Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

0
votes
1answer
37 views

How to run apache httpd 2.4.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, on CentOS 7.6?

I'm trying to run apache httpd 2.4.6 on CentOS 7.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, but apache is not accepting this as a valid key. I ensured all ...
0
votes
0answers
24 views

CERTIFICATE_VERIFY_FAILED when connecting to GMail with offlineimap

Under an Arch Linux, I want to use offlineimap to synchronize to GMail like this. [general] accounts = Gmail maxsyncaccounts = 3 [Account Gmail] localrepository = LocalGmail remoterepository = ...
0
votes
1answer
20 views

How to get openssl to work on Debian 9.5

This is my distribution I use root@ci-server:~/temp# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 9.5 (stretch) Release: ...
0
votes
1answer
53 views

Update OpenSSH on RHEL 5.5

I must update OpenSSH on my RHEL 5.5 because of CVE-2018-15473. My OpenSSH version is OpenSSH_4.3p2 and must be update to OpenSSH_7.9, when i want to do this i get that message when using configure ...
0
votes
0answers
18 views

SSL and programs like wget,curl with https on hpux

Simple question: every program (wget,curl,etc) which can use https works perfect on linux,and bad on hpux. See this example using https://google.com on linux wget https://www.google.com/ --2018-12-...
-3
votes
1answer
46 views

CA certificates location in Ubuntu 18.04

Can you please point to me where can I locate the CA certificates file in Ubuntu 18.04? I have a program that needs the path that point to the CAs directory for certs. validation.
0
votes
4answers
66 views

How are the public and private keys stored and related on both client and server?

I have tried to match the public keys and private keys on both my client and server as well as the configuration files but cannot get my head around the mismatches. I can successfully connect to the ...
0
votes
1answer
17 views

How to connect PHP 5.6 to SQL db after compilation

I installed PHP 5.6 from source on Debian server 9 server. The OpenSSL version in Debian 9 is too new for PHP 5.6, so I had to compile an older version in /opt/openssl to use it with PHP 5.6. ( ...
0
votes
2answers
67 views

Unable to install openssl-libs

I'm trying to install dotnet-sdk-2.1 but it's failing due to that fact that openssl-libs isn't found. I've tried manually installing it using yum, but to no avail. yum repolist
-3
votes
2answers
94 views

Calling sh with script on stdin and passing command line arguments

This works of course. I can run ./test1.sh cats and the argument cats is passed correctly to ls. $ cat test1.sh #!/bin/sh ls -l $1 Can you tell me how do I make this second example — the same ...
0
votes
1answer
56 views

nginx 1.14 on Debian Testing (buster) - no TLS 1.0 / 1.1?

Just updated Debian from "stable" 9.* to "testing" 10.*. Have nginx 1.14 - used to come from "stable backports" now included in Debian itself. Seeing a strange issue with TLS versions in nginx. TLS ...
2
votes
0answers
98 views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
0
votes
1answer
29 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...
2
votes
1answer
291 views

wpa_supplicant not connecting, because SSL3 is unsupported

I've a laptop running Debian GNU/Linux Unstable with Network Manager. Since an update of OpenSSL (1.1.1 I think), I can't connect to a Wi-Fi network using WPA2 Enterprise with PEAP (MSCHAPv2). In /var/...
1
vote
0answers
125 views

OpenSSL: how to encrypt/decrypt?

In Debian, I'll encrypt a file or text: $ echo test | openssl enc -aes-256-cbc -in - -pass pass:password -out /tmp/test.enc Then move the file to macOS (Mojave) and attempt to decrypt: $ openssl ...
2
votes
0answers
31 views

Charm crypto library - unit tests failing with undefined symbol: BN_is_negative

I'm trying to build and test the python Charm crypto library from source. It compiles and installs ok, but I get 91 cases of undefined symbol: BN_is_negative when running sudo make test: /charm/charm/...
0
votes
1answer
52 views

EVP_CIPHER_CTX in openssl 1.1.x

error: storage size of 'ctx' isn't known EVP_CIPHER_CTX ctx; I am getting this error with openssl -1.1.1. Compared openssl-1.0.* and openssl-1.1.1 and this EVP_CIPHER_CTX struture has not been made ...
10
votes
3answers
2k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I would like it to echo "working" AND if the ...
0
votes
0answers
113 views

Perl v5.10.0 required--this is only v5.8.8, stopped at ./Configure line 12

when I try to configure new openssl package(openssl-1.1.1), I am getting that perl error.New openssl has dependency on perl version of 5.10.1. My build machine has two versions of perl -5.8.8 and 5.10....
2
votes
0answers
72 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...
2
votes
1answer
124 views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
0
votes
1answer
64 views

The same curl binary shows different version of openssl on 2 different servers

so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version: OpenSSL/1.1.0f After that, I copied the very same library into ...
0
votes
0answers
24 views

mbsync “unable to get issuer certificate” error

I am currently using Mutt to access my corporate mail via imap. I'm trying to download my email using isync/mbsync so that I can index and search them using notmuch, however mbsync gives me a ...
1
vote
1answer
35 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
150 views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
1
vote
0answers
310 views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
93 views

Manual install of curl can't find openssl

My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option. I got the following warning ...
-1
votes
1answer
24 views

Compilation fails on version 1.0.2p

Compilation fails with linker error although it complains with warning messages. logs: # gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto server.c: In function ‘InitServerCTX’: server.c:62:5: ...
1
vote
1answer
308 views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
1
vote
3answers
676 views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
1
vote
1answer
94 views

syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency

Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases Amidst ./configure --prefix=/app/...
1
vote
0answers
244 views

How to decrypt RSA file with openssl

I have 3 files publickey.pem, aeskey.rsa.enc and img.png.aes.enc. I know that I could use openssl to decrypt the png file, but I simply don't know how to do it.
0
votes
1answer
81 views

Apache SSL problems (Centos 7)

I have deleted /etc/pki/tls/private and /etc/pki/tls/certs, after that I can't access page. I saw in logs error like [suexec:notice] [pid 30215] AH01232: suEXEC mechanism enabled (wrapper: /usr/...
2
votes
1answer
48 views

Making a new SSL cert for a name that already has

At work a lot of our internal servers have SSL certs we've generated ourselves with openssl (through some simple scripts). The generation works fine, but the subsequent handling needs improvements, as ...
1
vote
0answers
36 views

openssl hangs on server

I have a problem on the server. Commands wget, curl and dependent commands are not working when a request is via 443 port. Commands hangs on 2-3 minutes and after just say "time out": # curl -v ...
0
votes
0answers
92 views

Decrypt old openssl data

I have a git repo encrypted with openssl. I have moved the repo to a new host. The original host was using: » openssl version OpenSSL 1.0.2g 1 Mar 2016 The current host is using: » openssl version ...
1
vote
1answer
42 views

How to run my compiled python not the system installed one

I have compiled python3.6.5 from the source and linked it to my compiled openssl as the following: export LDFLAGS="-L/usr/local/openssl/lib/ -L/usr/local/openssl/lib64/" export LD_LIBRARY_PATH="/usr/...
0
votes
1answer
454 views

yum install openssl-devel fails

Running yum install openssl-devel leads to dependency checking errors and do not install it. I guess there is a problem in my repositories however I don't know what is wrong with my installed version ...
0
votes
0answers
27 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
0
votes
0answers
58 views

apache server for ejbca certificate error

I was configuring EJBCA certification authority over an apache server for commercial certificate on centos 7 and apache version is 2.4.6. With apache configuration for file vim /etc/httpd/conf.d/ca....
0
votes
0answers
162 views

Apache error during Make “undefined reference to symbol dlclose@@GLIBC_2.2.5”

I'm installing Apache and OpenSSL from source to experiment with HeartBleed. Installing Apache from apt bundled a different version of OpenSSL with it. I currently perform these steps. Installing ...
0
votes
0answers
105 views

openssl: Define private key / keyform / engine in configuration file

I've successfully set up my openssl environment to use a YubiKey for a CA certificate. I can sign CSRs with the following command: openssl ca -engine pkcs11 -keyfile "pkcs11:manufacturer=piv_II;id=%...
1
vote
1answer
154 views

dsa still supported for ssh?

I have an old id_dsa ssh key that I'd like to keep for passwordless ssh to my test machines, but recently it stopped working for ssh. "Recently" includes upgrading from SuSE Leap 42.2 -> 42.3 -> 15.0. ...
1
vote
1answer
178 views

How to use openssl smime -sign to get digest value in -out xml?

Wanted to know command of openssl smime -sign to get digest value . Something like below - MIME-Version: 1.0 Content-Type: multipart/signed;protocol="application/pkcs7- signature";micalg="sha-256";...
0
votes
0answers
535 views

Can't load certificate

When I am trying to sign my cert I keep getting this error [root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles requests/testcsr.pem Using configuration from /etc/pki/tls/openssl.cnf ...
0
votes
1answer
328 views

valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed

System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed Symptoms: wget https://api.tcell.io will result in this error: ERROR: cannot verify api.tcell.io's ...
-2
votes
1answer
210 views

Command line HMAC calulation is different from Node.JS crypto.createHmac('sha256')

In Node.js I use following code hash = crypto.createHmac('sha256', SECRET).update(fileContent).digest('hex'); to calculate HMAC. C++/Qt code analogue QByteArray hash = QMessageAuthenticationCode::...
0
votes
1answer
357 views

How do you use the AES key wrap cipher with the OpenSSL command line utility?

When you run the command openssl enc -ciphers a list of supported ciphers is printed. In more recent versions of the OpenSSL utility the ciphers -id-aes256-wrap, -id-aes256-wrap-pad, and -aes256-wrap ...
0
votes
2answers
280 views

Stunnel 5.x on Centos 6.5

Im looking for an stunnel 5.x RPM for Centos 6.5 so I can get TLS1.2 support. Ive looked everywhere, but cannot find one. Ive tried downloading and compiling, as per another question on here (title: ...
1
vote
1answer
280 views

Download over https on Debian not working (openssl misconfiguration?)

I'm on a Debian wheezy server and I'm trying to download stuff by https without success. When I try to use curl, it gives me this answer by example: curl: (60) SSL certificate problem, verify that ...