OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

5
votes
1answer
3k views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
0
votes
1answer
1k views

Solaris 10 openssl version 1.0.1k but apache httpd not compiling,showing version too old-0.9.8a

I have compiled openssl from source on my Solaris machine to a newer location apart from the default one. When I set the newly compiled ssl path in PATH variable and LD_Library path and then compile ...
3
votes
2answers
38 views

Can't generate client-side certificate after becoming my own Certificate Authority

I became my own certificate authority after running through the tutorial at: https://jamielinux.com/docs/openssl-certificate-authority/ I created a root pair, created an intermediate pair, and ...
1
vote
1answer
87 views

openssl does not load engine from config file

I'm using openssl-1.0.1f. And I'm trying to load the pkcs11 engine in the config file, but it doesn't work. Here is my config: openssl_conf = openssl_def [openssl_def] engines = engine_section [...
0
votes
1answer
1k views

OpenSSL 1.0.2.a and Centos5.7

I have an old version of Centos (5.7) and I would like to enable TLS 1.2 due to Google Chrome warning about TLS 1.0 I tried to update with yum but I can see that no OpenSSL 1.x could be installed ...
18
votes
3answers
757 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
1
vote
0answers
13 views

MIME RSA encryption

i have this scheme how can i use session-key in MIME to encrypt the message? i used this command but i don't think it is correct openssl enc -e -des3 -salt -in MSg_sign.txt -out session.txt can ...
0
votes
1answer
17 views

Convert PEM formatted public key to DER

I have a public key which is ASN.1 DER formatted shown below : 0:d=0 hl=3 l= 181 cons: SEQUENCE 3:d=1 hl=3 l= 144 cons: SEQUENCE 6:d=2 hl=2 l= 0 prim: ...
0
votes
0answers
17 views

how to install openssl fips on unix

I am new to OpenSSL and trying to install openssl-fips module. Current version is openssl-1.0.1efips. Steps performed --- cd openssl-fips-2.0.12 ./config make sudo make install but it does not ...
0
votes
2answers
39 views

Verify SSLCertificateChainFile using OpenSSL

I encountered such issue on a server of a client as I did not know how to verify SSLCertificateChainFile among other certificates. I have a folder with a lot of SSL certificate keys and corresponding ...
1
vote
1answer
37 views

SSL related “undefined reference” on libssh2 and libcurl libs when compiling C on OpenSUSE

I been trying to compile a C software but I'm getting 'undefined reference' over SSL libraries I think. The libraries it mentions are there, actually I compiled them all again: zlib + openssl + ...
0
votes
1answer
29 views

How to Make self-signed SSL .key/.crt for Localhost?

I did with a password and with the following fields sudo openssl req -x509 -days 365 -newkey rsa:2048 -keyout /etc/ssl/apache.key \ -out /etc/ssl/apache.crt Fields Country: FI State: Pirkanmaa ...
1
vote
2answers
3k views

Updating OpenSSL on a SLES11 server

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and ...
1
vote
0answers
82 views

Unable to compile Linux Kernel 4.7-rc2

I was trying to compile Linux Kernel from source. I've compiled the kernel previously and never got any error. But this time I am facing an error. The error is CHK include/generated/asm-...
1
vote
0answers
316 views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
3
votes
1answer
38 views

Enabling export cipher suites in Apache/OpenSSL

I would like to enable export cipher suites in Apache for the purpose of testing out some old vulnerabilities. I haven't been successful thus far, and would greatly appreciate some assistance. My ...
0
votes
1answer
227 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
2k views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
68 views

how to convert base 64 encoded public key (.pem) to bytearray?

I need to convert a Base 64 encoded public key file in .pem format to byte array using openssl. Need to convert public key from the below format: ----BEGIN PUBLIC KEY----- ...
4
votes
3answers
157 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
2
votes
1answer
437 views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
0
votes
1answer
129 views

Can't update OpenSSL on Centos 6.4

I've got a Centos 6.4 system that I'm trying to patch OpenSSL for. Currently, yum reports "1.0.1e-16.el6_5.4" and openssl version shows "1.0.1e-fips". On my Ubuntu machines, I was able to update ...
0
votes
2answers
4k views

Redhat httpd start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
1
vote
1answer
281 views

How can I solve “Your connection to 192.*.*.* is encrypted with obsolete cryptography”

I just set up my apache server with SSL installed on it, and everything is perfect except that when I open the page with https:// I get the following message when I click the padlock next to the ...
0
votes
1answer
247 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
5
votes
1answer
234 views

Custom OpenSSL engine when running within Apache via mod_ssl

I modified my openssl.cnf to specify a custom engine for some operations. It works fine if I go through the openssl binary directly, but if I load libssl from another program it doesn't seem to use ...
5
votes
3answers
7k views

Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 → 2.2.22 (recompile & reinstall) OpenSSL 1.0.1.c-1 These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
7
votes
3answers
29k views

How can I get TLSv1.2 support in Apache on RHEL6/CentOS/SL6?

I'd like to have TLSv1.2 support in Apache on my Scientific Linux 6 (RHEL6 rebuild) server. Is there some semi-supported pathway to getting this working? Preferably with minimal custom rebuilding. ...
-1
votes
2answers
36 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in /...
1
vote
0answers
364 views

Python is unable to import OpenSSL

I created a virtual env for a matrix home server installation on a shared hoster. $ virtualenv -p python2.7 /home/tristank/venv/synapse $ source /home/tristank/venv/synapse/bin/activate I installed ...
3
votes
0answers
79 views

kerberos preauth pkinit failed to initialize: No realms configured correctly for pkinit support

I have successfully installed Kerberos on debian wheezy and can perform service authentication (Apache, ssh) with Kerberos tickets from kinit. I would like to use certificates for kinit (pkinit) ...
0
votes
0answers
51 views

How to use openssl to verify and decrypt a SAML2 response

I wish to see all parameters that are actually passed by my identity provider during a SAML2 single sign on process. The response sent by the IdP is signed and encrypted, I think I have all what is ...
0
votes
0answers
11 views

running command in Mobax Terminal are there plugins that are needed

while read CTFlist; do #next we need to create ctfs padded with zeros as a variable ctfPadded=$(printf ${ctflist}00000000) #then call rc2 key as variable rc2Key="TemporaryRC2Key1" #next create a ...
0
votes
1answer
49 views

openssl dgst -sha1 -hmac “key” producing an extraneous “(stdin)= ” prefix and trailing newline

if you run: while read CTFid; do echo -n "$CTFid" | openssl dgst -sha1 -hmac "key"; done < CTFid.csv > OPKlist.csv i am getting (stdin) in the prefix like so (stdin)=...
0
votes
1answer
19 views

Hex has unknown character / in the output

I need to create a Rc2Key variable and then convert this to hexadecimal. I have done this with two commands. The Rc2Key variable has to be 16 characters long, so in my test module I used "...
2
votes
1answer
31 views

How do I specify a requirement for a minimum version of openssl in RPM spec file?

The rpm spec file for my package looks like this - Requires:mysql-server >= 5.5.30, java >= 1.6, p7zip, openssl >= 1.0.2g I have an RHEL system where the openssl version is this: [ag@...
0
votes
0answers
65 views

OpenSSL installation is missing the X509_VERIFY_PARAM function

I am trying to install clamav 0.99.1 on RedHat 7.3. My OpenSSL version is 1.0.1. I am using the below command to install clamav: ./configure --prefix=/usr --with-user=defang --with-group=defang --...
0
votes
1answer
839 views

How to update OpenSSL on centos 7.2?

I am using centos 7.2, I will intall Nginx-CT,and it needs OpenSSL 1.0.2,the current version is as follow: [root@i001 ~]# rpm -qa|grep openssl openssl-libs-1.0.1e-51.el7_2.4.x86_64 openssl-devel-1.0....
0
votes
0answers
33 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
0
votes
1answer
53 views

Error writing output file when I decryption files using openssl

I am working on an encrypted data set. And using the code below to decrypt files. openssl enc -aes-256-cbc -d -in $encryptedfile -out $decrypted_file -pass file:secret.txt But I am always notified ...
3
votes
2answers
8k views

RHEL 6.4: Openssl 1.0.0-27 libcrypto and libssl missing

I am trying to install znc IRC bouncer, which needs openssl libraries: Error: Package: znc-1.4-1.el6.x86_64 (epel) Requires: libcrypto.so.10(libcrypto.so.10)(64bit) Error: Package: znc-1.4-...
2
votes
1answer
972 views

How to recompile exim4-daemon-heavy? [duplicate]

I have had a few problem with exim4 and various phone mail clients (Windows Phone in particular) that seem to result from bad mail clients together with GnuTLS. I'd like to recompile exim4-daemon-...
0
votes
0answers
30 views

Nginx + CentOS 6 + OpenSSL Library - Update System Version

CentOS 6 I'm running Nginx which is built with an earlier version of OpenSSL: Note: my linux skills aren't so strong with this kinda stuff so any advise or direction would be greatly appreciated. ...
2
votes
2answers
2k views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
0
votes
1answer
81 views

openssl: unable to get local issuer certificate with some versions

With OpenSSL 1.0.2g (MacPorts on OS X) I can check Google's certificate (I have to specify the certificate bundle as OS X usually stores it in the KeyChain) $ echo Q | /opt/local/bin/openssl ...
5
votes
2answers
2k views

libssl and libcrypto backward compatible?

I have an old server application that requires libssl.so.0.9.6 and libcrypto.so.0.9.6. My issue is I currently have libssl.so.1.0.0a and libcrypto.so.1.0.0a on my system. I tried symlinking to the ...
1
vote
0answers
31 views

Openvpn authentication fail caused by wrong system date time

I have a remote linux device connected as an openvpn client to an openvpn server over TCP, with standard certificate authentication. Unfortunately this device has lost the current system Date Time, ...
15
votes
4answers
7k views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create ...
0
votes
0answers
68 views

Configuring Apache with Openssl and Enabling FIPS mode causing fingerpoint error

Can someone please help me I have recently upgraded my apache from 2.4.12 to 2.4.18 and I have also updated the openssl 1.01e to 1.02f. I followed the steps from here I ran this command ./...
-1
votes
2answers
346 views

How can I upgrade OpenSSL version to openssl-1.0.1s in RHEL 5 machine?

My current openssl version is openSSL 0.9.8e-fips-rhel5. I want to upgrade this to openssl-1.0.1s. The yum update openssl will not work here. I removed openssl binaries from following path /usr/lib/...