OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

14
votes
1answer
36k views

make fatal error: openssl/sha.h: No such file or directory

I'm trying to compile a program that, according to the documentation, requires the "OpenSSL library". I have OpenSSL installed, and it's still giving me the error openssl/sha.h: No such file or ...
1
vote
1answer
56 views

You have security/openssl installed but do not have DEFAULT_VERSIONS+=ssl=openssl set in your make.conf

On FreeBSD, ever since I installed openssl explicitly I have the following message when I install most ports that require openssl: /!\ WARNING /!\ You have security/openssl installed but do not have ...
0
votes
1answer
32 views

How to make openssl encrypt passwords like php via command line

I see this php script (encrypt.php) <?php function encrypt($pure_string, $encryption_key, $encryptionMethod = "AES-256-CBC") { $iv = "3571984260"; $encrypted_string = ...
1
vote
0answers
22 views

download file/backup from remote server to desktop without SSH or SCP?

Issue Background I was trying to install uTorrent on my PHP site and mid-process I was kicked out of SSH and the website went down. libssl.so.1.0.0 and libcrypto.so.1.0.0 were required for uTorrent ...
1
vote
1answer
19 views

Openssl p12 certificate storage extract individual certificates preserving names

I have a p12 storage of certificates, and there are a lot of certificates, they are related to a few different sites, so there are a lot of certs for one site. Im trying to extract them all in a way, ...
1
vote
3answers
50 views

How to encrypt a file with private key

I want to encrypt a file with a private key and decrypt it with a public key. A public key will be embedded in my app. So I want to have a guarantee that the file was created by me. How can I use gpg ...
0
votes
1answer
1k views

OpenSSL 1.0.2.a and Centos5.7

I have an old version of Centos (5.7) and I would like to enable TLS 1.2 due to Google Chrome warning about TLS 1.0 I tried to update with yum but I can see that no OpenSSL 1.x could be installed ...
2
votes
3answers
2k views

Multiple DH/ECDH parameters in Apache 2.4.7 configuration file

I'm running Apache 2.4.7 on an Ubuntu 14.04 ("Trusty") server. The Ubuntu-specific package identifier is "2.4.7-1ubuntu4.1". If one does not explicitly specify DH/ECDH parameters (see below), Apache ...
0
votes
2answers
31 views

mass file encryption not working with openssl

I have bunch of log files which I am trying to encrypt with public/private key using openssl and save to my NAS but it is failing. My log files are in the following path : /var/SYSLOGS/hosts/...
2
votes
1answer
235 views

Install OpenSSL from source [duplicate]

I installed OpenSSL from source by: wget https://www.openssl.org/source/openssl-1.0.2h.tar.gz tar -xvzf openssl-1.0.2h.tar.gz cd openssl-1.0.2h/ ./config --prefix=/usr/local/openssl --openssldir=/usr/...
3
votes
1answer
2k views

Checking if Apache requires SSL pass-phrase

I'm thinking about restarting a client's Apache server, but I'm reluctant to do so because I know he's currently running HTTPS and I don't want to get stuck with the server prompting me for the SSL ...
1
vote
1answer
2k views

Centos/RHEL 7: OpenSSL update not available

I have openssl 1.0.1e installed but its seems to be buggy based on this But when I list out the updates for the system it doesn't list out 1.0.1q as suggested on above link. Any idea how to install ...
0
votes
1answer
37 views

Where to find SSL private key on a CentOS server

I am running a server on CentOS, and I would like to decrypt and view the SSL traffic. However, I cannot locate any of the keys necessary to do this. My /etc/pki/CA/private folder is empty, and my /...
3
votes
0answers
60 views

two piped commands, each needs to read password from stdin

Is there a way to sensibly do this: scp user@host:/path/to/file /dev/tty | openssl [options] | less without creating a file, and without having to supply either password directly in arguments? The ...
1
vote
1answer
438 views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
1
vote
0answers
21 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, I have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: [https://public....
1
vote
3answers
360 views

Apache 2.4 SSL Config - Server rejects requests with HTTP 400 [closed]

I'm running into some trouble with my Apache 2.4 config. Accessing https://subdomain.my-domain.com always returns this http 400. Bad Request Your browser sent a request that this server could not ...
1
vote
1answer
413 views

how to find the server key [closed]

When I run openssl s_client -connect 0.0.0.0:8006 I get the Server certificate as: -----BEGIN CERTIFICATE----- MIICSTCCAbKgAwIBAgIESfnb7zANBgkqhkiG9w0BAQUFADBpMQswCQYDVQQGEwJJ …. From which ...
2
votes
2answers
2k views

Run Ubuntu 10.04 LTS with Apache2 SSL with passphrase

I am setting up a Virtual Machine with Ubuntu 10.04 Lucid Lynx Server. I have been reading the section on setting up Apache with an SSL certificate within the book : "Beginning Ubuntu LTS Server ...
0
votes
0answers
45 views

Unable to access CUPS /admin page. A TLS fatal alert has been received

We have several servers where the CUPS /admin interface is utilized. It was brought to my attention that several of them are no longer functional. The config is fairly simple and I cannot find a ...
2
votes
1answer
1k views

How to create gcov files for a project in a different dir?

I want to analyze code coverage datas. I want to create gcov files from OpenSSL (and from other projects), but I can only create them in the same directory of the project, and only for the files in ...
5
votes
1answer
3k views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
0
votes
1answer
1k views

Solaris 10 openssl version 1.0.1k but apache httpd not compiling,showing version too old-0.9.8a

I have compiled openssl from source on my Solaris machine to a newer location apart from the default one. When I set the newly compiled ssl path in PATH variable and LD_Library path and then compile ...
3
votes
2answers
59 views

Can't generate client-side certificate after becoming my own Certificate Authority

I became my own certificate authority after running through the tutorial at: https://jamielinux.com/docs/openssl-certificate-authority/ I created a root pair, created an intermediate pair, and ...
1
vote
1answer
140 views

openssl does not load engine from config file

I'm using openssl-1.0.1f. And I'm trying to load the pkcs11 engine in the config file, but it doesn't work. Here is my config: openssl_conf = openssl_def [openssl_def] engines = engine_section [...
18
votes
3answers
815 views

Untrusting an intermediate CA in Linux?

From this blog. Intermediate CAs are certificates signed by a root CA that can sign arbitrary certificates for any websites. They are just as powerful as root CAs, but there's no full list of ...
1
vote
0answers
17 views

MIME RSA encryption

i have this scheme how can i use session-key in MIME to encrypt the message? i used this command but i don't think it is correct openssl enc -e -des3 -salt -in MSg_sign.txt -out session.txt can ...
0
votes
1answer
22 views

Convert PEM formatted public key to DER

I have a public key which is ASN.1 DER formatted shown below : 0:d=0 hl=3 l= 181 cons: SEQUENCE 3:d=1 hl=3 l= 144 cons: SEQUENCE 6:d=2 hl=2 l= 0 prim: ...
0
votes
0answers
22 views

how to install openssl fips on unix

I am new to OpenSSL and trying to install openssl-fips module. Current version is openssl-1.0.1efips. Steps performed --- cd openssl-fips-2.0.12 ./config make sudo make install but it does not ...
0
votes
2answers
46 views

Verify SSLCertificateChainFile using OpenSSL

I encountered such issue on a server of a client as I did not know how to verify SSLCertificateChainFile among other certificates. I have a folder with a lot of SSL certificate keys and corresponding ...
1
vote
1answer
57 views

SSL related “undefined reference” on libssh2 and libcurl libs when compiling C on OpenSUSE

I been trying to compile a C software but I'm getting 'undefined reference' over SSL libraries I think. The libraries it mentions are there, actually I compiled them all again: zlib + openssl + ...
0
votes
1answer
44 views

How to Make self-signed SSL .key/.crt for Localhost?

I did with a password and with the following fields sudo openssl req -x509 -days 365 -newkey rsa:2048 -keyout /etc/ssl/apache.key \ -out /etc/ssl/apache.crt Fields Country: FI State: Pirkanmaa ...
1
vote
2answers
3k views

Updating OpenSSL on a SLES11 server

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and ...
1
vote
0answers
96 views

Unable to compile Linux Kernel 4.7-rc2

I was trying to compile Linux Kernel from source. I've compiled the kernel previously and never got any error. But this time I am facing an error. The error is CHK include/generated/asm-...
3
votes
1answer
55 views

Enabling export cipher suites in Apache/OpenSSL

I would like to enable export cipher suites in Apache for the purpose of testing out some old vulnerabilities. I haven't been successful thus far, and would greatly appreciate some assistance. My ...
0
votes
1answer
282 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
1answer
2k views

Does Apache 2.2.3 support TLSv1.1 and TLSv1.2?

How can I find out if Apache 2.2.3 supports TLSv1.1 and TLSv1.2? If possible how can I implement it?
0
votes
1answer
93 views

how to convert base 64 encoded public key (.pem) to bytearray?

I need to convert a Base 64 encoded public key file in .pem format to byte array using openssl. Need to convert public key from the below format: ----BEGIN PUBLIC KEY----- ...
4
votes
3answers
191 views

How to check for sslv2 from a remote server?

I have a server which I want to check if it supports sslv2. from a remote machine I do the following: openssl s_client -ssl2 -connect something.somethingcool.com:443 But this returns: unknown ...
2
votes
1answer
481 views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
0
votes
1answer
143 views

Can't update OpenSSL on Centos 6.4

I've got a Centos 6.4 system that I'm trying to patch OpenSSL for. Currently, yum reports "1.0.1e-16.el6_5.4" and openssl version shows "1.0.1e-fips". On my Ubuntu machines, I was able to update ...
0
votes
2answers
5k views

Redhat httpd start failed showing “ELinks: Connection refused”

I'm on RHEL 6.5 and Apache 2.2.15. And now applying a trusted SSL on the Server. After adding the respective SSL related Certs and files, my Apache is NOT starting up anymore. Here are some outputs: ...
1
vote
1answer
296 views

How can I solve “Your connection to 192.*.*.* is encrypted with obsolete cryptography”

I just set up my apache server with SSL installed on it, and everything is perfect except that when I open the page with https:// I get the following message when I click the padlock next to the ...
0
votes
1answer
268 views

How can I configure my server to avoid information leakage from the SERVER header of its HTTP response

I have a centos 7 server with apache v2.4.6 php 5.4.16 and OpenSSL 1.0.1e-fips installed. I was just doing a scan to it to see how secure my server is. I found out that my server is giving out ...
5
votes
1answer
242 views

Custom OpenSSL engine when running within Apache via mod_ssl

I modified my openssl.cnf to specify a custom engine for some operations. It works fine if I go through the openssl binary directly, but if I load libssl from another program it doesn't seem to use ...
5
votes
3answers
7k views

Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 → 2.2.22 (recompile & reinstall) OpenSSL 1.0.1.c-1 These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
7
votes
3answers
29k views

How can I get TLSv1.2 support in Apache on RHEL6/CentOS/SL6?

I'd like to have TLSv1.2 support in Apache on my Scientific Linux 6 (RHEL6 rebuild) server. Is there some semi-supported pathway to getting this working? Preferably with minimal custom rebuilding. ...
-1
votes
2answers
41 views

I cannnot find ssl.conf for TLS1.2 install

I have a dedicated server with CENTOS 6.7, Apache/2.4.20 php 7 and i want to enable TLS1.2 for paypal payments. From this I understand that i need to add extra lines in ssl.conf I looked for it in /...
1
vote
0answers
405 views

Python is unable to import OpenSSL

I created a virtual env for a matrix home server installation on a shared hoster. $ virtualenv -p python2.7 /home/tristank/venv/synapse $ source /home/tristank/venv/synapse/bin/activate I installed ...
3
votes
0answers
99 views

kerberos preauth pkinit failed to initialize: No realms configured correctly for pkinit support

I have successfully installed Kerberos on debian wheezy and can perform service authentication (Apache, ssh) with Kerberos tickets from kinit. I would like to use certificates for kinit (pkinit) ...