OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

5
votes
1answer
3k views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
3
votes
0answers
35 views
+50

kerberos preauth pkinit failed to initialize: No realms configured correctly for pkinit support

I have successfully installed Kerberos on debian wheezy and can perform service authentication (Apache, ssh) with Kerberos tickets from kinit. I would like to use certificates for kinit (pkinit) ...
3
votes
0answers
61 views

How to create large size encrypted file using openssl command

During the creation of an encrypted file in AIX, I received this error: $ openssl enc -aes-256-cbc -salt -in test.img -out test.img.enc test.img: Value too large to be stored in data type ...
2
votes
0answers
287 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
2
votes
0answers
141 views

SMTP works via Mail client but not via openssl

I'm trying to troubleshoot an SMTP issue. My credentials work fine via the OS X Mail client (and in other areas), so the credentials are definitely good. However, when I try to submit them via: ...
2
votes
0answers
88 views

Get OpenSSL FIPS Module Version Number

Is there a way for a user to determine what version of the FIPS module was compiled into OpenSSL? When I say "as user", I mean is there some functionality buried in the command line interface to get ...
2
votes
0answers
395 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
1
vote
0answers
30 views

openssl does not load engine from config file

I'm using openssl-1.0.1f. And I'm trying to load the pkcs11 engine in the config file, but it doesn't work. Here is my config: openssl_conf = openssl_def [openssl_def] engines = engine_section ...
1
vote
0answers
27 views

Openvpn authentication fail caused by wrong system date time

I have a remote linux device connected as an openvpn client to an openvpn server over TCP, with standard certificate authentication. Unfortunately this device has lost the current system Date Time, ...
1
vote
0answers
130 views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
1
vote
0answers
65 views

OpenSSL converting chars to UTF-8 literals

I'm running a simple PKI web application in Php that uses OpenSSL shell commands and stores information in a text database. I have to deal with non-ASCII input characters (eg. German) but when a new ...
1
vote
0answers
36 views

How do I get a certificate on a server from a certificate authority server using an OpenSSL request?

How do I get a successful request for a certificate from one Linux server to a Linux server that is a certificate authority? I'm using Centos 7 on both servers on the network. I'm using an OpenSSL ...
1
vote
0answers
360 views

Need Help Cross Compiling Openssl for MIPS

I've been trying to cross compile Ncat for the MIPS architecture (big endian), and I really need SSL support, so I first must compile OpenSSL. I downloaded the latest version from Github and ...
1
vote
0answers
52 views

Turning SSLEngine on causes ERR_CONNECTION_REFUSED

I am trying to configure my SSL certificate on a new installation of Ubuntu 15.10. I have installed the certificate files and the private key in the required directory: SSLCertificateFile ...
1
vote
0answers
83 views

large file encryption with ssh's RSA key pair?

I'd like to work out a way to encrypt arbitrarily large files using users' RSA key pairs they generated for SSH purposes. They have standard id_rsa and id_rsa.pub files, and a PEM version of the pub ...
1
vote
0answers
294 views

Python is unable to import OpenSSL

I created a virtual env for a matrix home server installation on a shared hoster. $ virtualenv -p python2.7 /home/tristank/venv/synapse $ source /home/tristank/venv/synapse/bin/activate I installed ...
1
vote
0answers
745 views

Upgrading openssl from 0.9.8j-0.50.1 to 1.0.2a on SLES11SP3

I need to upgrade OPENSSL from 0.9.8j-0.50.1 -> 1.0.2a on a server that is running sles11 sp3 for dynamically linking into my program. Steps followed for upgrade my build environment(sles11sp3): ...
1
vote
0answers
243 views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
1
vote
0answers
158 views

How does s_client turn ip6-localhost into 127.0.0.1?

When I use openssl s_client and ask it to connect to ip6-localhost it actually connects to 127.0.0.1 instead of ::1. This is what I see on both Ubuntu and Debian: $ strace -e connect openssl ...
1
vote
0answers
18 views

SSL (Hosted on LB) to be installed on the Downstream Apache Servers?

First, i have very basic knowledge on the SSL topic. Here is my setup. I have (1) of Public Facing Domain on LB and (2) of Internal Domains on each Web Servers. Like: ...
1
vote
0answers
346 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
1
vote
0answers
80 views

OpenSSL 1.0.1e usage bug?

Environment $ cat /etc/*-release CentOS release 6.5 (Final) $ openssl version OpenSSL 1.0.1e-fips 11 Feb 2013 This works $ tr -dc A-Za-z0-9 </dev/random | head -c 24 > ${f_host_passphrase} ...
1
vote
0answers
51 views

libpam load pam modules at every connection

I want to reduce ssh connection time, by debugging sshd have found that libpam is loading all pam modules specified in /etc/pam.d/sshd file at every connection. How to configure/modifiy libpam such ...
1
vote
0answers
199 views

Implementation of eSTREAM ciphers available?

Is there a usable implementation of the eSTREAM stream cyphers available for Linux? I was thinking to use that for encrypting data stored on tape drives, using it with tar. Now, there are some basic ...
0
votes
0answers
8 views

How to use openssl to verify and decrypt a SAML2 response

I wish to see all parameters that are actually passed by my identity provider during a SAML2 single sign on process. The response sent by the IdP is signed and encrypted, I think I have all what is ...
0
votes
0answers
10 views

running command in Mobax Terminal are there plugins that are needed

while read CTFlist; do #next we need to create ctfs padded with zeros as a variable ctfPadded=$(printf ${ctflist}00000000) #then call rc2 key as variable rc2Key="TemporaryRC2Key1" #next create a ...
0
votes
0answers
27 views

Installing Plone 5-on-RHEL 7-fails-unable-to-find-libssl-or-openssl-ssl-h

sudo ./install.sh --target=/home/admin/Plone --build-python zeo Error: Unable to find libssl or openssl/ssl.h. libssl and its development headers are required for Plone. Please install your ...
0
votes
0answers
37 views

OpenSSL installation is missing the X509_VERIFY_PARAM function

I am trying to install clamav 0.99.1 on RedHat 7.3. My OpenSSL version is 1.0.1. I am using the below command to install clamav: ./configure --prefix=/usr --with-user=defang --with-group=defang ...
0
votes
0answers
23 views

Nginx + CentOS 6 + OpenSSL Library - Update System Version

CentOS 6 I'm running Nginx which is built with an earlier version of OpenSSL: Note: my linux skills aren't so strong with this kinda stuff so any advise or direction would be greatly appreciated. ...
0
votes
0answers
31 views

Configuring Apache with Openssl and Enabling FIPS mode causing fingerpoint error

Can someone please help me I have recently upgraded my apache from 2.4.12 to 2.4.18 and I have also updated the openssl 1.01e to 1.02f. I followed the steps from here I ran this command ...
0
votes
0answers
27 views

Problem when installing FADE on Ubuntu

I'm trying to install FADE (Secure Overlay Cloud Storage with File Assured Deletion) but i have some problems when i try to install it. Here is the error. root@GRayFox:/home/ahmed/fade-0.2# make ...
0
votes
0answers
53 views

How do I install and configure NTP on CentOS 7 from source? (include/ntp_crypt.h errors)

I unpacked the .tar.gz file for the newest NTP. I installed the gcc compiler and libcap devel. I ran the ./configure command with various flags and options. I ran make check and found an error. The ...
0
votes
0answers
35 views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
0
votes
0answers
104 views

TLSv1.2 support in CentOS 5.8

Right now I can't access HTTPS site from PhantomJS headless WebKit browser because of TLSv1.2 In my CentOS 5.8 I have following OpenSSL 0.9.8e-fips-rhel5 01 Jul 2008 verison installed. I think I ...
0
votes
0answers
78 views

Openssl installation in RHEL 6.2

I had openssl 1.0.0-fips in my RHEL 6.2 box. I tried to upgrade it with openssl-1.0.2e. It got installed successfully. However when I try openssl version I still get the old version. Further I see ...
0
votes
0answers
239 views

Compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 returns libcrypto.so errors

I'm compiling OpenSSL 1.0.2d on Debian Lenny ARMv5 embedded system: detrayz:~/openssl-1.0.2d# uname -a Linux detrayz 2.6.24.4 #1 Fri Sep 17 10:29:48 KST 2010 armv5tejl GNU/Linux I'm following the ...
0
votes
0answers
11 views

Periodic problems with openssl.vim with correct password

For those who doesn't know, there is a great script for vim that allows to store encrypted by openssl passwords using vim to acceses and edit them. About a year ago I've started to observe problems: ...
0
votes
0answers
11 views

Certificate type

I am downloading certificate from given URL as: echo -n | openssl s_client -showcerts -connect url > certificate.ext Now, how do I find out, the saved certificate.ext file is actually of which ...
0
votes
0answers
88 views

fetchmail: Missing trust anchor certificate:

I try to setup fetchmail on mac for checkdomain.de and created a certificate .pem file in the cert directory of ssl by copying certificate from running this command: openssl s_client -connect ...
0
votes
0answers
57 views

yum version mismatch for openssl

Someone have any idea why yum info openssl version is 1.0.1e and openssl version is 1.0.2d?? [root@WEBPROXY Desktop]# yum info openssl Loaded plugins: fastestmirror, refresh-packagekit Loading mirror ...
0
votes
0answers
778 views

FIPS integrity test failed

I recently enabled the fips module in my CentOS 6 machine using this guide. During reboot, the system halted with this error: SELF TEST FAILED (/usr/lib64/hmaccalc/sha512hmac.hmac) dracut: FATAL: ...
0
votes
0answers
86 views

Openssl support for ruby not found in passenger installation on redhat 6

I have openssl 1.0.1e-42.el6 already installed. Also tried to compile openssl from ext/openssl directory which failed with below error ossl_pkey_ec.c:815: error: ‘EC_GROUP_new_curve_GF2m’ undeclared ...
0
votes
0answers
519 views

Create X509 certificate with v3 extensions using command line tools

I am using the following configuration file named root.conf: [req] default_bits = 2048 default_md = sha256 distinguished_name = req_dn prompt = no ...
0
votes
0answers
57 views

Backup server with tar, encrypt and directly transfer the result, AFTER BUFFERING IT

So I've been investigative how to make full backups with tar, and I found that tar is a good tool if the backup is to be made once, and if the server has enough disk space to handle the output file. ...
0
votes
0answers
854 views

open ssl client giving error routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

On connecting to my application (a ssl server) by using command openssl s_client -host 127.0.0.1 -port 5028 -cipher EXPORT -debug -state I am getting error like CONNECTED(00000003) ...
0
votes
0answers
181 views

Sign a soap message from a JKS dynamically using Python Unix

I am currently calling a webservice using Curl command from unix . I have a requirement that I have to dynamically message sign the soap request every time I make a call to the webservice using my ...
0
votes
0answers
738 views

Building cURL 7.40.0 and OpenSSL 1.0.2 from source: Headers and library doesn't match

I would like to ask for assistance, related to cURL and OpenSSL, both of them, built from sources. OS is Debian 7, latest version, minimal and clean install. Only installed packages: apt-get -y ...
0
votes
0answers
2k views

How to detect on Linux/AIX machines if they are vulnerable to the CVE-2014-0160?

I quickly wrote a script that outputs the openssl versions on AIX/Linux: #/bin/ksh # RUN THIS SCRIPT ON ANY AIX/LINUX TO DETECT IF THE SERVER IS VULNERABLE TO: # ...
0
votes
0answers
4k views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing ...
-1
votes
0answers
33 views

I busted my ssl.conf file and when I do a recovery I can't overwrite the file with new settings

So, I thought I would be super smart and figure out how to disable the older SSL v2 and v3 on the web server. Turns out I messed something up. So, I tried to open the file and then make the changes, ...