OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

-1
votes
1answer
16 views

trying a new 2016 openssl package, but still see the old 2012 version. Ubuntu 12.04

I'm trying to install a new 2016 open ssl package, but still see the old 2012 version, on Ubuntu 12.04 . I have a bunch of Ubuntu 12.04 dedicated machines that can't connect to the internet. They're ...
0
votes
0answers
25 views

SSL Secure Connection Failed [on hold]

I tried to migrated my Primary Web-Server to my Secondary Web-Server. I have verified every thing which is mentioned below. Both the host are n same version CentOS 6.7 httpd.conf was same as ...
0
votes
0answers
28 views

How do I install and configure NTP on CentOS 7 from source? (include/ntp_crypt.h errors)

I unpacked the .tar.gz file for the newest NTP. I installed the gcc compiler and libcap devel. I ran the ./configure command with various flags and options. I ran make check and found an error. The ...
2
votes
1answer
22 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
0
votes
1answer
20 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
1
vote
1answer
35 views

ssh algorithm negotiation failed

Problem Ok, the problem is that I am using Pycharm on El Capitan. I am trying to connect to a server that has strict login Kexalgorithms using the newer Key Exchange Algorithms than Pycharm seems to ...
0
votes
1answer
12 views

pem file difference - ssh-keygen vs openssl

I generated my public/private key pair using ssh-keygen -t rsa -b 2048 -v and then needed a .pem file and followed this ...
0
votes
2answers
253 views

How to install php7 modules in archlinux?

I have the following php version installed: PHP 7.0.2 (cli) (built: Jan 6 2016 11:50:59) ( NTS ) Copyright (c) 1997-2015 The PHP Group Zend Engine v3.0.0, Copyright (c) 1998-2015 Zend Technologies ...
0
votes
1answer
88 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
1
vote
3answers
53 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
1
vote
1answer
31 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
3
votes
1answer
26 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
1answer
19 views

OPENSSL_1.0.0 not found when running PyPy 4.0.1 on Amazon Linux (AWS EC2)

I want to run PyPy 4.0.1 on Amazon Linux (AWS EC2), and then downloaded and unzipped the tar.bz file. Also, I created the symbolic links to fix problems, such as pypy: error while loading shared ...
1
vote
0answers
20 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
0
votes
0answers
22 views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
0
votes
0answers
34 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
2
votes
1answer
61 views

Converting SSH2 RSA Private Key to .pem using openssl

When i try to convert SSH2 RSA format based private key to .pem format, using openssl i am getting the below error. [jbadmin@xxxxxxx .ssh2]$ openssl req -x509 -key /home/jbadmin/.ssh2/id_rsa_2048_a ...
1
vote
1answer
103 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
0
votes
1answer
55 views

configuration file routine:STR_COPY:variable has no value

As I can't get out which file this is being generated from, I have no idea how to grab the variable that isn't set. But the error resembles an old issue where a variable wasn't correctly set in the ...
1
vote
0answers
123 views

Need Help Cross Compiling Openssl for MIPS

I've been trying to cross compile Ncat for the MIPS architecture (big endian), and I really need SSL support, so I first must compile OpenSSL. I downloaded the latest version from Github and ...
2
votes
2answers
50 views

how to login using ssh with password? [duplicate]

I want to login using ssh and password store in a text file or may be in a varible I am trying below method but i am getting an error please suggest me correct way. echo "123456" | ssh ...
0
votes
1answer
44 views

Pipe openssl input to bash script read

I need to pass input from my bash script to the commands I run inside the script. I have no idea how to do it. I've searched all day for something like this in bash. #!/bin/env bash # This script is ...
1
vote
0answers
32 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
1
vote
1answer
25 views

AES-NI module missing in Fedora

I would like to use full disk encryption in the future and wanted to test if my CPU has AES-NI support so I followed guide on nixcraft. It turns out that I do have support, but the kernel modules are ...
0
votes
0answers
58 views

Openssl installation in RHEL 6.2

I had openssl 1.0.0-fips in my RHEL 6.2 box. I tried to upgrade it with openssl-1.0.2e. It got installed successfully. However when I try openssl version I still get the old version. Further I see ...
1
vote
1answer
77 views

dd, cat & openssl: block size & buffer size

Here it says that when using dd through dm-crypt to overwrite a block device, only the default dd block size should be used because dm-crypt's block size is the same (512 bytes), and increasing dd's ...
2
votes
1answer
41 views

Always 'error writing output file' in openssl

I created a 5 MiB random file using openssl with head: $ openssl enc -aes-256-ctr -pass pass:1o0SxTnYvbtjFtKLiuv3ccPebLOJiUU -nosalt < /dev/zero | head -c 5M > /mnt/pny1/file1 It created a ...
0
votes
1answer
148 views

libssl.so.0.9.8: cannot open shared object file: No such file or directory

When attempting to run Cloud9 IDE locally after its installation I receive this error: # bin/cloud9.sh Linux 64 bit support/node-builds-v4/node-linux64: error while loading shared libraries: ...
1
vote
1answer
19 views

What do the lines of symbols mean, when creating a Diffie Hellmann parameter file?

Just curious: What does this output mean, while creating Diffie Hellmann parameters for encryption in the shell? ...
0
votes
1answer
49 views

Encrypting existing tar.gz archive

I know of a method to encrypt a tar.gz archive while creating it (not sure if it's a recommend one): tar -czvf /path/to/save/archive.tar.gz -C /path/to/archive . | openssl des3 -salt -k #PASSWORD# | ...
1
vote
0answers
55 views

large file encryption with ssh's RSA key pair?

I'd like to work out a way to encrypt arbitrarily large files using users' RSA key pairs they generated for SSH purposes. They have standard id_rsa and id_rsa.pub files, and a PEM version of the pub ...
0
votes
0answers
148 views

Compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 returns libcrypto.so errors

I'm compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 embedded system: detrayz:~/openssl-1.0.2d# uname -a Linux detrayz 2.6.24.4 #1 Fri Sep 17 10:29:48 KST 2010 armv5tejl GNU/Linux I'm following the ...
1
vote
1answer
113 views

Send email using OpenSSL

With OpenSSL module under openSUSE I can send an email using this list of commands openssl s_client -starttls smtp -connect smtp.gmail.com:587 -crlf helo auth login (Put base64 encoded username) (Put ...
3
votes
1answer
38 views

chpasswd and openssl

I'm trying to pass an MD5 password to chpasswd but it doesn't seem to work. echo username:$(openssl passwd -1 -salt salt password) Then I try to pass this to chpasswd to change the password echo ...
0
votes
1answer
41 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
0
votes
0answers
187 views

Why Python cant import OpenSSL

I created a virtual env for a matrix home server installation on a shared hoster. $ virtualenv -p python2.7 /home/tristank/venv/synapse $ source /home/tristank/venv/synapse/bin/activate I installed ...
6
votes
2answers
767 views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
3
votes
1answer
33 views

OpenSSL self signed certificate with a common name longer than 64 bytes

I can create a self signed certificate using openSSL as follows: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days XXX -nodes The interface somehow restricts me to 64 bytes ...
0
votes
0answers
11 views

Periodic problems with openssl.vim with correct password

For those who doesn't know, there is a great script for vim that allows to store encrypted by openssl passwords using vim to acceses and edit them. About a year ago I've started to observe problems: ...
1
vote
3answers
83 views

Encrypt a hash using RSA

I have to encrypt a hash, eg: 2c1400f69867571ab4e60d3b8f01e0b17c7be89e321f91f8a07cd39eeba202e2 using the RSA algorithm by using a public key(eg: mykey.key) that was already provided to me. How do I ...
0
votes
1answer
119 views

Want a sha256 ssl cert,but i get sha1,why?

I use this procedure openssl req -newkey rsa:2048 -sha256 -subj "/C=IT/ST=Lazio/L=Roma/O=Blu/CN=server.server.server" -keyout ssl.key -out ssl.req -passout file:"/root/pass" ;done #sign certificate ...
1
vote
1answer
532 views

E: Unable to locate package libssl-dev when trying to download 32bit OpenSSL on 64bit system

I'm trying to compile multiarch project the right (means reproducible) way, so I decided to install all libraries through apt-get. But ever since the system noticed what I'm doing, it became hostile. ...
0
votes
1answer
84 views

OpenSSL - how to encrypt files with AES key

Our company needs to exchange data with a vendor using 128 bit AES encryption. Everything I've read suggests that AES can encrypt files using a passphrase not a pre-shared key. Is there a way to ...
0
votes
0answers
10 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
-1
votes
1answer
19 views

'-batch' in openssl

I came across the following command today and I'm not sure what the '-batch' does. openssl req -new -key /usr/RDB/keyfolder/${SITE}-new.key -out /usr/RDB/certfolder/${SITE}.csr -config ${SITE}.conf ...
3
votes
2answers
208 views

How to verify a service is listening on both ipv4 and ipv6?

I want to check whether https service is listening on both IPv6 and IPv4. And also when I am accessing url via browser, I want to know request is served by IPv4 or IPv6.
2
votes
3answers
411 views

RHEL6 openssl + httpd confusion

I have a confusion around openssl + httpd (SSL). I got a rhel 6 server to manage, from the previous admin. This server hosts a (HTTPS) web site. Recently, I updated openssl to a more up-to-date ...
1
vote
1answer
163 views

How to force Debian to use a newer version of OpenSSL?

Today I installed ,,empty'' (just minimal set of packages) Debian 8.1 on my VirtualBox. I wanted to play with compiling apps from sources. I started with OpenSSL: compiled from sources OpenSSL ...
0
votes
0answers
66 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
3
votes
1answer
102 views

mutt SSL unknown protocol - not able to connect

I am facing following situation. I am using arch linux I installed mutt the email client I followed the simple guidelines in the arch wiki to configure mutt to use imap For the simple config where ...