OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
0answers
10 views

Installing libssl1.0.0 and openssl 1.0 in debian 6

I am newbie to openssl. we are trying to connect to our server where its configuration requires TLS1.1 protocol for connection. Debian 6 repos does not have direct backports for libssl1.0.0 & ...
-1
votes
0answers
12 views

How to change the password of Gmail in CLI? [migrated]

How to change the password of Gmail in CLI ? That is, after: openssl s_client -crlf -connect pop.gmail.com:995 What command should I type? Some says we can't in CLI. Is it true ? And Is it also ...
0
votes
1answer
27 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
1
vote
1answer
32 views

Package deb dependency problem

I am using CMake for my application named Agent. After configuring and generating binaryfiles, the application was compiled using the make command and Agent.exe was created in the build directory.Then ...
0
votes
2answers
49 views

CentOS 6.6: OpenSSL version

I have a CentOS 6.6 system. When I type into command line openssl version, the system gives me OpenSSL 1.0.1e-fips 11 Feb 2013. When I type yum update openssl, then yum says No Packages marked for ...
3
votes
2answers
35 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
0
votes
0answers
46 views

Create X509 certificate with v3 extensions using command line tools

I am using the following configuration file named root.conf: [req] default_bits = 2048 default_md = sha256 distinguished_name = req_dn prompt = no ...
0
votes
1answer
39 views

How to use output from openssl encryption routines in a pipe?

openssl manual claims that openssl enc uses standard output by default. But something is not right with the standard output when decrypting a file. Piping the output to any application such as grep, ...
1
vote
2answers
22 views

Generate SMTP key with predetermined text [closed]

I want to generate a SMTP key with predetermined text openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 << EOF text EOF Does ...
1
vote
2answers
39 views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
1
vote
1answer
120 views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 ...
0
votes
1answer
28 views

Openssl on files found with find unix command

Total noob with shell scripting here. I can find the files I'm looking for with something like this: find . -name "*.mp3"; What I want is something like this: find . -name "*.mp3" -exec openssl ...
1
vote
1answer
37 views

How to let openssl respond to http/s get directly from command line while listenning

How can I let the openssl s_server to reply to every http(s) request directly from the command line or the server it self (the server is using centOS)? is that possible? from the -help command for ...
0
votes
0answers
33 views

Backup server with tar, encrypt and directly transfer the result, AFTER BUFFERING IT

So I've been investigative how to make full backups with tar, and I found that tar is a good tool if the backup is to be made once, and if the server has enough disk space to handle the output file. ...
1
vote
0answers
79 views

Upgrading openssl from 0.9.8j-0.50.1 to 1.0.2a on SLES11SP3

I need to upgrade OPENSSL from 0.9.8j-0.50.1 -> 1.0.2a on a server that is running sles11 sp3 for dynamically linking into my program. Steps followed for upgrade my build environment(sles11sp3): ...
0
votes
1answer
82 views

OpenSSL 1.0.2.a and Centos5.7

I have an old version of Centos (5.7) and I would like to enable TLS 1.2 due to Google Chrome warning about TLS 1.0 I tried to update with yum but I can see that no OpenSSL 1.x could be installed ...
0
votes
2answers
56 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
1
vote
0answers
88 views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
0
votes
2answers
142 views

Skype/Spotify Installation Error: Cannot Install libssl1.0.0:i386

OpenSSL has been giving me a lot of gripe lately with some pieces of software such as spotify and skype. I include both apps because I think it's the same issue causing both to stop installing, ...
1
vote
1answer
107 views

Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`

According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example). What is the ...
1
vote
1answer
29 views

How to block ciphers supported by OpenSSL in OpenSSL's configuration?

I'm not sure if this is going to be appropriate question but is there a way to block ciphers suites supported by OpenSSL in OpenSSL configuration as oppose to doing it in Apache by creating: ...
0
votes
1answer
258 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
1
vote
0answers
49 views

How does s_client turn ip6-localhost into 127.0.0.1?

When I use openssl s_client and ask it to connect to ip6-localhost it actually connects to 127.0.0.1 instead of ::1. This is what I see on both Ubuntu and Debian: $ strace -e connect openssl ...
0
votes
2answers
124 views

Implementing TLS 1.2 when I SSH into a box as a measure against POODLE

Is it possible to edit sshd_config or ssh_config, such that the SSH connection into a machine configured to use TLS1.2 is successful and rejects connections configured to use TLS1.1 and below, as well ...
0
votes
0answers
83 views

ssl_engine_init.lo Error 1, compiling Apache with OpenSSL

I have installed (with no problems) OpenSSL 0.9.8zd by compiling: ./config no-ssl2 no-ssl3 no-idea no-rc5 no-md2 Next, I wanted to install Apache 2.2.3 by compiling: ./configure ...
0
votes
0answers
18 views

Enable TLS-SRP for, say, courier-imap

I want to use TLS-SRP for the services that I run on my server, because I don't want to leak credentials, not even on the server's disk. There are several articles on setting up TLS-SRP either with ...
0
votes
0answers
264 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
72 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
2
votes
1answer
2k views

postfix smtp connection timed out, why?

A CentOS 7 web server has postfix, dovecot, and mailx installed. I have been able to make an IMAP connection to the server in order to read inbox mail using a remote Thunderbird client, but I am not ...
0
votes
1answer
730 views

Problem installing John the Ripper Jumbo on Kali - libssl-dev dependecy

I am trying to install John the Ripper Jumbo on my Kali box. For some reason the version of Kali I recently installed as the host OS on a spare laptop does not seem to have NTLM hash support (whereas ...
0
votes
0answers
398 views

Building cURL 7.40.0 and OpenSSL 1.0.2 from source: Headers and library doesn't match

I would like to ask for assistance, related to cURL and OpenSSL, both of them, built from sources. OS is Debian 7, latest version, minimal and clean install. Only installed packages: apt-get -y ...
0
votes
1answer
305 views

Solaris 10 openssl version 1.0.1k but apache httpd not compiling,showing version too old-0.9.8a

I have compiled openssl from source on my solaris machine to a newer location apart from the default one. When I set the newly compiled ssl path in PATH variable and LD_Library path and then compile ...
0
votes
1answer
93 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
0
votes
1answer
570 views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
1
vote
2answers
155 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
1
vote
1answer
136 views

Equivalent of Java's String.getBytes() in Unix Shell (Cygwin)

Let's say I convert my string into byte array. byte[] byte sUserID.getBytes(“UTF-8”); //Convert User ID String to byte array Now I need to write a script on Shell that will have exactly the ...
4
votes
1answer
100 views

Custom OpenSSL engine when running within Apache via mod_ssl

I modified my openssl.cnf to specify a custom engine for some operations. It works fine if I go through the openssl binary directly, but if I load libssl from another program it doesn't seem to use ...
2
votes
1answer
293 views

How to get binary representations of strings in Shell?

I'm using openssl dgst -sha1 -binary to get hash values of my strings in binary format. (I'm using -binary flag because my version of openssl adds "stdout" before each hash value on default output, ...
1
vote
1answer
396 views

RHEL openssl conflicts

I am stuck installing PHP 5.5 (to support wordpress) on RHEL 6.3 (Santiago), I think the server was not set up correctly (contractor) and I have ended up with a copy openssl from ius as opposed to ...
1
vote
0answers
138 views

NTP compilation failed - without ssl

I am trying to cross compile NTP ver 4.2.8 without SSL support. I gave --without-crypto while configuring, but still it was throwing following error: ../libntp/libntp.a(ntp_crypto_rnd.o): In function ...
0
votes
1answer
118 views

Error openSSL appears to lack for elliptic curve cryptography? What's that mean and how to resolve it?

I followed this step to compile Bitcoin code, but got an error. Could you please explain what the problem is and how can it be resolved? Error: [root@localhost bitcoin-0.10.0rc1]# bitcoind Error: ...
1
vote
0answers
166 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
0
votes
0answers
99 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
1
vote
1answer
50 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
1
vote
0answers
16 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
0
votes
1answer
52 views

GCM encryption mode for Debian 7.6

Does an option exist for AES-GCM 256bit encryption for client connections with OpenVPN? I've tried to google around this question, but found no algorithm how to patch my openvpn/openssl. So my ...
1
vote
2answers
424 views

How does openssl decrypt a password

I'm learning about encryption and decryption on linux and php. So I have three questions about openssl and how it generates password hashes. 1- So say I generated a password with the linux command ...
2
votes
0answers
85 views

SMTP works via Mail client but not via openssl

I'm trying to troubleshoot an SMTP issue. My credentials work fine via the OS X Mail client (and in other areas), so the credentials are definitely good. However, when I try to submit them via: ...
0
votes
1answer
167 views

CentOS 7 VPN server

How do I set up a remote internet web server using CentOS 7 so that it is completely shielded by a VPN? Here is the use case: 1.) This means that ALL requests for ANY interaction with the web ...
1
vote
0answers
495 views

openssl and OCSP

I'm trying to check the revocation of certificates in a script but I'm getting the following error: unable to load certificate 140735258465104:error:0906D06C:PEM routines:PEM_read_bio:no start ...