Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0 votes
0 answers
29 views

How to verify the enabled Ciphers through OpenSSL in RHEL 8.5

Our Java Application is functioning on RHEL 8.5 OS platform with TLSv1.2 protocol. Here, to improve the security, We want to enable only a few ciphers and need to block others. CIPHERS TO BE ENABLED: ...
user avatar
  • 21
0 votes
1 answer
20 views

keyUsage command not found (for create certificat in non interactive mode)

I would like to create a certificate files for my website. In the past, I use a non interactive script for doing that and it work perfectly. Now, I want to use again this script but it stop in this ...
user avatar
  • 103
0 votes
1 answer
35 views

How to enable TLSv1.3 in Apache 2.4.35 with OpenSSL 1.1.1?

My java application was installed on RHEL 8.5 OS Platform which has OpenSSL version 1.1.1. And the application was compiled on RHEL 5.6 OS platform where the OpenSSL version was 0.9.8. Also, the ...
user avatar
  • 21
1 vote
1 answer
18 views

SSL: SAN not populated

I'm trying to create my self-signed certificate: CA private key creation: openssl genrsa -out ca.key 2048 CA certificate creation (see ca.cnf's content bellow): openssl req -x509 -new -key ca.key -...
user avatar
  • 275
0 votes
0 answers
17 views

Oracle Linux 7.9 - SSL Handshake failure

I ran into a weird issue involving 2 Oracle Linux 7.9 machines running on 2 different OCI (Oracle Cloud Infrastructure) tenancies. The source and destination server are in different networks and have ...
user avatar
2 votes
1 answer
34 views

Adding custom field to the subject line in a opensssl X509 certificate via command line

I am attempting to generate a CSR for a certificate and wish to include a unique id as part of the certificate subject line. this information shall be used by the TLS client for some purpose after the ...
user avatar
  • 155
1 vote
0 answers
25 views

OpenSSL, OCSP & IPv6

For the majority of OpenSSL commands, it is possible to force the use of IPv6. E.g.: openssl s_client -6 I did not find any similar option for ocsp. Did I miss something, is it just not implemented?
user avatar
  • 9,316
1 vote
2 answers
265 views

Upgrading OpenSSL to version 3.0.2 from source

In light of the current security issues with openssl 1.1.1x we had to upgade our (Ubuntu) systems from source, as apt only showed that the latest openssl (1.1.1f) was the newest UPDATE CVE-2022-0778 ...
user avatar
3 votes
2 answers
738 views

Using `openssl` to display all certificates of a PEM file

I can use the following command to display the certificate in a PEM file: openssl x509 -in cert.pem -noout -text But it will only display the information of the first certificate. A PEM file may also ...
user avatar
0 votes
0 answers
58 views

wget: can't execute 'ssl_helper': No such file or directory

I tried to download python in my development board but failed. The internet should worked(testing with ping command). This development board only have base linux environment, which means only have ...
user avatar
0 votes
0 answers
12 views

Why did the final command to import the cert into the java keystore work?

Yesterday I had a bit of an adventure when we found out that there is a certificate that did not get updated somewhere. Turned out that besides the certs in the application and on the load balancers, ...
user avatar
0 votes
0 answers
26 views

Correct symbolic link to load ssl module

I'm trying to replicate a server configuration for an old system, which uses old apache and php versions, specifically apache 2.2.4, in order to compile this version of apache, I had to install ...
user avatar
0 votes
0 answers
80 views

How to add trusted certificates to openssl on LFS

I have an LFS system (11.0) with openssl. Whenever I use wget, I get an error that the certificate is not trusted. Where do I get and put trusted certificates?
user avatar
0 votes
1 answer
51 views

Linux From Scratch 11 can not verify any SSL certificates

I have built an LFS 11.0 system and installed wget from the BLFS book. I also have openssl and gnutls installed, but whenever do wget for a site with ssl, it says it can't verify the cert. It does ...
user avatar
0 votes
1 answer
35 views

openssl speed: any way to test only one curve in ECDSA?

I have been testing ECDSA speed with openssl speed ecdsa It took more than 7 minutes to report 22 curves. However, in most cases I only care about NIST P-256 (obviously), so it’s a waste of time for ...
user avatar
  • 1,073
0 votes
1 answer
296 views

openssl verify - how to verify a single combined certificate bundle file

I maintain/enhance a product that uses a browser-based admin interface. We're late to the party and are only now looking to support HTTPS between browser and our backend (Apache httpd in front of ...
user avatar
1 vote
0 answers
61 views

Why wasn't curl able to connect to bit.ly?

I was trying to install Hyperledger Fabric and the sample code and examples they have, following the instructions on their page. However, when I tried to execute the following command: curl -sSL https:...
user avatar
  • 111
2 votes
0 answers
108 views

nginx: SSL (default) endpoint with multiple certificates

I'm using nginx as SSL terminated TCP endpoint for multiple domains (let's say 100). There's no need to treat incoming connections differently (they all get proxy'ed to the same backend), however for ...
user avatar
  • 21
-2 votes
2 answers
222 views

Error connecting to an FTPS server using openssl s_client

I'm running this: sudo openssl s_client -connect user:passwd@192.168.1.1:21 -CAfile demoCA/cacert.pem and I get the following error: s_client: -connect argument or target parameter malformed or ...
user avatar
  • 9
0 votes
1 answer
117 views

Is there some kind of hack that I can do to upgrade my Apache openssl from 0.9.8 to 1.1.1 ? Perhaps implement / recompile my own mod_ssl.so module?

I'm in desperate need for help. I've purchased a SSL certificate but my Apache server is running an old version of OpenSSL. Unfortunately I cannot re-install or re-compile Apache. It was installed ...
user avatar
1 vote
1 answer
2k views

How to Convert .CER certificate to .CRT

I tried to to Convert Fiddler.CER certificate to .CRT format: $ openssl x509 -in FiddlerRoot.cer -out FiddlerRoot.crt unable to load certificate 139962232211264:error:0909006C:PEM routines:get_name:no ...
user avatar
  • 485
0 votes
0 answers
45 views

update OpenSSL from source fails during make command

In the process of installing OpenSSL 1.1.1l on MacOS X 10.9.5 ./config make sudo make install the process fails when running make with the following message. crypto/rand/rand_unix.c:38:11: fatal ...
user avatar
  • 123
0 votes
0 answers
63 views

OpenSSL Library issues

Any tasks I attempt to perform on my Ubuntu Server 18.04 machine which involve SSL negotiation fail with various errors. For example: # speedtest-cli Retrieving speedtest.net configuration... Cannot ...
user avatar
1 vote
2 answers
74 views

Why does openssl create different hashes for the same string, and how does linux accept the different hashes when switching users?

Background As an experiment, I was adding new users (as the root user) by manually creating entries into /etc/passwd. To hash the passwords I was using openssl, in particular OpenSSL 1.1.1g but the ...
user avatar
1 vote
0 answers
13 views

verify live image in dracut

I have enabled EFI on the target host, enabled secure boot with my own PlatformKey, enabled ipxe bootstrap image where imgverify is used for checking the signature of the initrd. Now I have the ...
user avatar
  • 11
1 vote
0 answers
1k views

version 'libcrypto.so.10' not found

I am trying to run an executable that makes use of the libcrypto and libsll libraries. When I run the executable I get the following error PROGRAM: error while loading shared libraries: libcrypto.so....
user avatar
  • 11
0 votes
0 answers
32 views

openssl certificate error for WinRM connection

I have on Windows server certificate which is valid and active and WinRM listener is active as well on port 5986 (telnet works) for WinRM connection that needs to be established from the Linux server. ...
user avatar
  • 178
0 votes
0 answers
10 views

after update to openssh to 7.9p1 and openssl to 1.1.1l scripts executed from crontab with OpenSSH_4.3p2, OpenSSL 0.9.8e

after update to openssh to 7.9p1 and openssl to 1.1.1l script executed from crontab with OpenSSH_4.3p2, OpenSSL 0.9.8e. When same script executed manually runs with current version. How this issue ...
user avatar
  • 1
0 votes
0 answers
288 views

Configure vsftpd for specsific Cipher Suites and TLS version

There is a device that I do IoT development needs to connect FTP server to download a file. I'm using vsftpd as an FTP server. The device that I'm using has some limitations. It supports TLS 1.2 and ...
user avatar
  • 101
0 votes
0 answers
48 views

openssl passwd password only works briefly

I am having a strange issue setting up linux VM instances. Please forgive me if this is basic, I am not a linux systems programmer (usually). I am trying to script the launching of 20+ linux ...
user avatar
1 vote
0 answers
328 views

Debian 11, OpenSSL 1.1.1k, adding and validating self-signed certificate does not work

I'm following this instruction to install self-signed certificate. Specifically: create localhost.conf file with the following content: [req] default_bits = 2048 default_keyfile = localhost....
user avatar
2 votes
1 answer
220 views

What exactly is the Openssl -md flag used for?

I was just playing around with openssl for decrypting some files. The command I ended up using looks like so (found it elsewhere): openssl enc -d -aes-256-cbc -md sha256 -iv 0 -in in.enc -out out.data ...
user avatar
  • 127
0 votes
0 answers
152 views

Decrypting DES CBC and ECB error: Bad Magic Number

I am trying to encrypt and decrypt a BMP file using CBC and ECB with the following commands provided to me: openssl enc -des-cbc -in car.bmp -out car_enc_cbc.bmp -nosalt openssl enc -des-ecb -in car....
user avatar
0 votes
1 answer
80 views

Extract ssh key algorithm

Is there a command to extract information about the algorithm that is used (RSA, ECDSA, 3DES ...) for SSH keys, regardless of the format (pem, der etc)? I looked into openssl, but I could not find ...
user avatar
  • 83
0 votes
0 answers
60 views

Get the right OPENSSL_ia32cap value for openssl 3.0.0 on old non-Intel/AMD x86 devices?

We are using Alpine Linux x86 for a project where some of the computers the customer needs this to run have old x86 processors. Initial testing with v3.14 showed that we could use Alpine Linux with ...
user avatar
0 votes
1 answer
81 views

Properly compile OpenDKIM on Alpine

Background Hello, OpenDKIM is available on the official apk repository, but does not include important configuration flags I need such as --with-odbx and --with-sql-backend. I was able to compile it ...
user avatar
  • 123
2 votes
1 answer
963 views

Unable to get local issuer certificate (but my trusted CA-certificate store seems OK)

This has kept me busy for a good number of hours. I have read a good deal other articles and Stackexchange-questions, and tried other things, but no positive result so far. Running Ubuntu20/Nginx/...
user avatar
0 votes
0 answers
200 views

Compiling curl with http3 - stuck on step with ngtcp2

I'm trying to compile curl with the experimental http3/quic stack. I've read and followed cookbook examples in a couple of places (most specifically here(https://github.com/curl/curl/blob/master/docs/...
user avatar
0 votes
2 answers
829 views

Could not get nonce, let's try again when using acme

When I am using this command to generate a certificate on CentOS 7.6: acme.sh --issue --dns dns_cf -d poemhub.top -d *.poemhub.top -k ec-256 shows this error: [Sun Jul 11 23:09:28 CST 2021] Using CA:...
user avatar
  • 351
0 votes
0 answers
287 views

why could not access stackoverflow in terminal but works fine in browser

When I using this command in my terminal,shows this error: [dolphin@MiWiFi-R4CM-srv]~/Documents/GitHub/BlackHole% curl https://stackoverflow.com/ curl: (35) OpenSSL SSL_connect: Connection reset by ...
user avatar
  • 351
0 votes
1 answer
342 views

PAM unable to dlopen(sensepam.so): /lib/security/sensepam.so: undefined symbol: OPENSSL_init_crypto

I'm write a linux pam authentication module with c programming under ubuntu.My idea is when login input username and password that compare with web server saved username and password, if they are the ...
user avatar
  • 3
0 votes
1 answer
277 views

openssl: force no default CA certificates, to verify private signed certificate

I would like to verify that my web-server is configured correctly with my self signed certificate. The web-server also has some regular purchased CA signed certificates. The challenge I have is that I ...
user avatar
2 votes
1 answer
41 views

how to access to raw cert chain of an SSL server?

I know how to get the cert chain presented by a server with openssl s_client -showcerts -connect server.domain:portnum <<<'' But, what openssl prints is the "reconstructed" cert ...
user avatar
  • 233
1 vote
0 answers
148 views

AWS libcrypto resolve messages seen when using a boto3 library, apparently after an update

I'm using the s4cmd package in Python which in turn uses boto3 to communicate with a (non Amazon) S3 service. I've started seeing these warning messages on stderr. I believe this happened after an ...
user avatar
  • 1,090
0 votes
0 answers
61 views

GCM, OFB,OFC and XTS support by openssl devcrypto engine

When I run the following command gives me list of ciphers but not all. And its obvious if we try to use AES-128-GCM for examples which is not listed here would use the OpenSSL inbuilt algorithm and ...
user avatar
  • 1
0 votes
0 answers
70 views

Certificate - Subject Alternative Name missing - Apache Reverse Proxy

I deployed Apache Reverse Proxy so that our Cyber team can access the SolarWinds. Cyber team will access the reverse Proxy server and Backend Server will be SolarWinds, I can login and see the ...
user avatar
  • 3,834
0 votes
1 answer
1k views

Does my system accept the new let's encrypt root certificate?

Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
user avatar
  • 231
0 votes
1 answer
42 views

Help building older version (<= 7.1p2) of OpenSSH Portable (< on Linux or any other Distro)

I am working on creating my own PoC of CVE 2016-1907 along with several other OpenSSH involved CVE's for Ethical Hacking / Bug Bounties. Currently, I have found through Nmap servers running ...
user avatar
  • 101
2 votes
0 answers
78 views

How to determine the cipher used from a binary blob

A client of mine uses a ReSI to manage remote control. I have never heard of ReSI and apperently it runs only with a windows client. The configuration file (that we've got form the client) has an ...
user avatar
  • 193
0 votes
0 answers
136 views

ssh to remote server is not working

when app user tried to connect remote server via cmd ssh <remote server dns>, it is failing with error:Couldn't obtain random bytes (error 0x2d092087) But other local users are able to connect ...
user avatar

1
2 3 4 5
13