OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
0answers
20 views

Piping bash through netcat and openssl [on hold]

I'm currently piping bash through netcat with the following: Server nc -l 4444 Client mkfifo foo nc localhost 4444 0<foo | bash 1>foo I'm now trying to secure the connection by piping it ...
0
votes
1answer
48 views

how to convert base 64 encoded public key (.pem) to bytearray?

I need to convert a Base 64 encoded public key file in .pem format to byte array using openssl. Need to convert public key from the below format: ----BEGIN PUBLIC KEY----- ...
-1
votes
2answers
26 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in ...
0
votes
1answer
89 views

Can't update OpenSSL on Centos 6.4

I've got a Centos 6.4 system that I'm trying to patch OpenSSL for. Currently, yum reports "1.0.1e-16.el6_5.4" and openssl version shows "1.0.1e-fips". On my Ubuntu machines, I was able to update ...
4
votes
3answers
126 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
0
votes
0answers
28 views

How to use openssl to verify and decrypt a SAML2 response

I wish to see all parameters that are actually passed by my identity provider during a SAML2 single sign on process. The response sent by the IdP is signed and encrypted, I think I have all what is ...
0
votes
0answers
10 views

running command in Mobax Terminal are there plugins that are needed

while read CTFlist; do #next we need to create ctfs padded with zeros as a variable ctfPadded=$(printf ${ctflist}00000000) #then call rc2 key as variable rc2Key="TemporaryRC2Key1" #next create a ...
3
votes
0answers
57 views

kerberos preauth pkinit failed to initialize: No realms configured correctly for pkinit support

I have successfully installed Kerberos on debian wheezy and can perform service authentication (Apache, ssh) with Kerberos tickets from kinit. I would like to use certificates for kinit (pkinit) ...
1
vote
0answers
60 views

openssl does not load engine from config file

I'm using openssl-1.0.1f. And I'm trying to load the pkcs11 engine in the config file, but it doesn't work. Here is my config: openssl_conf = openssl_def [openssl_def] engines = engine_section ...
0
votes
1answer
16 views

Hex has unknown character / in the output

I need to create a Rc2Key variable and then convert this to hexadecimal. I have done this with two commands. The Rc2Key variable has to be 16 characters long, so in my test module I used ...
0
votes
1answer
39 views

openssl dgst -sha1 -hmac “key” producing an extraneous “(stdin)= ” prefix and trailing newline

if you run: while read CTFid; do echo -n "$CTFid" | openssl dgst -sha1 -hmac "key"; done < CTFid.csv > OPKlist.csv i am getting (stdin) in the prefix like so ...
2
votes
1answer
28 views

How do I specify a requirement for a minimum version of openssl in RPM spec file?

The rpm spec file for my package looks like this - Requires:mysql-server >= 5.5.30, java >= 1.6, p7zip, openssl >= 1.0.2g I have an RHEL system where the openssl version is this: ...
0
votes
1answer
390 views

How to update OpenSSL on centos 7.2?

I am using centos 7.2, I will intall Nginx-CT,and it needs OpenSSL 1.0.2,the current version is as follow: [root@i001 ~]# rpm -qa|grep openssl openssl-libs-1.0.1e-51.el7_2.4.x86_64 ...
0
votes
0answers
30 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
0
votes
0answers
50 views

OpenSSL installation is missing the X509_VERIFY_PARAM function

I am trying to install clamav 0.99.1 on RedHat 7.3. My OpenSSL version is 1.0.1. I am using the below command to install clamav: ./configure --prefix=/usr --with-user=defang --with-group=defang ...
0
votes
0answers
26 views

Nginx + CentOS 6 + OpenSSL Library - Update System Version

CentOS 6 I'm running Nginx which is built with an earlier version of OpenSSL: Note: my linux skills aren't so strong with this kinda stuff so any advise or direction would be greatly appreciated. ...
0
votes
1answer
45 views

Error writing output file when I decryption files using openssl

I am working on an encrypted data set. And using the code below to decrypt files. openssl enc -aes-256-cbc -d -in $encryptedfile -out $decrypted_file -pass file:secret.txt But I am always notified ...
0
votes
1answer
54 views

openssl: unable to get local issuer certificate with some versions

With OpenSSL 1.0.2g (MacPorts on OS X) I can check Google's certificate (I have to specify the certificate bundle as OS X usually stores it in the KeyChain) $ echo Q | /opt/local/bin/openssl ...
1
vote
0answers
30 views

Openvpn authentication fail caused by wrong system date time

I have a remote linux device connected as an openvpn client to an openvpn server over TCP, with standard certificate authentication. Unfortunately this device has lost the current system Date Time, ...
1
vote
0answers
212 views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
0
votes
0answers
45 views

Configuring Apache with Openssl and Enabling FIPS mode causing fingerpoint error

Can someone please help me I have recently upgraded my apache from 2.4.12 to 2.4.18 and I have also updated the openssl 1.01e to 1.02f. I followed the steps from here I ran this command ...
-1
votes
2answers
235 views

How can I upgrade OpenSSL version to openssl-1.0.1s in RHEL 5 machine?

My current openssl version is openSSL 0.9.8e-fips-rhel5. I want to upgrade this to openssl-1.0.1s. The yum update openssl will not work here. I removed openssl binaries from following path ...
3
votes
0answers
66 views

How to create large size encrypted file using openssl command

During the creation of an encrypted file in AIX, I received this error: $ openssl enc -aes-256-cbc -salt -in test.img -out test.img.enc test.img: Value too large to be stored in data type ...
0
votes
0answers
31 views

Problem when installing FADE on Ubuntu

I'm trying to install FADE (Secure Overlay Cloud Storage with File Assured Deletion) but i have some problems when i try to install it. Here is the error. root@GRayFox:/home/ahmed/fade-0.2# make ...
2
votes
1answer
44 views

How to convert open-ssl created private key to openssh private key?

I have created an open-ssl private key which I would like to use to connect to my server through ssh. The openssl key was generated during certificate creation and I have to use this key on putty. The ...
3
votes
1answer
123 views

Decoding ASN.1 messages using Openssl asn1parse tool

I am using openssl asn1parse tool over RHEL, I have my own ASN.1 abstract syntax file, called TestModule.asn1, when I am trying to parse a message using following command: openssl asn1parse -inform ...
1
vote
0answers
77 views

OpenSSL converting chars to UTF-8 literals

I'm running a simple PKI web application in Php that uses OpenSSL shell commands and stores information in a text database. I have to deal with non-ASCII input characters (eg. German) but when a new ...
1
vote
1answer
1k views

Centos/RHEL 7: OpenSSL update not available

I have openssl 1.0.1e installed but its seems to be buggy based on this But when I list out the updates for the system it doesn't list out 1.0.1q as suggested on above link. Any idea how to install ...
-1
votes
1answer
66 views

trying a new 2016 openssl package, but still see the old 2012 version. Ubuntu 12.04

I'm trying to install a new 2016 open ssl package, but still see the old 2012 version, on Ubuntu 12.04 . I have a bunch of Ubuntu 12.04 dedicated machines that can't connect to the internet. They're ...
0
votes
0answers
58 views

How do I install and configure NTP on CentOS 7 from source? (include/ntp_crypt.h errors)

I unpacked the .tar.gz file for the newest NTP. I installed the gcc compiler and libcap devel. I ran the ./configure command with various flags and options. I ran make check and found an error. The ...
2
votes
1answer
47 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
0
votes
1answer
35 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
1
vote
1answer
237 views

ssh algorithm negotiation failed

Problem Ok, the problem is that I am using Pycharm on El Capitan. I am trying to connect to a server that has strict login Kexalgorithms using the newer Key Exchange Algorithms than Pycharm seems to ...
1
vote
1answer
46 views

pem file difference - ssh-keygen vs openssl

I generated my public/private key pair using ssh-keygen -t rsa -b 2048 -v and then needed a .pem file and followed this ...
1
vote
2answers
1k views

How to install php7 modules in archlinux?

I have the following php version installed: PHP 7.0.2 (cli) (built: Jan 6 2016 11:50:59) ( NTS ) Copyright (c) 1997-2015 The PHP Group Zend Engine v3.0.0, Copyright (c) 1998-2015 Zend Technologies ...
0
votes
1answer
221 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
1
vote
3answers
236 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
1
vote
1answer
57 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
3
votes
1answer
33 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
1answer
112 views

OPENSSL_1.0.0 not found when running PyPy 4.0.1 on Amazon Linux (AWS EC2)

I want to run PyPy 4.0.1 on Amazon Linux (AWS EC2), and then downloaded and unzipped the tar.bz file. Also, I created the symbolic links to fix problems, such as pypy: error while loading shared ...
1
vote
0answers
40 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
0
votes
0answers
36 views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
0
votes
1answer
156 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
2
votes
1answer
194 views

Converting SSH2 RSA Private Key to .pem using openssl

When i try to convert SSH2 RSA format based private key to .pem format, using openssl i am getting the below error. [jbadmin@xxxxxxx .ssh2]$ openssl req -x509 -key /home/jbadmin/.ssh2/id_rsa_2048_a ...
1
vote
1answer
411 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
0
votes
1answer
307 views

configuration file routine:STR_COPY:variable has no value

As I can't get out which file this is being generated from, I have no idea how to grab the variable that isn't set. But the error resembles an old issue where a variable wasn't correctly set in the ...
1
vote
0answers
436 views

Need Help Cross Compiling Openssl for MIPS

I've been trying to cross compile Ncat for the MIPS architecture (big endian), and I really need SSL support, so I first must compile OpenSSL. I downloaded the latest version from Github and ...
1
vote
2answers
81 views

how to login using ssh with password? [duplicate]

I want to login using ssh and password store in a text file or may be in a varible I am trying below method but i am getting an error please suggest me correct way. echo "123456" | ssh ...
0
votes
1answer
114 views

Pipe openssl input to bash script read

I need to pass input from my bash script to the commands I run inside the script. I have no idea how to do it. I've searched all day for something like this in bash. #!/bin/env bash # This script is ...
1
vote
0answers
61 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...