OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
1answer
11 views

Compiling LibSSH2 with specific LibSSL

I have downloaded and compiled the latest version of libssl, the result of which is located at /usr/local/ssl. I want to compile libssh2 using the files in this folder, and to do that I've set the ...
1
vote
2answers
31 views

SSH via cert-authority

I'm trying to use SSH using signed certificates. I'm using ssh -i keys/client.key to connect to the target device. If I generate a public key from that private key (with ssh-keygen -y -f ...
0
votes
0answers
10 views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
2
votes
1answer
2k views

RHEL 6.4: Openssl 1.0.0-27 libcrypto and libssl missing

I am trying to install znc IRC bouncer, which needs openssl libraries: Error: Package: znc-1.4-1.el6.x86_64 (epel) Requires: libcrypto.so.10(libcrypto.so.10)(64bit) Error: Package: ...
1
vote
1answer
42 views

Equivalent of Java's String.getBytes() in Unix Shell (Cygwin)

Let's say I convert my string into byte array. byte[] byte sUserID.getBytes(“UTF-8”); //Convert User ID String to byte array Now I need to write a script on Shell that will have exactly the ...
4
votes
1answer
34 views

Custom OpenSSL engine when running within Apache via mod_ssl

I modified my openssl.cnf to specify a custom engine for some operations. It works fine if I go through the openssl binary directly, but if I load libssl from another program it doesn't seem to use ...
2
votes
1answer
659 views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
2
votes
1answer
191 views

How to get binary representations of strings in Shell?

I'm using openssl dgst -sha1 -binary to get hash values of my strings in binary format. (I'm using -binary flag because my version of openssl adds "stdout" before each hash value on default output, ...
1
vote
0answers
87 views

NTP compilation failed - without ssl

I am trying to cross compile NTP ver 4.2.8 without SSL support. I gave --without-crypto while configuring, but still it was throwing following error: ../libntp/libntp.a(ntp_crypto_rnd.o): In function ...
1
vote
1answer
47 views

RHEL openssl conflicts

I am stuck installing PHP 5.5 (to support wordpress) on RHEL 6.3 (Santiago), I think the server was not set up correctly (contractor) and I have ended up with a copy openssl from ius as opposed to ...
1
vote
0answers
32 views

Apache2 'Server' header reports wrong openSSL version

Does anyone know where the Apache 'Server' header pulls the openSSL version from (file location/directory)? I am expecting openssl-1.0.1j but apache is reporting openssl-1.0.1g (system's openssl ...
0
votes
1answer
37 views

Error openSSL appears to lack for elliptic curve cryptography? What's that mean and how to resolve it?

I followed this step to compile Bitcoin code, but got an error. Could you please explain what the problem is and how can it be resolved? Error: [root@localhost bitcoin-0.10.0rc1]# bitcoind Error: ...
3
votes
1answer
564 views

How to generate just a key with openssl

I run this command to generate a CSR and a new key with openssl: openssl req -new -nodes -days 9000 -config /etc/ssl/openssl.cnf -out /etc/ssl/certs/mycompany.com.csr -keyout ...
0
votes
0answers
34 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
0
votes
1answer
710 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
1
vote
1answer
590 views

Updating OpenSSL on a SLES11 server

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and ...
1
vote
1answer
724 views

Updating openssl on debian squeeze

Can I replace my openssl 0.9.8o-4squeeze16 package with http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_1.0.1h-3_amd64.deb without any problems/concers? I did a apt-get update but I did ...
0
votes
1answer
103 views

Archlinux ARM Apache server fails to start

I am currently setting up an Apache web server on my Pi running on Archlinux ARM. After installing and making the first small configurations I have tested it and it works. Then I stop the server and ...
1
vote
1answer
27 views

Can OpenSSH 6.7 optionally not depend on OpenSSL?

It has been reported on Slashdot on 2014-04-30 that OpenSSH now has a compile-time option to not depend on OpenSSL. However, OpenSSH 6.7 release notes, released on 2014-10-06, do not make any mention ...
5
votes
3answers
9k views

Trust a self signed PEM certificate

I have set up a proxy server with SSL using a PEM certificate. Now, there is a couple of machines of mine that I would like to trust this certificate automatically (without the web browser ...
1
vote
0answers
13 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
0
votes
1answer
16 views

GCM encryption mode for Debian 7.6

Does an option exist for AES-GCM 256bit encryption for client connections with OpenVPN? I've tried to google around this question, but found no algorithm how to patch my openvpn/openssl. So my ...
2
votes
1answer
9k views

make fatal error: openssl/sha.h: No such file or directory

I'm trying to compile a program that, according to the documentation, requires the "OpenSSL library". I have OpenSSL installed, and it's still giving me the error openssl/sha.h: No such file or ...
1
vote
2answers
60 views

How does openssl decrypt a password

I'm learning about encryption and decryption on linux and php. So I have three questions about openssl and how it generates password hashes. 1- So say I generated a password with the linux command ...
2
votes
0answers
34 views

SMTP works via Mail client but not via openssl

I'm trying to troubleshoot an SMTP issue. My credentials work fine via the OS X Mail client (and in other areas), so the credentials are definitely good. However, when I try to submit them via: ...
0
votes
1answer
89 views

CentOS 7 VPN server

How do I set up a remote internet web server using CentOS 7 so that it is completely shielded by a VPN? Here is the use case: 1.) This means that ALL requests for ANY interaction with the web ...
1
vote
0answers
111 views

openssl and OCSP

I'm trying to check the revocation of certificates in a script but I'm getting the following error: unable to load certificate 140735258465104:error:0906D06C:PEM routines:PEM_read_bio:no start ...
1
vote
1answer
23 views

Confusion regarding generating self signed certificate for application portal developed using liferay

We have a Application Portal developed using Liferay bundled with tomcat. There are two application servers running liferay and we use httpd as a front-end which forwards requests to application ...
9
votes
3answers
23k views

How to encrypt messages/text with RSA? (using openssl?)

I'm Bob. I have Alice's public key. I want to send Alice an -> RSA <- encrypted message. How can I do it using the openssl command? The message is: Hi Alice! Please bring malacpörkölt for dinner! ...
0
votes
2answers
983 views

Redhat “httpd” start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
2
votes
2answers
5k views

FTP over SSL in AIX (UNIX)

Folks over at SO couldn't answer this, so I am posting over here. I need to do an FTP over SSL to a FileZilla Server running on a Windows server from an AIX Unix clien. I have the Host name of the ...
7
votes
4answers
2k views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create ...
2
votes
1answer
52 views

SSL certificate for a local apache server

I am currently experimenting with a local server running apache / owncloud. Eventually I want to make it available from the www, but I am not quite there yet... The server is named smallserv.lan, the ...
1
vote
0answers
146 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
3
votes
2answers
182 views

How to globally configure secure clients using OpenSSL on Oracle Linux 5/RHEL 5?

My workplace recently patched one of our servers to address the POODLE vulnerability. Since then older Oracle Linux 5 clients (based on RHEL 5) can no longer securely connect to the server with any ...
2
votes
1answer
65 views

update openssh and openssl on solaris

I got a nexenta system, I updated openssl to 1.0.1j, which I compiled from source code. I updated openssh to 6.7, from source code as well, and I get this: root@cteraportal:/root# openssl version ...
6
votes
3answers
14k views

How can I get TLSv1.2 support in Apache on RHEL6/CentOS/SL6?

I'd like to have TLSv1.2 support in Apache on my Scientific Linux 6 (RHEL6 rebuild) server. Is there some semi-supported pathway to getting this working? Preferably with minimal custom rebuilding. ...
3
votes
2answers
40 views

Need explanations about SSL issue and installation process

I am trying to install SSL on my server. First of all I wanted to purchase a certificate. They asked me to generate a CSR file. I created it and it resulted with two files: my.website.key ...
1
vote
0answers
26 views

OpenSSL 1.0.1e usage bug?

Environment $ cat /etc/*-release CentOS release 6.5 (Final) $ openssl version OpenSSL 1.0.1e-fips 11 Feb 2013 This works $ tr -dc A-Za-z0-9 </dev/random | head -c 24 > ${f_host_passphrase} ...
1
vote
2answers
489 views

How to check server for SSLv3 connection if there isn't any openssl package on it?

echo Q | openssl s_client -ssl3 -connect HOSTNAME:PORT 2>/dev/null | grep 'Cipher is' But how can I test for SSLv3 connection if there isn't any openssl installed on the machine? UPDATE: the ...
3
votes
1answer
1k views

Why openssl s_client verifies a cert against a mismatching CAfile?

I am trying to yield a certificate verification error with openssl s_client like this: $ openssl s_client -crlf -verify 9 \ -CAfile /etc/ssl/certs/TURKTRUST_Certificate_Services_Provider_Root_1.pem ...
1
vote
1answer
4k views

Disable SSLv3 In cURL?

I'm having a problem connecting to a website that is hosted with CloudFlare using cURL. When I try to connect to the website with HTTPS (using curl -v https://www.xxxxxx.com), it says: * About to ...
1
vote
2answers
2k views

OpenSSL 1.0.1j - “POODLE” vulnerability fix (upgrade) on RHEL 6.5

I've got a problem when I upgraded my OpenSSL on RHEL 6.5. The OpenSSL is missing the library libcrypto.so.10. Instead the openssl 1.0.1j created lib is libcrypto.so.1.0.0. I've made a soft link, but ...
4
votes
3answers
8k views

RHEL 6.4 and OpenSSL 1.0.1 - Dependency missing.. but it isn't?

I am trying to install phpMyAdmin, however I am getting an error about openssl libraries being missing. However, I have installed them using the ius repo; Error: Package: ...
0
votes
1answer
302 views

building php-5.3 on arch linux

I'm trying to build php-5.3 on arch linux using phpenv + php-build. The problem is bison is too new: $ phpenv install 5.3.29 [Info]: Loaded apc Plugin. [Info]: Loaded pyrus Plugin. [Info]: Loaded ...
1
vote
3answers
1k views

Installing PostgreSQL 9.0 on RHEL 6.4 (How to get Yum to Include a version of OpenSSL I built from source)

I receive the following errors from yum install postgresql90-server: Error: Package: postgresql90-9.0.15-1PGDG.rhel6.x86_64 (pgdg90) Requires: libssl.so.10(libssl.so.10)(64bit) Error: Package: ...
7
votes
2answers
2k views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
2
votes
3answers
1k views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
4
votes
3answers
4k views

Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 → 2.2.22 (recompile & reinstall) OpenSSL 1.0.1.c-1 These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
1
vote
1answer
96 views

Parse expirydate from openssl command

Was about to ask how to check the date of SSL certificates automatically but then figured it out, so below you can find my answer too.