Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0
votes
0answers
12 views

Why do I get `OpenSSL support => disabled` even after uncommenting `extension=openssl` in php.ini?

If I execute php -i | grep "openssl" then I get OpenSSL support => disabled (install ext/openssl) even though I uncommented the line extension=openssl in the loaded configuration file (...
0
votes
0answers
15 views

libcurl with ca_cert + private_key + cert_chain : working with OPENSSL but not with NSS

I'm writing an HTTP class (in C++) that abstracts the underlying implementation, and I want to be able to deal with a server using strong authentication. My implementation uses libcurl. The user of my ...
0
votes
0answers
15 views

ssh-keygen : generate public key from private key? [duplicate]

I got a pub/pri key pair generated using ssh-keygen. ssh-keygen -t rsa -b 2048 Now say, I lost the public key but have the private key. So I want to generate the public key using private key, which I ...
0
votes
1answer
13 views

How to do HmacSHA256 using openSSL from terminal?

I need to perform the following Java snippet using OpenSSL from the command line: private byte[] hmacSha256(byte[] key, byte[] payload) throws GeneralSecurityException { Mac mac = Mac....
1
vote
1answer
26 views

Unable to decrypt a file with the public signature

I got this signature openssl verify cert.pem cert.pem: C = US, O = Apple Inc., OU = Apple Certification Authority, CN = Apple Root CA error 18 at 0 depth lookup:self signed certificate OK Looks good. ...
0
votes
0answers
18 views

Handshake Failure when cloning a git repository which requires a certificate

The Problem I have been having issues connecting to a Atlassian Stash which requires a certificate issued by my company. When I connect using Firefox (which has the certificate) it will allow me to go ...
1
vote
1answer
62 views

OpenBSD 6.7 Wireguard instructions fail

Wireguard setup instructions don't work for me on my OpenBSD 6.7 machine: $ uname -a OpenBSD foobar 6.7 GENERIC.MP#3 amd64 $ sysctl kern.version kern.version=OpenBSD 6.7 (GENERIC.MP) #3: Thu Jul 9 07:...
-1
votes
0answers
19 views

Oracle VirtualBox SSL handshake failed

I encountered an issue using midori to browse internet on VirtualBox linux environment. I could access the search result page using google or bing, but I cannot open the exact page. For example, I can ...
2
votes
1answer
83 views

Cannot decrypt files on a Mac using openssl

This is the command I used to encrypt the files on my Mac around 2017. I don't know if my Mac was running High Sierra at the time or not, because I am usually late to the party when it comes to ...
0
votes
0answers
18 views

How to generate a self signed certificate from openssl having the SPIFFE URI

I have a requirement of generating a SPIFFY Cert from the openssl similar to this here Local SSL Certificates in Chrom(e/ium) 63 can any one suggest on what need to be added to generate the spiffe uri ...
0
votes
1answer
101 views

SQL Server Connection Failed with Linux Mint + SQL Server 2008 R2 using any client

I am trying to connect to my SQL Server 2008 R2 with SP4 database, however, I got this error and I have tried some solutions that I found here, but none works for me. PS. I do not know exactly how to ...
-1
votes
1answer
135 views

How to downgrade OpenSSL from 1.1.1 to 1.0.2? Debian 10

I need 1.0.2 version of libssl, does somebody know how to downgrade from the newest 1.1.1 or download directly that version?
0
votes
0answers
25 views

Self signed SSL in Zeroshell

I have been trying to update the expired SSL certificate in Zeroshell. However, updating manually using Zeroshell script resulted in the following error # bash /root/kerbynet.cgi/scripts/...
0
votes
1answer
31 views

How do I verify the certificate of a specific computer when the DNS gives me one of many IP addresses?

I have a cloud setup with 6 front end computers using Apache. I installed a new SSL certificate. Now I want to verify that all the machines have the certificate. The problem is if I just use https://...
-1
votes
1answer
19 views

Does the error mean this file was not created using OpenSSL? If not, how do I figure out what encrypted this file?

When running the below command, I received this error: OpenSSL> rsautl -decrypt -in binarytext -out file.txt -inkey file2.txt unable to load Private Key 7324:error:0909006C:PEM routines:get_name:no ...
0
votes
0answers
16 views

Transmission 3.00 configure: error: OpenSSL support requested, but library not found

On Linux Mint 20 Cinnamon, I would like to know, why installing all listed required packages on Transmission official GitHub page did not exactly work. I can understand there was still something ...
2
votes
1answer
31 views

Trust a x509 certificate that is already trusted on another host

I have two hosts, one with Debian Buster and one with CentOS 7. I'd like to connect to an SMTP server over SSL from both of them. However, I can only do it from CentOS: CentOS: $ openssl s_client -...
0
votes
1answer
38 views

davmail: can only connect with openssl to localhost

I've read a number of articles on setting up davmail, and followed https://www.digitalocean.com/community/tutorials/how-to-setup-davmail-on-centos-6#basic-configuration to enable it on my CentOS ...
0
votes
0answers
33 views

How to use openssl shake256 hash string into a specified length hash-string?

How to use openssl shake256 hash string to a specified length hash-string? I use the following command to generate a shake256 hash string with the default length in Linux: echo -n 28713 | openssl ...
0
votes
0answers
20 views

How to download certificate from LDAPS (not LDAP) using Linux Utilities?

I tried following in linux: [wildfly@alq-esb-app02 log]$ echo -n | openssl s_client -connect cdc201.cop.copcommon.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapserver.pem ...
1
vote
2answers
17 views

“Certificate authority” messages are not being recorded in /var/log/messages

I am running an openssl server on my CentOS device. I am using an expired certificate and expect to see a "Certificate authority error" msg in /var/log/messages, but there is no ...
0
votes
0answers
23 views

Rocket chat enable ssl in apache

I have installed rocket chat on docker - on Debian 9 OS. I am unable to enable https for the same. I can access it using fqdn - http://chat.xyz.com:3003 I have generated ssl certificates using certbot....
2
votes
1answer
30 views

Renew Self-Signed Certificate from an Existing Private Key and CSR

I have this files generated for a Postgres instance -rw-r--r-- 1 root root 2733 Jun 8 20:37 server-cert.pem -rw-r--r-- 1 root root 3322 Jun 8 20:37 server.csr -rw------- 1 root root 1704 Jun 8 ...
0
votes
1answer
47 views

Why does exim use openssl from system instead of compiled version?

I try to upgrade from exim 4.84 to exim 4.94 My Local/Makefile for exim contains this: SUPPORT_TLS=yes TLS_LIBS=-L/MYPATH/lib/ -lssl -lcrypto -ldl TLS_INCLUDE=-I/MYPATH/include/openssl/ USE_OPENSSL=...
1
vote
1answer
32 views

Storing in a file with or without quiet option in “openssl s_client”

I was playing an online capture the flag game where I was doing openssl to a server which was returning a private key to ssh into another server. This is the command I ran : openssl s_client -connect ...
-1
votes
1answer
65 views

gmake: *** [Makefile:228: ../game] Error 1

I am triying to compile on FreeBsd 12.1 .. and game and database source from Metin2 game . I am using gcc+6.5 and gnu gmake -j20 comand Like all the files are getting compiled but in the last ...
0
votes
1answer
51 views

How to disable all the SSLv2 and SSLv3 SSL protocols in RHEL?

I have edited the following line in the /etc/httpd/conf.d/ssl.conf configuation and restarted the service. SSLProtocol All -SSLv2 -SSLv3 But when I run the following it still shows that server is ...
0
votes
0answers
17 views

Why isn't Python recognizing my upgraded version of OpenSSL?

I'm trying to install Python 3.7 on CentOS 7 and upgrade the SSL package Python uses. I upgraded openssl and have this version ... (venv) [rails@server Python-3.7.0]$ openssl version -a OpenSSL 1.1....
0
votes
0answers
17 views

Verifying a self signed openssl signature

I have a self signed openssl certificate on my embedded device, only this embeded device has access to the private key which signed the certificate and the certificate is as follows : Certificate: ...
0
votes
0answers
33 views

How to edit default binaries executed by which

Our server is running on an old version of Debian 7.10 (Wheezy) and we need to renew SSL certificates for a specific domain. Our version of OpenSSL is super old, but it's the last one for our version ...
1
vote
1answer
164 views

How do I generate the certificates for EAP-TLS Wi-Fi?

I want to connect a Linux machine to WPA2 Enterprise Wi-Fi (that I manage). The certificates I created with OpenSSL work well with Android and iOS devices, but I can't figure out what types of ...
0
votes
0answers
174 views

Error using openssl with socat – SSL routines:ssl3_get_record:wrong version number

I'm trying to set up a secure connection between localhost and remote server using socat. First of all, I generated keys and self-signed certificates on remote server (but also tried on localhost): ...
1
vote
1answer
97 views

How do I find what's wrong with the certificate used for EAP-TLS?

I'm trying to connect Raspberry Pi to a EAP-TLS Wi-Fi access point. The connection fails: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 ...
0
votes
1answer
34 views

How to calculate the checksum of a file's name?

I tried with openssl as it is very fast: openssl sha1 "$(basename "very_big_image.png")" But this just substitutes the actual file for check summing.
2
votes
1answer
131 views

Reading configuration from an openssl config file

I'm struggling to find hint or solution for reading openssl config values in a shell script. Let me provide you a bit more details. I have an openssl.conf file with the following simplified content: ...
0
votes
0answers
71 views

libcurl4 crash while curl_easy_perform on Debian 10

libcurl4 (7.64.0-4+deb10u1) is installed on my Debian 10 system. I have a C++ project which I'm trying to run. I'm using CURL to GET response from a URL. As soon as I start my application, it crashes ...
1
vote
0answers
385 views

Impossible to start Apache service due to SSL library error

I am trying to configure Apache in order to accept HTTPS requests. Following some tutorials found online, I generated the following certificates: my-ca.key (CA private key) my-ca.crt (CA certificate) ...
0
votes
0answers
89 views

Could not add root certificate to ssl context error with GRPC on Ubtunu 18.04.4 LTS

I'm trying to run a application that uses SSL for license verification. I get the following error and the application does not progress any further [license] License is for an online pool. [license] ...
0
votes
1answer
104 views

Installing Python 3.7 from source with custom openssl installation: test_ssl failed [closed]

To be able to install Python from source without root permission on a Ubuntu server, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1....
0
votes
1answer
227 views

openssl: local installation caused certificate issue

To install Python from source without root permission, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1.1.1e.tar.gz tar -xzvf openssl-...
0
votes
0answers
95 views

error loading CA certificate

I did certificate request CSR with SHA256 sign and put it in generator of fake CA certificate (generates my university system) as part of work on my university virtual... It generated me CA ...
0
votes
2answers
80 views

Autofill password for openssl

I have encrypted my shell script with openssl. Now i am using it with decrytion like openssl enc -d -aes-256-cbc -a -in encryptedshell.sh |sh - After running this command system asks for password....
0
votes
1answer
36 views

What does '300222061712Z' mean in openssl CA database?

What does '300222061712Z' mean in openssl CA database? $ cat index.txt V 300222061712Z 05 unknown /C=CN/ST=Beijing/O=Example/CN=client4/emailAddress=user01@example.com
1
vote
1answer
340 views

Centos 7 curl error 35 and unknown cipher in list

I've tried to send a GET request to a website running HTTPS but always getting curl: (35) Peer reports it experienced an internal error. and I get this error with this only website, Youtube, Google ...
0
votes
2answers
258 views

Is their anyway to get TLS 1.3 on Nginx without building from source

Currently running NGINX on redhat 7.7 production webserver, I think I know the answer but I wanted to double check. The issue is I'm trying to get TLS1.3 working. Below is part of my conf. ...
0
votes
1answer
907 views

Openssl Relocation error

I'm trying to encrypt some files using openssl , it showing me following error openssl: relocation error: openssl: symbol EVP_mdc2 version OPENSSL_1_1_0 not defined in file libcrypto.so.1.1 with ...
1
vote
1answer
440 views

Getting manual on openssl req command

I know I can get help on command by executing man openssl. Is it possible somehow get help on only openssl req command?
0
votes
1answer
140 views

Create certificate with subject alternative names

Creating CA certificate that should contain subject alternative names (SAN). openssl genrsa -des3 -out ca.key 2048 openssl req -new -x509 -days 3650 -key ca.key -out ca.crt -config ca_server.cnf ...
0
votes
0answers
133 views

Where is the SSL certificate configuration in Ubuntu 18.04 - when it's not in the default location?

I set up a server with SSL config from THAWTE a few years ago. Preface, I have no idea what I am doing and managed with online tutorials. But somehow it works! I need to update the SSL certificates ...
1
vote
0answers
327 views

OpenSSL PKCS#11 failed loading private key

I am running OpenSUSE LEAP15.1 and a seeing the following when trying to use a Nitrokey USB HSM: engine "pkcs11" set. Unable to load module (null) Unable to load module (null) PKCS11_get_private_key ...

1
2 3 4 5
12