Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0
votes
2answers
39 views

Is their anyway to get TLS 1.3 on Nginx without building from source

Currently running NGINX on redhat 7.7 production webserver, I think I know the answer but I wanted to double check. The issue is I'm trying to get TLS1.3 working. Below is part of my conf. ...
0
votes
1answer
20 views

Openssl Relocation error

I'm trying to encrypt some files using openssl , it showing me following error openssl: relocation error: openssl: symbol EVP_mdc2 version OPENSSL_1_1_0 not defined in file libcrypto.so.1.1 with ...
1
vote
1answer
33 views

Getting manual on openssl req command

I know I can get help on command by executing man openssl. Is it possible somehow get help on only openssl req command?
0
votes
0answers
28 views

Create certificate with subject alternative names

Creating CA certificate that should contain subject alternative names (SAN). openssl genrsa -des3 -out ca.key 2048 openssl req -new -x509 -days 3650 -key ca.key -out ca.crt -config ca_server.cnf ...
0
votes
0answers
32 views

Where is the SSL certificate configuration in Ubuntu 18.04 - when it's not in the default location?

I set up a server with SSL config from THAWTE a few years ago. Preface, I have no idea what I am doing and managed with online tutorials. But somehow it works! I need to update the SSL certificates ...
0
votes
0answers
16 views

OpenSSL PKCS#11 failed loading private key

I am running OpenSUSE LEAP15.1 and a seeing the following when trying to use a Nitrokey USB HSM: engine "pkcs11" set. Unable to load module (null) Unable to load module (null) PKCS11_get_private_key ...
0
votes
1answer
40 views

How to enable MD5 certificates in wpa_supplicant with OpenSSL 1.1?

Since I upgraded to Debian 10 I am unable to connect to eduroam. As it turns out my employer decided to use EAP-TLS with client certificates signed using the MD5 hash function. From what I can find ...
0
votes
0answers
28 views

Is it possible to encrypt traffic if I have only CA certificate?

I have simple secure (I guess) Mosquitto sever described in my previous question. Client machine has no any keys or certificate installed except single ca.crt certificate file generated and taken ...
0
votes
0answers
26 views

Nixos trouble installing R package openssl

I installed nixos recently and am still not familiar with it. I am struggling to install the R package openssl. After I enter the following command nix-shell -p R pkgconfig openssl nix-shell -p gpp ...
0
votes
1answer
22 views

How to read library documentation downloaded as a package (package-doc)

I am coding Qt GUI application for cryptography and want to use OpenSSL library calls for my application logic. Thats why i downloaded libssl-dev and libssl-doc packages via Synaptic package manager (...
0
votes
2answers
46 views

How to check if the OpenSSL version is -ge 1.1.1 in a shell script?

My script requires OpenSSL 1.1.1 or newer for it to function. Of course, the first steps are to get if OpenSSL is installed on that system, and if yes, then get the version of the default OpenSSL ...
2
votes
1answer
74 views

/dev/fd/63 not found on generating csr on ubuntu

I am working on an online course in which one step is to generate Certificate Signing Request or CSR file for generating a self signed certificate. The command which should have generated the ...
0
votes
1answer
48 views

Working with SSH/SSL

I'm not really sure where or to whom I should ask this question, so hopefully you all can help me. I am working on a project that I would like to add data to the end of each packet before encryption ...
2
votes
2answers
118 views

How to export all certificates in a certificate chain to separate .crt files with a single command

I would like to export all certificates in a certificate chain to separate .crt files with a single command. How can I do that? To provide some background information: I would like to use the ...
0
votes
1answer
109 views

libcrypto version not found, despite version being on my system

I'm trying to run some software, but I am getting this error message: ImportError: /usr/lib/libcrypto.so.10: version `libcrypto.so.10' not found (required by /home/jessica/project/lib/libgdal.so.20) ...
0
votes
1answer
75 views

Enforcing TLS V1.2 on client communication?

I am after a sanity check to ensure that what I have been asked to investigate is actually achievable. I am currently building out a Centos7 server, which will be used to deliver files to AWS S3, ...
0
votes
0answers
79 views

Installing OpenSSL 1.1.0

I am trying to connect to an instance of SQL Server 17 running on my Ubuntu 18.04 machine, using Azure Data Studio, and after a long session of brainstorming, I discovered that it depends upon OpenSSL ...
2
votes
2answers
536 views

ssl needed for Python-3.8 on RHEL 6

I'm working with a older server running Linux 6. I was asked to install aws-CLI on the machine to allow us to start saving files directly to s3 buckets. This requires python 3.4 or higher (starting ...
-3
votes
1answer
54 views

Cannot install git on rhel 7?

[root@server14 git-2.1.2]# make install CC credential-store.o In file included from cache.h:4:0, from credential-store.c:1: git-compat-util.h:213:25: fatal error: openssl/ssl.h: ...
2
votes
1answer
208 views

error message - openssl: command not found

I am writing a simple script to check if the certificate for a website is valid. However, when I attempt to run the code in terminal, I receive an error message stating that the command openssl cannot ...
0
votes
0answers
295 views

How to generate a self-signed certificate in DER format with private key included, using OpenSSL?

As the title says: Using OpenSSL, how do I generate a self-signed certificate in DER format which includes the private key? Is this possible at all? I have found a myriad of posts which explain how ...
1
vote
0answers
28 views

sshfs troubleshooting: what would cause openssl to fail?

I believe sshfs requires an sftp server on the remote computer (router): ipkg list_installed | grep -i sftp openssh-sftp-server - 5.9p1-1 - sftp-server only from a FREE version of the SSH protocol ...
1
vote
0answers
49 views

CMake failed to detect installed OpenSSL which was compiled from source

I am trying to compile Hadoop 3.2.0 from source on AIX 7.1 as the pre-built 32-bit binary is incompatible with the 64-bit machine we are using. The OpenSSL is built from source so I have both the ...
2
votes
0answers
627 views

Overriding OpenSSL CipherString at a more granular level in Debian 10?

In Debian 10, the upgraded OpenSSL package has more secure defaults (per https://wiki.debian.org/ContinuousIntegration/TriagingTips/openssl-1.1.1) which causes problems for some of my existing ...
0
votes
1answer
41 views

Openssl forgot password

I’ve encrypted one file with des algorithm using openssl tool but I forgot my key . Is there any way to recover that key or get any hint or something?
0
votes
1answer
121 views

dhclient OPENSSL_1_1_1

My dhcp client because some openssl version mismatch. Here is an error: debian:~$ sudo dhclient dhclient: /usr/local/lib/libcrypto.so.1.1: version `OPENSSL_1_1_1' not found (required by /lib/x86_64-...
2
votes
0answers
296 views

Cannot login into XFCE screen blink and return back to login screen

Recently a kernel upgrade to 4.19.0-5amd64 broke my desktop environment and produced other problems, some of them I already asked here - Unmet broken dependencies debian and radeon failed vce resume ...
1
vote
0answers
107 views

TLS certificate works on Ubuntu 18.04 but not on Centos 7.6

I have a set of keys that authenticate me to some external server. They all use a root CA that's not installed in common distributions. I am validating if the external server responds, using a Docker ...
0
votes
1answer
36 views

Understanding openssl version information

When I do openssl version, I get the following information OpenSSL 1.1.0j 20 Nov 2018 (Library: OpenSSL 1.1.0k 28 May 2019) What does this difference between the j and the Library k version mean ...
1
vote
1answer
775 views

How to extract serial from SSL certificate

I'd like to know what is the best way to extract serial number from a SSL certificate formatted in PEM format. After that I'd like to format the certificate in following format hexhex:hexhex:...:...
0
votes
1answer
546 views

AIX How to import CA certificate

I need to import my company's CA certificate to AIX6. I copied .crt file to /var/ssl/certs and /opt/freeware/etc/ssl/certs/ where all CA certificates are located, but I it's not enough. How should I ...
1
vote
2answers
273 views

Use Different OpenSSL for Apache

I'm compiling Apache from source, and staticly linking mod_ssl. I'm looking to use a different version of OpenSSL to the system-installed version. I would like to do this in a way that doesn't affect ...
1
vote
1answer
53 views

Certificate Authority Not Working

If my understanding is correct, a CA acts like a parent certificate that is used to verify other certificates that have been signed by the CA certificate without having to install multiple server ...
1
vote
0answers
125 views

Why is “git pull” trying to use CURL_OPENSSL_3 while libcurl4-openssl-dev is installed?

When I run git pull I get the following error: git-remote-https: /usr/lib/x86_64-linux-gnu/libcurl.so.4: version `CURL_OPENSSL_3' not found (required by git-remote-https) Why is git trying to use ...
1
vote
1answer
138 views

Errors when trying to build openssl-1.0.2l

Debian 32-bit host PC, with a pre-built toolchain for ARM target in /opt dir. I tried to cross-compile project from the source code, got a lot of errors when system tried to build openssl package: &...
1
vote
1answer
200 views

How do I generate TLSA records?

I need to setup TLSA records in the DNS for my host. I want to use it for HTTPS, e-mail and SSH. What are TLSA records? What does TLSA records look like? How do I create TLSA records?
-1
votes
1answer
465 views

Why are session resumption and early data with TLS 1.3 not working for my NGINX 1.16 server?

Server Information: freebsd@FreeBSD-Website:~ % freebsd-version 12.0-RELEASE-p5 freebsd@FreeBSD-Website:~ % /usr/local/bin/openssl version OpenSSL 1.1.1c 28 May 2019 freebsd@FreeBSD-Website:~ % nginx ...
0
votes
0answers
77 views

ssl not working in vsftpd; write:errno=32

this is what i have tried: 1) vsftpd.pem created using the following self-signed certificate: openssl req -x509 -nodes -newkey rsa:4096 -keyout $certname -out $certname -days 365 2) owner/...
0
votes
0answers
676 views

Openssl || write:errno=104 | no peer certificate available

I have two servers with similar openssl version and same settings but I'm getting below error on one host whereas its working fine on other host. I tried different openssl commands but no help. What ...
0
votes
0answers
706 views

“bad decrypt” error while decrypting with openssl

I have created 2 scripts to encrypt and decrypt a password inside a file. The encryption script is as follow: set -x PFILE=/home/user/crypt/pfile echo "changing PASSWORD" P=`echo 'rawpassword' | ...
1
vote
2answers
422 views

Apache 2.4 with self-signed certificates always redirect to the default virtual host

I've been trying to make work virtual hosts with self-signed certificates with Apache 2.4. I've tried many setup combinations but no matter what, every virtual host I try in Firefox goes straight to ...
1
vote
0answers
223 views

Decrypt password with openssl

I have an old shell script, created by a person that is not in the company anymore, to encrypt and decrypt our access password. The old script is basically this: PFILE=/home/user/keys/pwfile if [ ! -...
-3
votes
1answer
868 views
0
votes
1answer
284 views

Cannot generate proper RSA keys using openssl genpkey utility with RSA-PSS option

I am trying to create an RSA key using openssl on Linux and then converting it to PuTTY format so that I can use it from my Windows PC as well. openssl genpkey -algorithm RSA-PSS -out myKey.pem -...
1
vote
0answers
181 views

Linux kernel cross-compile failure at arch/arm64/crypto

I encountered an error while trying to cross-compile Linux kernel v.5.0.0 on Ubuntu 18.04. I tested two different versions of aarch64-linux-gnu-gcc: v7.4.0 and v5.5.0, but both results in the same ...
1
vote
0answers
153 views

Can't use pip in red hat 4.4.7

I've installed python 3.7 and pip, but running pip gives me an error: pip3.7 install django pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. ...
0
votes
1answer
98 views

FFmpeg claims OpenSSL is not compatible with GPL v3?

FFmpeg says in the 4.1 docs, The Fraunhofer FDK AAC and OpenSSL libraries are under licenses which are incompatible with the GPLv2 and v3. To the best of our knowledge, they are compatible with the ...
0
votes
0answers
23 views

How to run net core on ubuntu 19

I want to run a net core app on ubuntu 19. Attempting to do so complains it cannot find the ssl libraries. Apparently this is because Ubuntu has a more recent version of ssl than 1.0 which net core ...
-2
votes
1answer
81 views

How to convert a certificate in .pfx format to .jks in HP-UX server

I have a task to convert a .pfx SSL certificate to .jks format in a HP-UX B.11.31 server to be configured in our application's server.xml file, (keystoreFile=) for our 8090 connector port.
0
votes
1answer
415 views

Default Directories Not Working In OpenSSL Configuration File

I have set the directory in the /etc/ssl/openssl.cnf file but every time I issue the command openssl req -x509 -newkey rsa:4096 -keyout cakey.pem -out cacert.pem -days 3650 it places the files in ...