OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

0
votes
1answer
574 views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
-1
votes
2answers
24 views

How can I encrypt a large file with OpenSSL using RSA keys?

How can I encrypt a large file with a public key so that no one other than who has the private key be able to decrypt it? I don't want to use GPG!
0
votes
0answers
7 views

yum version mismatch for openssl

Someone have any idea why yum info openssl version is 1.0.1e and openssl version is 1.0.2d?? [root@WEBPROXY Desktop]# yum info openssl Loaded plugins: fastestmirror, refresh-packagekit Loading mirror ...
1
vote
2answers
3k views

yum and openssl disagree on currently installed version in Centos 6.5

I'm attempting to ensure that we are using the most recent openssl version on Centos 6.5, and yum reports that we are, but openssl continues to report that its version is an older one: ...
0
votes
3answers
32 views

How can I find where the Location of SSL key file is?

I inherited a RedHat server and I'm trying to find the SSL key file that was used to generate the self signed cert so I can make a CSR. From what poking around I've done, I can't find it in any of ...
2
votes
1answer
31 views

Openssl passing a binary pass phrase as a argument

This openssl command is working fine for me. openssl aes-128-ecb -d -in encrypted_base64.txt -K 4D1D75237C31E7732030C69F209F23154418373335E049C4F567C7B6D422ABD0 -base64 How would I do the ...
0
votes
1answer
728 views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
1
vote
1answer
23 views

How to configure Mutt for gmail securely

I've setup mutt on Ubuntu to work with my gmail. It works if I change the setting in gmail "Allow less secure apps" to ON but I'd rather connect securely. I have OpenSSL installed. When I do mutt -v I ...
1
vote
1answer
38 views

SSH Tunneling - Local and Remote Use Cases

I just learned the basics of SSH tunneling from googling. I saw this interesting question: How does reverse SSH tunneling work? But I still find it a bit confusing, more specifically on the ...
2
votes
1answer
4k views

RHEL 6.4: Openssl 1.0.0-27 libcrypto and libssl missing

I am trying to install znc IRC bouncer, which needs openssl libraries: Error: Package: znc-1.4-1.el6.x86_64 (epel) Requires: libcrypto.so.10(libcrypto.so.10)(64bit) Error: Package: ...
0
votes
1answer
35 views

How to build openssl with clang(rather than gcc) on a FreeBSD machine?

I have a 64 bit FreeBSD build machine. I need to add https support in my python3 application code. For that it is advised to build/compile python with openssl support. I do not need any gcc dependency ...
0
votes
2answers
235 views

Why does OpenSSL automatically send me Terminal mail?

I for some reason am getting messages from OpenSSL constantly (not literally constantly, but every hour or so) sent to my Terminal mail box saying: Message 1: Subject: Cron ...
3
votes
1answer
1k views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
2
votes
2answers
1k views

Installed root certificate authority doesn't appear to be working?

OS : archlinux Openssl dir : /etc/ssl I just installed a root certificates authority. The xxx.pem and yyy.0 file exists in the /etc/ssl/certs folder. Then I verify the vimeo.com:443 via bash: $ ...
0
votes
0answers
26 views

FIPS integrity test failed

I recently enabled the fips module in my CentOS 6 machine using this guide. During reboot, the system halted with this error: SELF TEST FAILED (/usr/lib64/hmaccalc/sha512hmac.hmac) dracut: FATAL: ...
2
votes
1answer
44 views

How to convert public key from PEM to DER format?

I'd like to convert an existing public key (generated using ssh-keygen) from PEM-format to DER-format I tried: openssl rsa -in ~/.ssh/id_rsa.pub -inform PEM -pubin -outform DER -out ...
2
votes
1answer
71 views

How to create gcov files for a project in a different dir?

I want to analyze code coverage datas. I want to create gcov files from OpenSSL (and from other projects), but I can only create them in the same directory of the project, and only for the files in ...
2
votes
1answer
564 views

openssl and OCSP

I'm trying to check the revocation of certificates in a script but I'm getting the following error: unable to load certificate 140735258465104:error:0906D06C:PEM routines:PEM_read_bio:no start ...
1
vote
1answer
31 views

How to run a specific test from OpenSSL test suite?

I want to measure the code coverage of different tests from OpenSSL test suite. I successfully measured the total coverage of the tests with this method: $ make clean $ export CC="gcc ...
0
votes
0answers
26 views

Openssl support for ruby not found in passenger installation on redhat 6

I have openssl 1.0.1e-42.el6 already installed. Also tried to compile openssl from ext/openssl directory which failed with below error ossl_pkey_ec.c:815: error: ‘EC_GROUP_new_curve_GF2m’ undeclared ...
1
vote
1answer
1k views

Updating OpenSSL on a SLES11 server

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and ...
3
votes
2answers
2k views

Verifying a SSL certificate's fingerprint?

I'm toying around with a Puppet agent and a Puppet master and I've noticed that the Puppet cert utility provides a fingerprint for my agent's public key as it has requested to be signed: $ puppet ...
1
vote
1answer
104 views

Cannot run ssh after upgrade to OpenSSL 1.0.1p

I upgrade OpenSSL 1.0.1p lsof | grep libssl The result firewalld 665 root mem REG 253,0 445544 805308545 /usr/lib64/libssl.so.1.0.1e gmain 665 1197 ...
17
votes
3answers
26k views

How do I convert a ssh-keygen public key into a format that openssl PEM_read_bio_RSA_PUBKEY() function will consume?

I'm having an issue generating a public key that the openssl PEM_read_bio_RSA_PUBKEY() function can consume. I keep getting errors. Obviously I cannot simply use the ASCII string in the ssh-keygen ...
0
votes
1answer
48 views

Installing libssl1.0.0 and OpenSSL 1.0 in Debian 6

I am newbie to OpenSSL. We are trying to connect to our server where its configuration requires the TLS1.1 protocol for connection. Debian 6 repos do not have direct backports for libssl1.0.0 and ...
1
vote
1answer
182 views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 ...
0
votes
1answer
46 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
1
vote
1answer
56 views

Package deb dependency problem

I am using CMake for my application named Agent. After configuring and generating binaryfiles, the application was compiled using the make command and Agent.exe was created in the build directory.Then ...
1
vote
2answers
29 views

Generate SMTP key with predetermined text [closed]

I want to generate a SMTP key with predetermined text openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 openssl genrsa -des3 -rand /etc/hosts -out smtpd.key 1024 << EOF text EOF Does ...
0
votes
2answers
236 views

CentOS 6.6: OpenSSL version

I have a CentOS 6.6 system. When I type into command line openssl version, the system gives me OpenSSL 1.0.1e-fips 11 Feb 2013. When I type yum update openssl, then yum says No Packages marked for ...
3
votes
2answers
54 views

How to generate a CSR for attaching SSL certificate to the site? [duplicate]

How can I generate a CSR for attaching SSL certificate to the site? In various articles about installing SSL certificates are described different ways of generating private key and CSR. That's like ...
4
votes
4answers
2k views

`openssl`: Subject Alternative Name

I wrote this bit of code to get the Common Name of the subject field in the SSL certificate for a given domain: $ echo -e "GET / HTTP/1.1\nEOT" | openssl s_client -connect google.com:443 2>&1 ...
0
votes
0answers
137 views

Create X509 certificate with v3 extensions using command line tools

I am using the following configuration file named root.conf: [req] default_bits = 2048 default_md = sha256 distinguished_name = req_dn prompt = no ...
0
votes
1answer
65 views

How to use output from openssl encryption routines in a pipe?

openssl manual claims that openssl enc uses standard output by default. But something is not right with the standard output when decrypting a file. Piping the output to any application such as grep, ...
1
vote
2answers
264 views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
0
votes
1answer
31 views

Openssl on files found with find unix command

Total noob with shell scripting here. I can find the files I'm looking for with something like this: find . -name "*.mp3"; What I want is something like this: find . -name "*.mp3" -exec openssl ...
5
votes
2answers
10k views

Get common name (CN) from SSL certificate?

I have a SSL CRT file in PEM format. Is there a way that I can extract the common name (CN) from the certificate from the command line?
1
vote
1answer
72 views

How to let openssl respond to http/s get directly from command line while listenning

How can I let the openssl s_server to reply to every http(s) request directly from the command line or the server it self (the server is using centOS)? is that possible? from the -help command for ...
1
vote
1answer
144 views

Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`

According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example). What is the ...
0
votes
0answers
39 views

Backup server with tar, encrypt and directly transfer the result, AFTER BUFFERING IT

So I've been investigative how to make full backups with tar, and I found that tar is a good tool if the backup is to be made once, and if the server has enough disk space to handle the output file. ...
1
vote
0answers
219 views

Upgrading openssl from 0.9.8j-0.50.1 to 1.0.2a on SLES11SP3

I need to upgrade OPENSSL from 0.9.8j-0.50.1 -> 1.0.2a on a server that is running sles11 sp3 for dynamically linking into my program. Steps followed for upgrade my build environment(sles11sp3): ...
0
votes
1answer
125 views

OpenSSL 1.0.2.a and Centos5.7

I have an old version of Centos (5.7) and I would like to enable TLS 1.2 due to Google Chrome warning about TLS 1.0 I tried to update with yum but I can see that no OpenSSL 1.x could be installed ...
81
votes
3answers
19k views

How do I recover from the Heartbleed bug in OpenSSL?

CVE-2014-0160 a.k.a. Heartbleed is a vulnerability in OpenSSL. It looks scary. How do I determine whether I am affected? If I'm affected, what do I need to do? Apparently upgrading isn't enough.
0
votes
2answers
64 views

SSL by IP or domain

The server that this is for will operate in a intranet environment... I have Apache working with SSL. I am using a self-signed SSL Certificate created using the steps outlined here: ...
13
votes
4answers
4k views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create ...
2
votes
2answers
1k views

How to display server's TLS certicicate details in terminal?

Having TLS certificate in local file, I can display its details using syntax like: openssl x509 -text -noout -in cert_filename Is there any way to display remote SMTP/POP3/HTTP server's TLS ...
11
votes
3answers
29k views

How to encrypt messages/text with RSA? (using openssl?)

I have Alice's public key. I want to send Alice an RSA encrypted message. How can I do it using the openssl command? The message is: Hi Alice! Please bring malacpörkölt for dinner!
2
votes
1answer
2k views

Updating openssl on debian squeeze

Can I replace my openssl 0.9.8o-4squeeze16 package with http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_1.0.1h-3_amd64.deb without any problems/concers? I did a apt-get update but I did ...
1
vote
0answers
127 views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
0
votes
2answers
219 views

Skype/Spotify Installation Error: Cannot Install libssl1.0.0:i386

OpenSSL has been giving me a lot of gripe lately with some pieces of software such as spotify and skype. I include both apps because I think it's the same issue causing both to stop installing, ...