OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

learn more… | top users | synonyms

2
votes
1answer
1k views

RHEL 6.4: Openssl 1.0.0-27 libcrypto and libssl missing

I am trying to install znc IRC bouncer, which needs openssl libraries: Error: Package: znc-1.4-1.el6.x86_64 (epel) Requires: libcrypto.so.10(libcrypto.so.10)(64bit) Error: Package: ...
2
votes
1answer
534 views

How do I decrypt a message using openssl's CLI?

I have a message, I know the password and the cipher that was used to encrypt it, but I can't figure out how to ask openssl to decrypt it. I see the cipher in the output from the ciphers command, and ...
1
vote
1answer
547 views

Updating openssl on debian squeeze

Can I replace my openssl 0.9.8o-4squeeze16 package with http://ftp.de.debian.org/debian/pool/main/o/openssl/openssl_1.0.1h-3_amd64.deb without any problems/concers? I did a apt-get update but I did ...
1
vote
1answer
481 views

Updating OpenSSL on a SLES11 server

We are concerned with the OpenSSL vulnerabilities and are running a SLES11SP1 server. unfortunately, due to admin reasons, our support expired, and so we are looking at manually upgdating OpenSSL and ...
0
votes
1answer
663 views

Certificate extensions in generating and signing certificartes using openssl

References: SSL Configurations for Intermediate certificate How to add my own created certificate authority to system trusted repositories Why I can't find a page which tell me what's the kind of ...
2
votes
0answers
14 views

SMTP works via Mail client but not via openssl

I'm trying to troubleshoot an SMTP issue. My credentials work fine via the OS X Mail client (and in other areas), so the credentials are definitely good. However, when I try to submit them via: ...
2
votes
0answers
187 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
1
vote
0answers
37 views

openssl and OCSP

I'm trying to check the revocation of certificates in a script but I'm getting the following error: unable to load certificate 140735258465104:error:0906D06C:PEM routines:PEM_read_bio:no start ...
1
vote
0answers
108 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
1
vote
0answers
16 views

OpenSSL 1.0.1e usage bug?

Environment $ cat /etc/*-release CentOS release 6.5 (Final) $ openssl version OpenSSL 1.0.1e-fips 11 Feb 2013 This works $ tr -dc A-Za-z0-9 </dev/random | head -c 24 > ${f_host_passphrase} ...
1
vote
0answers
28 views

Get OpenSSL FIPS Module Version Number

Is there a way for a user to determine what version of the FIPS module was compiled into OpenSSL? When I say "as user", I mean is there some functionality buried in the command line interface to get ...
1
vote
0answers
36 views

libpam load pam modules at every connection

I want to reduce ssh connection time, by debugging sshd have found that libpam is loading all pam modules specified in /etc/pam.d/sshd file at every connection. How to configure/modifiy libpam such ...
1
vote
0answers
176 views

Implementation of eSTREAM ciphers available?

Is there a usable implementation of the eSTREAM stream cyphers available for Linux? I was thinking to use that for encrypting data stored on tape drives, using it with tar. Now, there are some basic ...
1
vote
0answers
358 views

Validating an OpenSSL Cipher List

Are there any tools that can validate an OpenSSL cipher list both syntactically and semantically? For example, ALL:!LOW:!SSLv2:!EXP:!aNULL is both syntactically and semantically valid cipher list. On ...
0
votes
0answers
69 views

Archlinux ARM Apache server fails to start

I am currently setting up an Apache web server on my Pi running on Archlinux ARM. After installing and making the first small configurations I have tested it and it works. Then I stop the server and ...
0
votes
0answers
128 views

Unable to install Crypt::SSLeay perl module on RHEL 5.7 (x86_64)

Here is the scenario, actually my RHEL 5.7 (x64_86) server don't have internet connection. but I want to install Crypt::SSLeay perl module on that server. So I downloaded it from CPAN & then ...
0
votes
0answers
237 views

How to add SSL with cURL URL using Ubuntu Terminal

While running a Twitter API from cURL in Ubuntu Terminal it asked me to use SSL. After searching for it, I tried: sudo curl -s https://localhost:8080/tweets/HLaddha sudo curl -k ...
0
votes
0answers
69 views

Why doesn't the SSL_CERT_FILE trick works on Ubuntu?

$ echo | openssl s_client -connect foo.com:443 2>&1 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ~/.foo.com.pem $ function S { export SSL_CERT_FILE=/home/user/.foo.com.pem; ...
0
votes
0answers
1k views

How to detect on Linux/AIX machines if they are vulnerable to the CVE-2014-0160?

I quickly wrote a script that outputs the openssl versions on AIX/Linux: #/bin/ksh # RUN THIS SCRIPT ON ANY AIX/LINUX TO DETECT IF THE SERVER IS VULNERABLE TO: # ...
0
votes
0answers
2k views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing ...