OpenSSL 0.9.8k or later (right now it's on 1.0.0c) to use name based virtual hosts in apache. ...
