OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

1
vote
1answer
114 views

Always 'error writing output file' in openssl

I created a 5 MiB random file using openssl with head: $ openssl enc -aes-256-ctr -pass pass:1o0SxTnYvbtjFtKLiuv3ccPebLOJiUU -nosalt < /dev/zero | head -c 5M > /mnt/pny1/file1 It created a ...
0
votes
1answer
869 views

libssl.so.0.9.8: cannot open shared object file: No such file or directory

When attempting to run Cloud9 IDE locally after its installation I receive this error: # bin/cloud9.sh Linux 64 bit support/node-builds-v4/node-linux64: error while loading shared libraries: ...
1
vote
1answer
22 views

What do the lines of symbols mean, when creating a Diffie Hellmann parameter file?

Just curious: What does this output mean, while creating Diffie Hellmann parameters for encryption in the shell? ...
0
votes
1answer
77 views

Encrypting existing tar.gz archive

I know of a method to encrypt a tar.gz archive while creating it (not sure if it's a recommend one): tar -czvf /path/to/save/archive.tar.gz -C /path/to/archive . | openssl des3 -salt -k #PASSWORD# | ...
1
vote
0answers
81 views

large file encryption with ssh's RSA key pair?

I'd like to work out a way to encrypt arbitrarily large files using users' RSA key pairs they generated for SSH purposes. They have standard id_rsa and id_rsa.pub files, and a PEM version of the pub ...
0
votes
0answers
233 views

Compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 returns libcrypto.so errors

I'm compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 embedded system: detrayz:~/openssl-1.0.2d# uname -a Linux detrayz 2.6.24.4 #1 Fri Sep 17 10:29:48 KST 2010 armv5tejl GNU/Linux I'm following the ...
1
vote
1answer
234 views

Send email using OpenSSL

With OpenSSL module under openSUSE I can send an email using this list of commands openssl s_client -starttls smtp -connect smtp.gmail.com:587 -crlf helo auth login (Put base64 encoded username) (Put ...
3
votes
1answer
58 views

chpasswd and openssl

I'm trying to pass an MD5 password to chpasswd but it doesn't seem to work. echo username:$(openssl passwd -1 -salt salt password) Then I try to pass this to chpasswd to change the password echo ...
0
votes
1answer
41 views

SSL Problem, Where should I insert the certificate.crt?

I'm using startSSL. I've got a private key.key, a certificate.crt and a decrypted key.key for private key.key. What should I do with this files and where should I upload them? How can I get https for ...
1
vote
0answers
289 views

Why Python cant import OpenSSL

I created a virtual env for a matrix home server installation on a shared hoster. $ virtualenv -p python2.7 /home/tristank/venv/synapse $ source /home/tristank/venv/synapse/bin/activate I installed ...
6
votes
2answers
1k views

script to check if SSL certificate is valid

I have several SSL certificates, and I would like to be notified, when a certificate has expired. My idea is to create a cronjob, which executes a simple command every day. I know that the openssl ...
3
votes
1answer
47 views

OpenSSL self signed certificate with a common name longer than 64 bytes

I can create a self signed certificate using openSSL as follows: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out cert.pem -days XXX -nodes The interface somehow restricts me to 64 bytes ...
0
votes
0answers
11 views

Periodic problems with openssl.vim with correct password

For those who doesn't know, there is a great script for vim that allows to store encrypted by openssl passwords using vim to acceses and edit them. About a year ago I've started to observe problems: ...
1
vote
3answers
119 views

Encrypt a hash using RSA

I have to encrypt a hash, eg: 2c1400f69867571ab4e60d3b8f01e0b17c7be89e321f91f8a07cd39eeba202e2 using the RSA algorithm by using a public key(eg: mykey.key) that was already provided to me. How do I ...
0
votes
1answer
233 views

Want a sha256 ssl cert,but i get sha1,why?

I use this procedure openssl req -newkey rsa:2048 -sha256 -subj "/C=IT/ST=Lazio/L=Roma/O=Blu/CN=server.server.server" -keyout ssl.key -out ssl.req -passout file:"/root/pass" ;done #sign certificate ...
1
vote
1answer
1k views

E: Unable to locate package libssl-dev when trying to download 32bit OpenSSL on 64bit system

I'm trying to compile multiarch project the right (means reproducible) way, so I decided to install all libraries through apt-get. But ever since the system noticed what I'm doing, it became hostile. ...
0
votes
1answer
118 views

OpenSSL - how to encrypt files with AES key

Our company needs to exchange data with a vendor using 128 bit AES encryption. Everything I've read suggests that AES can encrypt files using a passphrase not a pre-shared key. Is there a way to ...
0
votes
0answers
11 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
-1
votes
1answer
26 views

'-batch' in openssl

I came across the following command today and I'm not sure what the '-batch' does. openssl req -new -key /usr/RDB/keyfolder/${SITE}-new.key -out /usr/RDB/certfolder/${SITE}.csr -config ${SITE}.conf ...
3
votes
2answers
339 views

How to verify a service is listening on both ipv4 and ipv6?

I want to check whether https service is listening on both IPv6 and IPv4. And also when I am accessing url via browser, I want to know request is served by IPv4 or IPv6.
2
votes
3answers
672 views

RHEL6 openssl + httpd confusion

I have a confusion around openssl + httpd (SSL). I got a rhel 6 server to manage, from the previous admin. This server hosts a (HTTPS) web site. Recently, I updated openssl to a more up-to-date ...
1
vote
1answer
261 views

How to force Debian to use a newer version of OpenSSL?

Today I installed ,,empty'' (just minimal set of packages) Debian 8.1 on my VirtualBox. I wanted to play with compiling apps from sources. I started with OpenSSL: compiled from sources OpenSSL ...
0
votes
0answers
88 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
4
votes
1answer
158 views

mutt SSL unknown protocol - not able to connect

I am facing following situation. I am using arch linux I installed mutt the email client I followed the simple guidelines in the arch wiki to configure mutt to use imap For the simple config where ...
0
votes
2answers
145 views

How can I encrypt a large file with OpenSSL using RSA keys?

How can I encrypt a large file with a public key so that no one other than who has the private key be able to decrypt it? I don't want to use GPG!
0
votes
0answers
56 views

yum version mismatch for openssl

Someone have any idea why yum info openssl version is 1.0.1e and openssl version is 1.0.2d?? [root@WEBPROXY Desktop]# yum info openssl Loaded plugins: fastestmirror, refresh-packagekit Loading mirror ...
0
votes
4answers
179 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
2
votes
1answer
94 views

Openssl passing a binary pass phrase as a argument

This openssl command is working fine for me. openssl aes-128-ecb -d -in encrypted_base64.txt -K 4D1D75237C31E7732030C69F209F23154418373335E049C4F567C7B6D422ABD0 -base64 How would I do the ...
2
votes
1answer
517 views

How to configure Mutt for gmail securely

I've setup mutt on Ubuntu to work with my gmail. It works if I change the setting in gmail "Allow less secure apps" to ON but I'd rather connect securely. I have OpenSSL installed. When I do mutt -v I ...
1
vote
1answer
103 views

SSH Tunneling - Local and Remote Use Cases

I just learned the basics of SSH tunneling from googling. I saw this interesting question: How does reverse SSH tunneling work? But I still find it a bit confusing, more specifically on the ...
0
votes
1answer
240 views

How to build openssl with clang(rather than gcc) on a FreeBSD machine?

I have a 64 bit FreeBSD build machine. I need to add https support in my python3 application code. For that it is advised to build/compile python with openssl support. I do not need any gcc dependency ...
0
votes
0answers
760 views

FIPS integrity test failed

I recently enabled the fips module in my CentOS 6 machine using this guide. During reboot, the system halted with this error: SELF TEST FAILED (/usr/lib64/hmaccalc/sha512hmac.hmac) dracut: FATAL: ...
2
votes
1answer
1k views

How to convert public key from PEM to DER format?

I'd like to convert an existing public key (generated using ssh-keygen) from PEM-format to DER-format I tried: openssl rsa -in ~/.ssh/id_rsa.pub -inform PEM -pubin -outform DER -out ...
1
vote
1answer
161 views

How to run a specific test from OpenSSL test suite?

I want to measure the code coverage of different tests from OpenSSL test suite. I successfully measured the total coverage of the tests with this method: $ make clean $ export CC="gcc ...
0
votes
0answers
86 views

Openssl support for ruby not found in passenger installation on redhat 6

I have openssl 1.0.1e-42.el6 already installed. Also tried to compile openssl from ext/openssl directory which failed with below error ossl_pkey_ec.c:815: error: ‘EC_GROUP_new_curve_GF2m’ undeclared ...
2
votes
1answer
819 views

How to create gcov files for a project in a different dir?

I want to analyze code coverage datas. I want to create gcov files from OpenSSL (and from other projects), but I can only create them in the same directory of the project, and only for the files in ...
1
vote
1answer
561 views

Cannot run ssh after upgrade to OpenSSL 1.0.1p

I upgrade OpenSSL 1.0.1p lsof | grep libssl The result firewalld 665 root mem REG 253,0 445544 805308545 /usr/lib64/libssl.so.1.0.1e gmain 665 1197 ...
0
votes
1answer
352 views

Installing libssl1.0.0 and OpenSSL 1.0 in Debian 6

I am newbie to OpenSSL. We are trying to connect to our server where its configuration requires the TLS1.1 protocol for connection. Debian 6 repos do not have direct backports for libssl1.0.0 and ...
0
votes
1answer
206 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
1
vote
1answer
114 views

Package deb dependency problem

I am using CMake for my application named Agent. After configuring and generating binaryfiles, the application was compiled using the make command and Agent.exe was created in the build directory.Then ...
1
vote
2answers
2k views

CentOS 6.6: OpenSSL version

I have a CentOS 6.6 system. When I type into command line openssl version, the system gives me OpenSSL 1.0.1e-fips 11 Feb 2013. When I type yum update openssl, then yum says No Packages marked for ...
3
votes
2answers
110 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
0
votes
0answers
511 views

Create X509 certificate with v3 extensions using command line tools

I am using the following configuration file named root.conf: [req] default_bits = 2048 default_md = sha256 distinguished_name = req_dn prompt = no ...
0
votes
1answer
376 views

How to use output from openssl encryption routines in a pipe?

openssl manual claims that openssl enc uses standard output by default. But something is not right with the standard output when decrypting a file. Piping the output to any application such as grep, ...
1
vote
2answers
44 views

Generate SMTP key with predetermined text [closed]

I want to generate a SMTP key with predetermined text openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 << EOF text EOF Does ...
3
votes
2answers
4k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
1
vote
1answer
394 views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 ...
0
votes
1answer
54 views

Openssl on files found with find unix command

Total noob with shell scripting here. I can find the files I'm looking for with something like this: find . -name "*.mp3"; What I want is something like this: find . -name "*.mp3" -exec openssl ...
1
vote
1answer
361 views

How to let openssl respond to http/s get directly from command line while listenning

How can I let the openssl s_server to reply to every http(s) request directly from the command line or the server it self (the server is using centOS)? is that possible? from the -help command for ...
0
votes
0answers
57 views

Backup server with tar, encrypt and directly transfer the result, AFTER BUFFERING IT

So I've been investigative how to make full backups with tar, and I found that tar is a good tool if the backup is to be made once, and if the server has enough disk space to handle the output file. ...