The openssl tag has no wiki summary.
1
vote
1answer
12 views
generate SCRAM-SHA-1 hash of a password
I am looking for a simple way (perhaps using openssl) to generate SCRAM-SHA-1 hash of a password for use for Prosody Jabber Server. The passwords on the server are stored in the following form:
...
3
votes
2answers
38 views
OpenSSL buffering problem
I have a stream that I would like to encrypt in real time, but the problem is that openssl encrypt only when it could read from stdin enough bytes, otherwise it waits.
Look at those examples:
$ ...
0
votes
4answers
3k views
nginx ./configure can't find openssl
I'm trying to install nginx and no matter what I do, nginx can't seem to find my openssl path. It looks like it's searching for files that don't exist in any of the openssl directories. Below is my ...
2
votes
2answers
87 views
SSH Agent does not work with pkcs8 private key
I did encrypt my private key using openssl pkcs8 -topk8 -in id_rsa -out id_rsa_new -v2 des3 (http://martin.kleppmann.com/2013/05/24/improving-security-of-ssh-private-keys.html)
But now, ssh-agent ...
1
vote
1answer
59 views
openssl-1.0.1e compiling on Debian
I am compiling OpenSSL-1.0.1e on Debian Lenny (armv4 architecture). I have been following the instruction on http://www.linuxfromscratch.org/blfs/view/svn/postlfs/openssl.html to compile the source ...
4
votes
1answer
51 views
Backporting OpenSSL-1.0.1e to Debian Lenny (armv4l)
I have an old embedded board that supports only Debian Lenny. I need to install OpenSSL-1.0.1e on it. If I download the source code then try to compile the source code, I get this error
...
0
votes
1answer
45 views
Certificate extensions in generating and signing certificartes using openssl
References:
SSL Configurations for Intermediate certificate
How to add my own created certificate authority to system trusted repositories
Why I can't find a page which tell me what's the kind of ...
1
vote
1answer
57 views
Using key file as password with OpenSSL
I got an assignment to decrypt a binary file which is encrypted using aes. I have a 32 byte binary file which is a key for decryption. I know how to decrypt if the key is a passphrase by using
...
0
votes
0answers
24 views
Missing configuration in Apache to achive mutual SSL authentcaion
After implementing a Mutual Certificate Authentication with OpenSSL and Apache Web Server on CentOS platform, I tried this scenario (see this diagram):
----------
...
-2
votes
1answer
63 views
Red hat enterprise linux how do i install apache with SSL HTTPS? i have CERTIFICATE, KEY, INTERMEDIATE (ROOT CA) from heart internet [closed]
How can i install SSL HTTPS in my apache webserver in Red hat enterprise linux? Only following is installed. And i have tried this website follow up but its not working it fails.
$ uname -a
...
1
vote
2answers
1k views
Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”
Arch Linux 2011.08.19 (Linux 3.4.2 i686)
Apache 2.2.22 → 2.2.22 (recompile & reinstall)
OpenSSL 1.0.1.c-1
These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
2
votes
0answers
47 views
SSL Configurations for Intermediate certificate
I had implement a mutual certificate authentication and it worked successfully for following steps :
create root ca (self-signed)
create server certificate and sign it with ca private key
create ...
1
vote
1answer
137 views
`openssl`: Subject Alternative Name
I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain:
$ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
3
votes
4answers
6k views
How do I upgrade OpenSSL?
According to these instructions:
http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
I need to use OpenSSL 0.9.8k or later (right now it's on 1.0.0c) to use name based virtual hosts in apache. ...
0
votes
0answers
21 views
Best way of updating Openssl on Linux machine [duplicate]
I have a confusion to choose the best way for upgrading the OpenSSL on my Linux machine.
1*Through the yum Update.*
# yum update
I know this will update the entire packages. But If I want to ...
0
votes
1answer
68 views
upgrade OpenSSL from 0.9.8w to 1.0.0i or 1.0.1a on Linux server [duplicate]
I want to upgrade OpenSSL from 0.9.8w to 1.0.0I or 1.0.1a.
I am using
os.name Linux
os.version 2.6.18-164.9.1.el5
Any pointers or links would be very helpful.
Thanks in Advance.
4
votes
3answers
1k views
“openssl dgst -sha1” producing an extraneous “(stdin)= ” prefix and trailing newline
If you run this command on your Unix
echo -n "foo" | openssl dgst -sha1
You will get this output:
(stdin)= 0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33
(followed by a newline).
How can I force ...
5
votes
3answers
11k views
How to encrypt messages/text with RSA? (using openssl?)
I'm Bob.
I have Alice's public key. I want to send Alice an -> RSA <- encrypted message.
How can I do it using the openssl command?
The message is:
Hi Alice! Please bring malacpörkölt for dinner!
...
2
votes
1answer
66 views
How to add multiple email adresses to an SSL certificate via the command line?
I know that by adding/modifying the SubjectAltName entry in openssl.cnf this can be achieved, but is there a way to do so without having to modify that file every time?
7
votes
2answers
4k views
How do I convert a ssh-keygen public key into a format that openssl PEM_read_bio_RSA_PUBKEY() function will consume?
I'm having an issue generating a public key that the openssl PEM_read_bio_RSA_PUBKEY() function can consume. I keep getting errors.
Obviously I cannot simply use the ASCII string in the ssh-keygen ...
1
vote
1answer
94 views
Trailing space when generating md5
I apologize if this has already been answered, or if the answer is simpler than I realize, but I can't seem to figure out the following:
When I try to generate an md5 from a string, either with
echo ...
2
votes
2answers
663 views
Trying to install spotify with libssl1.0.0
I would like to install spotify client but it's complaining that it can't find the old libssl0.9.8 So I created a symlink to libssl1.0.0:
sudo ln -s /usr/lib/x86_64-linux-gnu/libssl.so**.1.0.0** ...
4
votes
1answer
217 views
Encrypt word X to /etc/shadow encryption
I've changed my password to X and the shadow file has changed to:
ahmad:$1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/:15425:0:99999:7:::
I see the encrypted X as $1$oYINSKjP$eCkCtJV/2dXerAD57WQPj/. How can I ...
2
votes
1answer
368 views
Cli verification of digitally signed email
I am Alice and I've received signed email from Bob.
I use Web e-Mail client (e.g. GMail) and I see that one of attachements is smime.p7s.
I've found option "show original message" and saved contents ...
0
votes
1answer
313 views
openssl s_client hangs
I am trying to look at some ssl certs with openssl's s_client. For some reason it hangs with the connection open after spitting out the cert info.
Here is the command I am using and the output:
...
5
votes
1answer
441 views
TLS over unix pipe
Can I use TLS/SSL over Unix pipe with Unix command line?
I want the equivalent of
$ mkfifo /tmp/spipe
$ echo a|openssl s_server -acceptFifo /tmp/spipe &
[1] 25563
$ openssl s_client ...
1
vote
2answers
584 views
How can I update existing .crt file with new encrypted rsa .key file?
Suppose I have 2 files: an RSA key file client.key and a certification file client.crt.
I have created them without pass-phrase and now I have encrypted client.key file with pass-phrase by command:
...
1
vote
1answer
181 views
How to display server's TLS certicicate details in terminal?
Having TLS certificate in local file, I can display its details using syntax like:
openssl x509 -text -noout -in cert_filename
Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
2
votes
2answers
2k views
FTP over SSL in AIX (UNIX)
Folks over at SO couldn't answer this, so I am posting over here.
I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
5
votes
3answers
2k views
Safe way to pass password for >1 programs in bash
I'm writing a bash script, and need to ask user for his password and pass it to openssl. Whilst openssl can read the password itself, I need for two runs of the program and don't want to ask the user ...
4
votes
2answers
479 views
libssl and libcrypto backward compatible?
I have an old server application that requires libssl.so.0.9.6 and libcrypto.so.0.9.6.
My issue is I currently have libssl.so.1.0.0a and libcrypto.so.1.0.0a on my system. I tried symlinking to the ...
2
votes
1answer
281 views
How to disable SSLv2 in OpenSSH?
Due to the recent deprecation of SSLv2, is it possible to disable SSLv2 in OpenSSH?
Is OpenSSH even using SSLv2?
From digging around, I see the sshd is not compiled against openssl , but it is ...
1
vote
0answers
130 views
Implementation of eSTREAM ciphers available?
Is there a usable implementation of the eSTREAM stream cyphers available for Linux?
I was thinking to use that for encrypting data stored on tape drives, using it with tar.
Now, there are some basic ...
5
votes
1answer
216 views
How do I extract all subjects of a cacertfile with the openssl command line?
Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)?
I tried openssl x509 -in ...
3
votes
2answers
3k views
Trust a self signed PEM certificate
I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
1
vote
0answers
188 views
Validating an OpenSSL Cipher List
Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically?
For example, ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On ...
1
vote
1answer
162 views
how to find the server key [closed]
When I run openssl s_client -connect 0.0.0.0:8006 I get the Server certificate as:
-----BEGIN CERTIFICATE-----
MIICSTCCAbKgAwIBAgIESfnb7zANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJ ….
From which ...
3
votes
2answers
2k views
How can I verify SSL certificates on the command line?
I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
2
votes
2answers
962 views
Run Ubuntu 10.04 LTS with Apache2 SSL with passphrase
I am setting up a Virtual Machine with Ubuntu 10.04 Lucid Lynx Server.
I have been reading the section on setting up Apache with an SSL certificate within the book : "Beginning Ubuntu LTS Server ...
