OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
2answers
29 views

How can I encrypt a large file with OpenSSL using RSA keys?

How can I encrypt a large file with a public key so that no one other than who has the private key be able to decrypt it? I don't want to use GPG!
0
votes
0answers
7 views

yum version mismatch for openssl

Someone have any idea why yum info openssl version is 1.0.1e and openssl version is 1.0.2d?? [root@WEBPROXY Desktop]# yum info openssl Loaded plugins: fastestmirror, refresh-packagekit Loading mirror ...
0
votes
3answers
32 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
2
votes
1answer
31 views

Openssl passing a binary pass phrase as a argument

This openssl command is working fine for me. openssl aes-128-ecb -d -in encrypted_base64.txt -K 4D1D75237C31E7732030C69F209F23154418373335E049C4F567C7B6D422ABD0 -base64 How would I do the ...
1
vote
1answer
25 views

How to configure Mutt for gmail securely

I've setup mutt on Ubuntu to work with my gmail. It works if I change the setting in gmail "Allow less secure apps" to ON but I'd rather connect securely. I have OpenSSL installed. When I do mutt -v I ...
1
vote
1answer
38 views

SSH Tunneling - Local and Remote Use Cases

I just learned the basics of SSH tunneling from googling. I saw this interesting question: How does reverse SSH tunneling work? But I still find it a bit confusing, more specifically on the ...
0
votes
1answer
35 views

How to build openssl with clang(rather than gcc) on a FreeBSD machine?

I have a 64 bit FreeBSD build machine. I need to add https support in my python3 application code. For that it is advised to build/compile python with openssl support. I do not need any gcc dependency ...
0
votes
0answers
26 views

FIPS integrity test failed

I recently enabled the fips module in my CentOS 6 machine using this guide. During reboot, the system halted with this error: SELF TEST FAILED (/usr/lib64/hmaccalc/sha512hmac.hmac) dracut: FATAL: ...
2
votes
1answer
44 views

How to convert public key from PEM to DER format?

I'd like to convert an existing public key (generated using ssh-keygen) from PEM-format to DER-format I tried: openssl rsa -in ~/.ssh/id_rsa.pub -inform PEM -pubin -outform DER -out ...
1
vote
1answer
31 views

How to run a specific test from OpenSSL test suite?

I want to measure the code coverage of different tests from OpenSSL test suite. I successfully measured the total coverage of the tests with this method: $ make clean $ export CC="gcc ...
0
votes
0answers
26 views

Openssl support for ruby not found in passenger installation on redhat 6

I have openssl 1.0.1e-42.el6 already installed. Also tried to compile openssl from ext/openssl directory which failed with below error ossl_pkey_ec.c:815: error: ‘EC_GROUP_new_curve_GF2m’ undeclared ...
2
votes
1answer
71 views

How to create gcov files for a project in a different dir?

I want to analyze code coverage datas. I want to create gcov files from OpenSSL (and from other projects), but I can only create them in the same directory of the project, and only for the files in ...
1
vote
1answer
106 views

Cannot run ssh after upgrade to OpenSSL 1.0.1p

I upgrade OpenSSL 1.0.1p lsof | grep libssl The result firewalld 665 root mem REG 253,0 445544 805308545 /usr/lib64/libssl.so.1.0.1e gmain 665 1197 ...
0
votes
1answer
49 views

Installing libssl1.0.0 and OpenSSL 1.0 in Debian 6

I am newbie to OpenSSL. We are trying to connect to our server where its configuration requires the TLS1.1 protocol for connection. Debian 6 repos do not have direct backports for libssl1.0.0 and ...
0
votes
1answer
46 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
1
vote
1answer
57 views

Package deb dependency problem

I am using CMake for my application named Agent. After configuring and generating binaryfiles, the application was compiled using the make command and Agent.exe was created in the build directory.Then ...
0
votes
2answers
237 views

CentOS 6.6: OpenSSL version

I have a CentOS 6.6 system. When I type into command line openssl version, the system gives me OpenSSL 1.0.1e-fips 11 Feb 2013. When I type yum update openssl, then yum says No Packages marked for ...
3
votes
2answers
54 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
0
votes
0answers
138 views

Create X509 certificate with v3 extensions using command line tools

I am using the following configuration file named root.conf: [req] default_bits = 2048 default_md = sha256 distinguished_name = req_dn prompt = no ...
0
votes
1answer
65 views

How to use output from openssl encryption routines in a pipe?

openssl manual claims that openssl enc uses standard output by default. But something is not right with the standard output when decrypting a file. Piping the output to any application such as grep, ...
1
vote
2answers
29 views

Generate SMTP key with predetermined text [closed]

I want to generate a SMTP key with predetermined text openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 << EOF text EOF Does ...
1
vote
2answers
267 views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
1
vote
1answer
184 views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 ...
0
votes
1answer
31 views

Openssl on files found with find unix command

Total noob with shell scripting here. I can find the files I'm looking for with something like this: find . -name "*.mp3"; What I want is something like this: find . -name "*.mp3" -exec openssl ...
1
vote
1answer
72 views

How to let openssl respond to http/s get directly from command line while listenning

How can I let the openssl s_server to reply to every http(s) request directly from the command line or the server it self (the server is using centOS)? is that possible? from the -help command for ...
0
votes
0answers
39 views

Backup server with tar, encrypt and directly transfer the result, AFTER BUFFERING IT

So I've been investigative how to make full backups with tar, and I found that tar is a good tool if the backup is to be made once, and if the server has enough disk space to handle the output file. ...
1
vote
0answers
220 views

Upgrading openssl from 0.9.8j-0.50.1 to 1.0.2a on SLES11SP3

I need to upgrade OPENSSL from 0.9.8j-0.50.1 -> 1.0.2a on a server that is running sles11 sp3 for dynamically linking into my program. Steps followed for upgrade my build environment(sles11sp3): ...
0
votes
1answer
126 views

OpenSSL 1.0.2.a and Centos5.7

I have an old version of Centos (5.7) and I would like to enable TLS 1.2 due to Google Chrome warning about TLS 1.0 I tried to update with yum but I can see that no OpenSSL 1.x could be installed ...
0
votes
2answers
64 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
1
vote
0answers
127 views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
0
votes
2answers
221 views

Skype/Spotify Installation Error: Cannot Install libssl1.0.0:i386

OpenSSL has been giving me a lot of gripe lately with some pieces of software such as spotify and skype. I include both apps because I think it's the same issue causing both to stop installing, ...
1
vote
1answer
144 views

Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`

According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example). What is the ...
1
vote
1answer
40 views

How to block ciphers supported by OpenSSL in OpenSSL's configuration?

I'm not sure if this is going to be appropriate question but is there a way to block ciphers suites supported by OpenSSL in OpenSSL configuration as oppose to doing it in Apache by creating: ...
0
votes
1answer
577 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
1
vote
0answers
73 views

How does s_client turn ip6-localhost into 127.0.0.1?

When I use openssl s_client and ask it to connect to ip6-localhost it actually connects to 127.0.0.1 instead of ::1. This is what I see on both Ubuntu and Debian: $ strace -e connect openssl ...
0
votes
2answers
192 views

Implementing TLS 1.2 when I SSH into a box as a measure against POODLE

Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
0
votes
0answers
97 views

ssl_engine_init.lo Error 1, compiling Apache with OpenSSL

I have installed (with no problems) OpenSSL 0.9.8zd by compiling: ./config no-ssl2 no-ssl3 no-idea no-rc5 no-md2 Next, I wanted to install Apache 2.2.3 by compiling: ./configure ...
0
votes
0answers
21 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
356 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
89 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
3
votes
1answer
2k views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...
0
votes
1answer
989 views

Problem installing John the Ripper Jumbo on Kali - libssl-dev dependecy

I am trying to install John the Ripper Jumbo on my Kali box. For some reason the version of Kali I recently installed as the host OS on a spare laptop does not seem to have NTLM hash support (whereas ...
0
votes
0answers
461 views

Building cURL 7.40.0 and OpenSSL 1.0.2 from source: Headers and library doesn't match

I would like to ask for assistance, related to cURL and OpenSSL, both of them, built from sources. OS is Debian 7, latest version, minimal and clean install. Only installed packages: apt-get -y ...
0
votes
1answer
423 views

Solaris 10 openssl version 1.0.1k but apache httpd not compiling,showing version too old-0.9.8a

I have compiled openssl from source on my solaris machine to a newer location apart from the default one. When I set the newly compiled ssl path in PATH variable and LD_Library path and then compile ...
0
votes
1answer
176 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
0
votes
1answer
729 views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
1
vote
2answers
249 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
1
vote
1answer
168 views

Equivalent of Java's String.getBytes() in Unix Shell (Cygwin)

Let's say I convert my string into byte array. byte[] byte sUserID.getBytes(“UTF-8”); //Convert User ID String to byte array Now I need to write a script on Shell that will have exactly the ...
4
votes
1answer
120 views

Custom OpenSSL engine when running within Apache via mod_ssl

I modified my openssl.cnf to specify a custom engine for some operations. It works fine if I go through the openssl binary directly, but if I load libssl from another program it doesn't seem to use ...
2
votes
1answer
322 views

How to get binary representations of strings in Shell?

I'm using openssl dgst -sha1 -binary to get hash values of my strings in binary format. (I'm using -binary flag because my version of openssl adds "stdout" before each hash value on default output, ...