OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
0answers
58 views

How do I install and configure NTP on CentOS 7 from source? (include/ntp_crypt.h errors)

I unpacked the .tar.gz file for the newest NTP. I installed the gcc compiler and libcap devel. I ran the ./configure command with various flags and options. I ran make check and found an error. The ...
2
votes
1answer
47 views

How can I sign as CA a multi domain certificate

I have set myself up as a Certicate Authority so I can sign certificates I need for development. I have imported my CA certificate in my browsers so certificates I sign are accepted without question ...
0
votes
1answer
206 views

“crypto failure” error when running various commands

I'm finding that a few commands (for now dig and nslookup) that fail no matter what with the following output: 19-Jan-2016 15:01:50.219 ENGINE_by_id failed (crypto failure) 19-Jan-2016 15:01:50.219 ...
0
votes
1answer
35 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
1
vote
1answer
217 views

ssh algorithm negotiation failed

Problem Ok, the problem is that I am using Pycharm on El Capitan. I am trying to connect to a server that has strict login Kexalgorithms using the newer Key Exchange Algorithms than Pycharm seems to ...
1
vote
1answer
45 views

pem file difference - ssh-keygen vs openssl

I generated my public/private key pair using ssh-keygen -t rsa -b 2048 -v and then needed a .pem file and followed this ...
20
votes
2answers
51k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
1
vote
2answers
1k views

How to install php7 modules in archlinux?

I have the following php version installed: PHP 7.0.2 (cli) (built: Jan 6 2016 11:50:59) ( NTS ) Copyright (c) 1997-2015 The PHP Group Zend Engine v3.0.0, Copyright (c) 1998-2015 Zend Technologies ...
1
vote
1answer
53 views

Encrypting a p12 certificate

I'm trying to following this documentation (see section Create a Code Signing Certificate) in oder to encrypt a p12 file but I always receive the same warning. unknown option 'Cert.p12' Am I ...
3
votes
1answer
33 views

What are the drawbacks of using policy_any in openssl.cnf?

As given in this document, we may use policy_any to ignore most of the fields of subject in certificate request. There must be some drawbacks of ignoring such fields, would it may lead to some ...
0
votes
1answer
110 views

OPENSSL_1.0.0 not found when running PyPy 4.0.1 on Amazon Linux (AWS EC2)

I want to run PyPy 4.0.1 on Amazon Linux (AWS EC2), and then downloaded and unzipped the tar.bz file. Also, I created the symbolic links to fix problems, such as pypy: error while loading shared ...
1
vote
0answers
39 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
0
votes
0answers
36 views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
2
votes
1answer
189 views

Converting SSH2 RSA Private Key to .pem using openssl

When i try to convert SSH2 RSA format based private key to .pem format, using openssl i am getting the below error. [jbadmin@xxxxxxx .ssh2]$ openssl req -x509 -key /home/jbadmin/.ssh2/id_rsa_2048_a ...
0
votes
0answers
146 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
293 views

configuration file routine:STR_COPY:variable has no value

As I can't get out which file this is being generated from, I have no idea how to grab the variable that isn't set. But the error resembles an old issue where a variable wasn't correctly set in the ...
1
vote
1answer
409 views

Install root SSL certificate

I created root certificates, and server certificate, signed with root. How can I install my root certificate, to remove warning about untrusted connection? update, dpkg-reconfigure don't work. I'm ...
1
vote
0answers
424 views

Need Help Cross Compiling Openssl for MIPS

I've been trying to cross compile Ncat for the MIPS architecture (big endian), and I really need SSL support, so I first must compile OpenSSL. I downloaded the latest version from Github and ...
1
vote
2answers
81 views

how to login using ssh with password? [duplicate]

I want to login using ssh and password store in a text file or may be in a varible I am trying below method but i am getting an error please suggest me correct way. echo "123456" | ssh ...
0
votes
1answer
113 views

Pipe openssl input to bash script read

I need to pass input from my bash script to the commands I run inside the script. I have no idea how to do it. I've searched all day for something like this in bash. #!/bin/env bash # This script is ...
0
votes
0answers
79 views

Openssl installation in RHEL 6.2

I had openssl 1.0.0-fips in my RHEL 6.2 box. I tried to upgrade it with openssl-1.0.2e. It got installed successfully. However when I try openssl version I still get the old version. Further I see ...
1
vote
0answers
60 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
1
vote
1answer
54 views

AES-NI module missing in Fedora

I would like to use full disk encryption in the future and wanted to test if my CPU has AES-NI support so I followed guide on nixcraft. It turns out that I do have support, but the kernel modules are ...
1
vote
1answer
181 views

dd, cat & openssl: block size & buffer size

Here it says that when using dd through dm-crypt to overwrite a block device, only the default dd block size should be used because dm-crypt's block size is the same (512 bytes), and increasing dd's ...
2
votes
5answers
16k views

nginx ./configure can't find openssl

I'm trying to install nginx and no matter what I do, nginx can't seem to find my openssl path. It looks like it's searching for files that don't exist in any of the openssl directories. Below is my ...
1
vote
1answer
141 views

Always 'error writing output file' in openssl

I created a 5 MiB random file using openssl with head: $ openssl enc -aes-256-ctr -pass pass:1o0SxTnYvbtjFtKLiuv3ccPebLOJiUU -nosalt < /dev/zero | head -c 5M > /mnt/pny1/file1 It created a ...
3
votes
2answers
4k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
0
votes
1answer
1k views

libssl.so.0.9.8: cannot open shared object file: No such file or directory

When attempting to run Cloud9 IDE locally after its installation I receive this error: # bin/cloud9.sh Linux 64 bit support/node-builds-v4/node-linux64: error while loading shared libraries: ...
1
vote
2answers
2k views

CentOS 6.6: OpenSSL version

I have a CentOS 6.6 system. When I type into command line openssl version, the system gives me OpenSSL 1.0.1e-fips 11 Feb 2013. When I type yum update openssl, then yum says No Packages marked for ...
1
vote
1answer
875 views

Postfix vs Google SMTP servers inconsistency

I wanted to host my own mail server and in order to do so I've installed Postfix 2.7.0 and Dovecot 1.2.9 on Ubuntu Server 10.04. I had fun reading the docs and configuring all these great tools, I am ...
2
votes
3answers
18k views

OpenVPN - Socket bind failed on local address [AF_INET] IP:1194: Cannot assign requested address

How get it resolved? I am trying to start the openVPN server so that i can login remotely using username: demo and password: demo, but openVPN server is failing to start. What am i doing wrong, how ...
1
vote
1answer
23 views

What do the lines of symbols mean, when creating a Diffie Hellmann parameter file?

Just curious: What does this output mean, while creating Diffie Hellmann parameters for encryption in the shell? ...
0
votes
4answers
226 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
0
votes
1answer
84 views

Encrypting existing tar.gz archive

I know of a method to encrypt a tar.gz archive while creating it (not sure if it's a recommend one): tar -czvf /path/to/save/archive.tar.gz -C /path/to/archive . | openssl des3 -salt -k #PASSWORD# | ...
1
vote
0answers
93 views

large file encryption with ssh's RSA key pair?

I'd like to work out a way to encrypt arbitrarily large files using users' RSA key pairs they generated for SSH purposes. They have standard id_rsa and id_rsa.pub files, and a PEM version of the pub ...
0
votes
0answers
251 views

Compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 returns libcrypto.so errors

I'm compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 embedded system: detrayz:~/openssl-1.0.2d# uname -a Linux detrayz 2.6.24.4 #1 Fri Sep 17 10:29:48 KST 2010 armv5tejl GNU/Linux I'm following the ...
2
votes
2answers
8k views

FTP over SSL in AIX (UNIX)

Folks over at SO couldn't answer this, so I am posting over here. I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
1
vote
1answer
286 views

Send email using OpenSSL

With OpenSSL module under openSUSE I can send an email using this list of commands openssl s_client -starttls smtp -connect smtp.gmail.com:587 -crlf helo auth login (Put base64 encoded username) (Put ...
3
votes
1answer
62 views

chpasswd and openssl

I'm trying to pass an MD5 password to chpasswd but it doesn't seem to work. echo username:$(openssl passwd -1 -salt salt password) Then I try to pass this to chpasswd to change the password echo ...
0
votes
1answer
42 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
6
votes
2answers
1k views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
3
votes
1answer
56 views

OpenSSL self signed certificate with a common name longer than 64 bytes

I can create a self signed certificate using openSSL as follows: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days XXX -nodes The interface somehow restricts me to 64 bytes ...
0
votes
3answers
26k views

Installing OpenSSL shared libraries on CentOS 6.5

OS: CentOS-6.5-x86_64-minimal I downloaded the latest version of OpenSSL Extracted it with tar -xvzf openssl-1.0.1e.tar.gz cd openssl-1.0.1e ./config --prefix=/usr/local make it gives me the ...
0
votes
0answers
12 views

Periodic problems with openssl.vim with correct password

For those who doesn't know, there is a great script for vim that allows to store encrypted by openssl passwords using vim to acceses and edit them. About a year ago I've started to observe problems: ...
1
vote
3answers
131 views

Encrypt a hash using RSA

I have to encrypt a hash, eg: 2c1400f69867571ab4e60d3b8f01e0b17c7be89e321f91f8a07cd39eeba202e2 using the RSA algorithm by using a public key(eg: mykey.key) that was already provided to me. How do I ...
0
votes
1answer
288 views

Want a sha256 ssl cert,but i get sha1,why?

I use this procedure openssl req -newkey rsa:2048 -sha256 -subj "/C=IT/ST=Lazio/L=Roma/O=Blu/CN=server.server.server" -keyout ssl.key -out ssl.req -passout file:"/root/pass" ;done #sign certificate ...
1
vote
1answer
1k views

E: Unable to locate package libssl-dev when trying to download 32bit OpenSSL on 64bit system

I'm trying to compile multiarch project the right (means reproducible) way, so I decided to install all libraries through apt-get. But ever since the system noticed what I'm doing, it became hostile. ...
0
votes
1answer
126 views

OpenSSL - how to encrypt files with AES key

Our company needs to exchange data with a vendor using 128 bit AES encryption. Everything I've read suggests that AES can encrypt files using a passphrase not a pre-shared key. Is there a way to ...
0
votes
0answers
12 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
-1
votes
1answer
27 views

'-batch' in openssl

I came across the following command today and I'm not sure what the '-batch' does. openssl req -new -key /usr/RDB/keyfolder/${SITE}-new.key -out /usr/RDB/certfolder/${SITE}.csr -config ${SITE}.conf ...