Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

How to replace installed openssl and use my own openssl to build `make` script

I'm really new in Linuxverse, so please understand if I'm asking standard (or may a dumb) question. I've seen so many post about how to remove openssl, but mostly they told to not remove it because it'...
flix's user avatar
  • 137
0 votes
2 answers
14 views

OpenSSL: Create CAfile

I have a X.509 certificate mycert.pem and a private-key mykey.pem for it. Furthermore the certificate has a root-certificate and a intermediate-certificate to build a complete chain. I had to add both ...
chris01's user avatar
  • 583
0 votes
1 answer
22 views

What is a good way to perform a SHA256d hash (double SHA256) on an OpenBSD fresh install?

What is a good way to perform a SHA256d hash (double SHA256) on the default terminal of an network isolated OpenBSD fresh install? Here's what I'm doing: echo test > testfile cat testfile | openssl ...
Lee's user avatar
  • 497
0 votes
0 answers
44 views

Building httpd can't find Openssl

I am attempting to rebuild apache from source and am encountering an issue I have not previously had. I have built apache version 2.4.57 from source many times in the past and have had no issue during ...
user10709800's user avatar
0 votes
0 answers
17 views

dm-verity: development flag to allow changes

I have two partitions; on for the root file system and one for my application. I've set up dm-verity for the rootfs, but not for the appfs. Sometime I want to add something to the rootfs without ...
Bayou's user avatar
  • 175
0 votes
1 answer
24 views

Error executing openssl command from bash but works from command line

I deal a lot with SSL certificates, private keys, CSRs, etc. I have a number of small bash scripts that automate my tasks. One of these scripts generates a new private key and CSR for an SSL ...
Aleks G's user avatar
  • 193
3 votes
2 answers
95 views

How do I verify ssl / tls connection with openssl non-interactively (from a script)?

When I execute: openssl s_client -connect google.com:443 openssl s_client -connect government.ru:443 This gives me valuable output, but I would like openssl to close the connection and exit returning ...
John Smith's user avatar
0 votes
1 answer
49 views

openssl connect in a script

I'm using openssl s_client -connect to extract the dates from a cert. I want to integrate it into a bash script, the problem is that the command opens the connection to the server and waits for the ...
dejanualex's user avatar
0 votes
0 answers
59 views

SSH from OpenSSH 9 to OpenSSH 5 protocol 2 fails: “illegal argument”

I'm trying to connect from a VMware ESXi 8 machine to a VMware ESXi 5 machine to transfer all the virtual machines.  The problem is that ssh doesn't connect.  The old machine has OpenSSH 5 and the new ...
Miguel's user avatar
  • 109
1 vote
0 answers
119 views

Unable to SSH to a server from Jenkins using ED25519

RSA keys going to be decommissioned due to weak security and hence tried o generate a key using ED25519 type using the command ssh-keygen -t ed25519 -C “testkey” and generated the public private key. ...
Muthu Kumar's user avatar
0 votes
1 answer
49 views

Adding an account via SSH not working with openssl

I am trying to add a user account to my remote server (running on Ubuntu 22.04) via SSH using below script: #!/bin/bash protect="y" ssh -i ssh_key [email protected] <<END sudo deluser ...
hiddeneyes02's user avatar
0 votes
1 answer
30 views

ECDHE key exchange in OpenSSL going wrong (Outlook vs Cyrus imapd) - how to solve?

I am trying to connect Outlook 2019 to a Cyrus imapd server, using an SSL connection on port 993, and using ECDHE for key agreement. Whatever I do, this does not work although the imap server is set ...
Binarus's user avatar
  • 3,350
0 votes
1 answer
35 views

Should am I need a pysical Smart Card and its reader device to sign linux kernel module?

I build and test a linux kernel source (rolling-stable) for fun, these days, I would like to sign a kernel module with self-created key, then I got the engine PKCS#11 on OpenSSL is used to sign it. ...
PICOPress's user avatar
2 votes
2 answers
229 views

How to convert EC public key in PEM format to DER format using openssl

With a public key as PEM, how can this be converted to DER format using openssl? Please note that this is not a x509 certificate. Also this question is about EC (ECDSA) public keys not RSA and using ...
code2535's user avatar
1 vote
1 answer
198 views

How to use self signed certificate with curl

I've generated SSL certs using following commands: C=PL ST=Mazovia L=Warsaw O="PHP-HTTP" CN="192.168.56.10" openssl req -out ca.pem -new -x509 -subj "/C=$C/ST=$ST/L=$L/O=$O/...
sebastian_t's user avatar
2 votes
3 answers
314 views

Deploying private CA certs to debian devices

We have a private certificate authority (CA) which is only used on sites in our intranet. I can get the certificate easily: openssl s_client -showcerts -connect atlas.sim.local:8443 </dev/null 2>...
Stewart's user avatar
  • 13.7k
0 votes
0 answers
157 views

How to install Postfix 3.7.4 or newer (ex: 3.8.3) on AlmaLinux, Rocky, CentOS and other RedHat 9.2 derivatives

I'm on AlmaLinux 9.2 (Turquoise Kodkod) with the most recent Postfix version available being 3.5.9, and I’m facing an issue with Postfix and OpenSSL 3 (link) which was fixed on Postfix 3.7.4. I saw ...
Paulo Coghi's user avatar
0 votes
0 answers
122 views

OpenSSL encrypt and decrypt between RHEL version

I am currently using the below command to encrypt & decrypt in RHEL 6. But I have pool of servers which contains RHEL 6 & 8, so the encryption may happen on RHEL6 node but the decryption might ...
Ram's user avatar
  • 335
0 votes
1 answer
38 views

How can I convert my keys into 'der' format for 'burpsuite' use?

I generated my own CA keys as: openssl genrsa -out ca.key 2048 openssl req -x509 -new -nodes \ -key ca.key -subj "/C=GR/L=ATTICA" \ -days 1825 -out ca.crt How I can ...
Dimitrios Desyllas's user avatar
0 votes
1 answer
32 views

How to identify on console for a remote server what TLS it is providing on an HTTPS endpoint

I would like to find a way, to identify what type of TLS a remote HTTPS endpoint is providing, using only "standard" Linux command-line tools. I would like to know, what type of TLS the ...
PaulEdison's user avatar
0 votes
0 answers
565 views

Curl error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small

When I run a get request from Curl to a web service I get the error SSL3_CHECK_CERT_AND_ALGORITHM: dh key too small. Server is on CentOS 6.6 and web service is a Java application (OpenJDK 1.7) running ...
supmethods's user avatar
0 votes
0 answers
435 views

openssl3.1.1 version 'OPNESSL_3.2.0' Not found

I'm having an issue similar to here (Problems with openssl), but am not sure how to translate it to my Fedora install (Fedora 28, unfortunately, I can't upgrade ) Background: I'm wanted to install ...
GentlemanS's user avatar
0 votes
1 answer
97 views

SSL cert recognized by OpenSSL but not geventhttpclient

I have an instance of an NVIDIA Triton Inference Server. Then, there is the Python's client which uses geventhttp Python's package to perform the requests. This is all deployed as microservices, so in ...
bert's user avatar
  • 285
0 votes
1 answer
37 views

How should I modify the Qt5 source code if I want to add back SSLv3 support in the libqt5network5 module?

I am on an Intel x86_64 CPU architecture platform running a Debian Bullseye Linux distro. On that platform runs a custom application. This application is a 32-bit software running as a systemd service ...
Chris Haddad's user avatar
0 votes
2 answers
319 views

No rule to make target `scripts/extract-cert' when building Linux Kernel - Centos 7, devtoolset-9

I'm trying to debug my build environment for compiling a linux kernel with some patch sets. I installed devtoolset-9 in my CentOS 7 environment to satisfy the minimum gcc version requirement of the 5....
merlin's user avatar
  • 1
0 votes
1 answer
4k views

Is it possible to get OpenSSL 3.1 on Ubuntu 22.04

I'm setting up Ubuntu servers and have been using version 22.04 LTS as the base image. We run security scans on all our servers and this version of Ubuntu raises safety violations for having OpenSSL 3....
Ian's user avatar
  • 101
0 votes
1 answer
41 views

Firefox does not recognize the sustom SSL via my own CA whereas other browsers do?

I made a script that generates a CA file and a SSL signed by the CA: #/usr/bin/env bash # Absolute path to this script, e.g. /home/user/bin/foo.sh SCRIPT=$(readlink -f "${BASH_SOURCE}") # ...
Dimitrios Desyllas's user avatar
3 votes
1 answer
89 views

How to sign Shell output or STDOUT on the fly?

For reporting and documentation of compliance I like to timestamp and sign the output of certain commands. In example, if "Checking from terminal if any GUI is installed", I want to document ...
U880D's user avatar
  • 1,146
1 vote
1 answer
484 views

Openssl output to socket

I want to extract the signer from an S/MIME file inside a node app. I use (child_process.spawn(), which runs this command openssl smime -verify -CAfile c_root.pem -inform DER -signer /proc/self/fd/1 ...
eri's user avatar
  • 905
2 votes
1 answer
257 views

Creating PKCS#12 container from input from stdin

I want to create a PKCS#12 (a.k.a PFX) container for a private key and a certificate using openssl. My key and cert are contained in a single (unecnrypted) file: $ cat d.pem -----BEGIN CERTIFICATE-----...
mat's user avatar
  • 298
0 votes
0 answers
56 views

What is the correct way of redirecting / rewrtiting traffic from HTTP to HTTPS in Ubuntu / Apache2?

I'm learning about website hosting, and more and more YouTube sources recommend redirecting traffic from HTTP to HTTPS these days. I've found two ways this can be done, and I'd like to ask which one ...
michal roesler's user avatar
0 votes
0 answers
72 views

Curl command working on mobile but not in desktop

I think the problem is in my openssl library but i need to know wich is the problem to solve it. $ curl --version curl 7.81.0 (x86_64-pc-linux-gnu) libcurl/7.81.0 OpenSSL/3.0.2 zlib/1.2.11 brotli/1.0....
Victor Company's user avatar
0 votes
0 answers
887 views

OpenSSL's 's_client' command returns error code 61

I leased a private remote server. I have installed mattermost on that server and have configured it to use TLS. I created a ssl certificate/key pair and have configured the app to retrieve these files....
stackQA's user avatar
  • 103
0 votes
0 answers
55 views

Google Cloud does not like my Customer-supplied encryption key (CSEK)

I'm trying to encrypt a VM image with my own provided key. So I go to my Terminal emulator and do: $ openssl enc -aes256 -A -P enter aes-256-cbc encryption password: Verifying - ...
mariano-daniel's user avatar
0 votes
1 answer
1k views

Can't create a SSL certificate. [bash:server.key:Permission Denied] [duplicate]

i'm a student and i'm trying to make a SSL certificate because i'm following this guide: https://www.server-world.info/en/note?os=Fedora_27&p=httpd&f=13 I'm running in vbox Fedora Server 38 I ...
Wilson Lima's user avatar
1 vote
1 answer
2k views

Couldn't upgrade OpenSSL from 1.1.1f to 3.x

I am trying to upgrade my OpenSSL from 1.1.1f to >=3.0 (specifically >=3.0.8), so I simply try to get the latest version by doing this: sudo apt-get install openssl I am sure OpenSSL latest ...
znyi's user avatar
  • 11
0 votes
1 answer
1k views

why am I unable to view Certificate Information

I run these command to generate private and public keys : openssl genrsa -out keypair.pem 2048 openssl rsa -in keypair.pem -pubout -out publickey.crt and then I tried to view certicate information ...
akaliza's user avatar
  • 101
0 votes
0 answers
204 views

How to deploy root certificate in embedded Linux system?

I am working on an embedded Linux system (kernel-5.10.24). And there runs a web application, which connects to server through security protocol. So it links to libssl.so and libcrypto.so. When it is ...
wangt13's user avatar
  • 429
0 votes
0 answers
158 views

How can I display the maximum or all key lengths that openssl can use on my system for rsa or others with bash in shell?

My system: Linux 5.10.0-22-amd64|Debian 5.10.178-3|x86_64 GNU/Linux OpenSSL 1.1.1n 15 Mar 2022 With this i see all public-key-algorithms supported on my system openssl list -public-key-algorithms ...
Z0OM's user avatar
  • 3,159
3 votes
1 answer
2k views

Why curl running from a container complains about local issuer certificate when all the certificates are supposedly present?

Here is my docker command line: mark@L-R910LPKW:~$ docker run -v /etc/ssl:/etc/ssl -v /usr/local/share/ca-certificates:/usr/local/share/ca-certificates -v /usr/share/ca-certificates:/usr/share/ca-...
mark's user avatar
  • 387
0 votes
0 answers
162 views

How to generate /etc/ssl/certs/ca-certificates.crt for embedded Linux?

I am working on an embedded Linux (kernel-5.10.24), and there is a web application running in this system. The web application failed with /etc/ssl/certs/ca-certificates.crt no such file or directory. ...
wangt13's user avatar
  • 429
1 vote
1 answer
375 views

How to fix SSHD due to libssl.so.10 error?

SSH broke because of this, I can only access the server through VNC. journalctl shows that errors appeared a week ago and the process stopped. sshd[782]: /usr/sbin/sshd: error while loading shared ...
serguei's user avatar
  • 11
0 votes
1 answer
37 views

verifying network is or is not reaching my server through CentoS 7 Logs

I am pretty limited on actual server details and configurations I can share but will try my best to describe the issues and what I want to be able to do. the issue I am facing is as follows, I have ...
Balasarius's user avatar
0 votes
1 answer
1k views

Getting the issuer or subject hash from a server's SSL certificate

Is there a way to check the issuer of subject hash of some server's SSL certificate? I know that curl or wget search for the matching root certificate in /var/lib/ca-certificates/openssl or /etc/ssl/...
aviro's user avatar
  • 5,542
0 votes
0 answers
83 views

getting proper key setup for both version control and deployment

Struggling with OpenSSL 3 and deployment from M1 with 12.3 to Ubuntu 22.04 The application was not deploying because of Net::SSH::Authentication::KeyManagerError: the given identity is known, but the ...
Jerome's user avatar
  • 139
0 votes
1 answer
164 views

Produce a 64 character long password from a RSA private key

I need a reproducible way to generate the same password from an RSA private key and should not depend on the OpenSSL version and other thing that like a file format... Thanks! EDIT1: openssl dgst -...
Emeric Verschuur's user avatar
0 votes
1 answer
485 views

CA certificate misses CA basicConstraint

I am trying to create a self signed CA by doing the following: ipsec pki --issue --cacert selfCA.pem --cakey ecdsaKEY.pem --ca --dn "..." --flag ikeintermediate --flag serverAuth --outform ...
Idomeneas's user avatar
0 votes
1 answer
498 views

ipsec pki error (plugin-openssl-failed-to-load-openssl-plugin-create-not found and no plugin file available)

Im trying to establish a vpn connection with a self signed certificate between 2 virtual machines in my M1 mac and it seems that its impossible to create the keys and the certificate due to the titles ...
Idomeneas's user avatar
0 votes
0 answers
232 views

OpenSSL CLI - Including password in Command

Is it possible to encrypt a file without OpenSSL asking for a password? Can I include the Password in the command? $ openssl aes-256-cbc -in secrets.txt -out secrets.enc enter AES-256-CBC encryption ...
Garden's user avatar
  • 1
0 votes
1 answer
909 views

Shared library error when using rsync

I'm trying to transfer a folder from a backup location to my $HOME folder but I keep getting the error: rsync: error while loading shared libraries: libcrypto.so.3: cannot open shared object file: No ...
telometto's user avatar
  • 1,985

1
2 3 4 5
14