Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0
votes
1answer
12 views

Does my system accept the new let's encrypt root certificate?

Let's encrypt changes there root certificate from DST Root CA X3 to ISRG Root X1- how can I check if my server (which connects to an api with let's encrypt certificate) works still in future?
0
votes
1answer
25 views

Help building older version (<= 7.1p2) of OpenSSH Portable (< on Linux or any other Distro)

I am working on creating my own PoC of CVE 2016-1907 along with several other OpenSSH involved CVE's for Ethical Hacking / Bug Bounties. Currently, I have found through Nmap servers running ...
2
votes
0answers
37 views

How to determine the cipher used from a binary blob

A client of mine uses a ReSI to manage remote control. I have never heard of ReSI and apperently it runs only with a windows client. The configuration file (that we've got form the client) has an ...
0
votes
0answers
47 views

ssh to remote server is not working

when app user tried to connect remote server via cmd ssh <remote server dns>, it is failing with error:Couldn't obtain random bytes (error 0x2d092087) But other local users are able to connect ...
1
vote
1answer
39 views

How to encrypt a text file in a portable manner based solely on a password?

I used to use openssl aes-256-cbc, but the problem I have with this is when I try to decrypt in a different version of the distro it fails, as if it depends also on some internal key or something, ...
1
vote
0answers
19 views

String RSA Encrypt with Public Key in bash?

I want to crypt a String with bash, Example: (No longer i using this keys after sharing. D'ont worry about this.) ~/.myprogram.publickey.txt ...
0
votes
0answers
20 views

Disable vulnerability in RHEL7 - TLSv1.2 ciphers

Using RHLE7 and I have been recommended to disable below cipher on TLSv1.2. Can someone please assist how to disable these ciphers? Try to find a config file where i can disable these entries? Please ...
0
votes
1answer
69 views

How to convert RFC4716 private keys to PEM private keys?

How to convert RFC4716 private keys to PEM private keys in ubuntu 20.04? For our project we generated ssh keys on a device running the latest openssh software. JSch complained about authentication: ...
0
votes
0answers
36 views

How to downgrade OpenSSL from 1.1.1 to 1.0.2? Mips32rl?

ffmpeg libraries does not support HTTPS protocol on my linux stp (mips32rl enigma2) Because, newer openssl 1.1.1.. so how downgrade from 1.1.1 to 1.0.2 ? thank you
0
votes
1answer
22 views

Certificate signed with custom CA in Kubernetes not Valid

I am attempting to setup the following process. Pod starts and generates a private key and csr Submits csr to password protected service for signing and ip verification Service returns valid crt that ...
4
votes
1answer
106 views

grep -q with openssl not working

If I execute openssl x509 -in ./somecert -text | grep SCTs I get the expected output. If I use grep -q openssl x509 -in ./somecert -text | grep -q SCTs I get unable to write certificate ...
0
votes
2answers
24 views

openssl generating sha256

i'm about to struggle with calculating a sha256 signature with the same result as <openssl dgst -sha256 -hmac> does calculate. this subject already was discussed in question. inspired by this ...
0
votes
1answer
287 views

openssl giving me unknown option

kindly asking help for this crazy behavior: openssl x509 -noout -subject -in 01.pem subject= .... Above works, but when I try to run it for multiple files, it fails: find . -name "*.pem" -...
0
votes
1answer
25 views

Convert p12 to gpg files that thunderbird can understand

I have a .p12 certificate emitted by spanish authorities. I would like to use that certificate for encryption in thunderbird. For that, I am trying to convert the certificate to gpg format so that I ...
0
votes
0answers
17 views

openssl smtp email client no email sent

I am trying to send email through openssl using script shown below but it quits after showing certificate, login and pwd are correct. #!/bin/bash username="engrmasood2002@gmail.com"; ...
1
vote
1answer
40 views

Bash script generates 'hash hmac' different then PHP

Problem my command script generates sometimes different result then PHP hash_hmac command. Can somebody explain or show an example how it should be done. The script generates username based on ...
0
votes
2answers
43 views

openssl — is there a salt limit?

was reading another post and the example of using a salt was: openssl passwd -crypt -salt foo bar foXrpAKGo3142 but if I change the salt to openssl passwd -crypt -salt foo111 bar, I still get ...
0
votes
2answers
56 views

Creating client certificate with OpenSSL

I'm trying to configure a Client Authentication Certificate with OpenSSL with this command: openssl ca -config intermediate/openssl.cnf \ -extensions usr_cert -days 7200 -notext -md sha256 \ ...
0
votes
1answer
256 views

NRPE Could not complete SSL handshake - Peer did not return a ceritificate

I am getting SSL Handshake errors with NRPE after enabling SSL. It worked perfectly fine without SSL doing check_nrpe. The allowed host is correct and when run without SSL enabled it shows the proper ...
0
votes
1answer
47 views

Raspberry PI (local) openSSL help: red-line through HTTPS fix?

I recently installed SSL on my RPi.. after using a few different tutorials.. I finally got the https:// url to resolve into showing the webpage content. However.. I had to 'ignore' the SSL warning (...
0
votes
1answer
40 views

Tomcat http to https

I am newbie to tomcat, in that case i had my website to work under http://myserver:8080/path/login/login.html I wanted to activate https with the port 8443 https://myserver:8443/path/login/login.html ...
0
votes
0answers
29 views

How Can I get certificate owner in command line?

I'm trying to get certificate owner from command line. For example, I detect a connection by conntrack from xxx.xxx.xxx.xxx. From surfshark I see on server key exchange packet under SSL->Handshake ...
0
votes
0answers
13 views

OpenSSL generated certs from Windows working, but not Linux

I've been configuring an MQTT broker for a customer, sadly it's Windows 10 running Mosquitto. The interesting part is when I went to generate the certs on my Pop_OS Linux machine; the clients will not ...
1
vote
1answer
290 views

Using OPENSSL with PKCS11 and SoftHSM configuration engine on Mac

Currently i have an issue to setup my Mac with HSM Current configuration HSM: SoftHSM OpenSSL, PKCS11 OS: MacOS Catalina I'm using this configuration openssl_conf = openssl_init [openssl_init] ...
0
votes
2answers
850 views

Using openssl s_client to get a file from an https server from the command line

I have a file hosted on an https server and I'd like to be able to transfer it to my client using openssl s_client as follows: openssl s_client -connect <my_ip:my_port>/my_file. I'm able to ...
0
votes
0answers
41 views

TLS/SSL handshake timeout with Apple push notification service

I'm deploying a PHP application on a RHEL7 server. This PHP application sends push notifications to Apple and Google. While testing the push notifications, the notifications sent to Google work fine, ...
0
votes
1answer
184 views

How can I use an unsigned public key to encrypt a large file using openssl?

openssl this way can only encrypt small files: openssl rsautl -encrypt -pubin -inkey public_key.pem -in secret.txt -out secret.enc openssl as I found suggested here throws an error: openssl smime -...
0
votes
0answers
53 views

How do I create a VPN certificate (IPSec / IKEv2) which contains an FQDN as identifier?

Obviously, I have a serious lack of understanding of how X.509-based authentication in IPSec VPNs works. More than one time, I have setup VPNs, based on IPSec / IKEv2, where one of the gateways was ...
0
votes
0answers
71 views

Why do I get `OpenSSL support => disabled` even after uncommenting `extension=openssl` in php.ini?

If I execute php -i | grep "openssl" then I get OpenSSL support => disabled (install ext/openssl) even though I uncommented the line extension=openssl in the loaded configuration file (...
0
votes
0answers
56 views

libcurl with ca_cert + private_key + cert_chain : working with OPENSSL but not with NSS

I'm writing an HTTP class (in C++) that abstracts the underlying implementation, and I want to be able to deal with a server using strong authentication. My implementation uses libcurl. The user of my ...
0
votes
0answers
18 views

ssh-keygen : generate public key from private key? [duplicate]

I got a pub/pri key pair generated using ssh-keygen. ssh-keygen -t rsa -b 2048 Now say, I lost the public key but have the private key. So I want to generate the public key using private key, which I ...
0
votes
1answer
1k views

How to do HmacSHA256 using openSSL from terminal?

I need to perform the following Java snippet using OpenSSL from the command line: private byte[] hmacSha256(byte[] key, byte[] payload) throws GeneralSecurityException { Mac mac = Mac....
1
vote
1answer
31 views

Unable to decrypt a file with the public signature

I got this signature openssl verify cert.pem cert.pem: C = US, O = Apple Inc., OU = Apple Certification Authority, CN = Apple Root CA error 18 at 0 depth lookup:self signed certificate OK Looks good. ...
0
votes
0answers
755 views

Handshake Failure when cloning a git repository which requires a certificate

The Problem I have been having issues connecting to a Atlassian Stash which requires a certificate issued by my company. When I connect using Firefox (which has the certificate) it will allow me to go ...
1
vote
1answer
99 views

OpenBSD 6.7 Wireguard instructions fail

Wireguard setup instructions don't work for me on my OpenBSD 6.7 machine: $ uname -a OpenBSD foobar 6.7 GENERIC.MP#3 amd64 $ sysctl kern.version kern.version=OpenBSD 6.7 (GENERIC.MP) #3: Thu Jul 9 07:...
2
votes
1answer
956 views

Cannot decrypt files on a Mac using openssl

This is the command I used to encrypt the files on my Mac around 2017. I don't know if my Mac was running High Sierra at the time or not, because I am usually late to the party when it comes to ...
0
votes
0answers
56 views

How to generate a self signed certificate from openssl having the SPIFFE URI

I have a requirement of generating a SPIFFY Cert from the openssl similar to this here Local SSL Certificates in Chrom(e/ium) 63 can any one suggest on what need to be added to generate the spiffe uri ...
0
votes
1answer
993 views

SQL Server Connection Failed with Linux Mint + SQL Server 2008 R2 using any client

I am trying to connect to my SQL Server 2008 R2 with SP4 database, however, I got this error and I have tried some solutions that I found here, but none works for me. PS. I do not know exactly how to ...
1
vote
1answer
4k views

How to downgrade OpenSSL from 1.1.1 to 1.0.2? Debian 10

I need 1.0.2 version of libssl, does somebody know how to downgrade from the newest 1.1.1 or download directly that version?
0
votes
0answers
47 views

Self signed SSL in Zeroshell

I have been trying to update the expired SSL certificate in Zeroshell. However, updating manually using Zeroshell script resulted in the following error # bash /root/kerbynet.cgi/scripts/...
0
votes
1answer
233 views

How do I verify the certificate of a specific computer when the DNS gives me one of many IP addresses?

I have a cloud setup with 6 front end computers using Apache. I installed a new SSL certificate. Now I want to verify that all the machines have the certificate. The problem is if I just use https://...
-1
votes
1answer
24 views

Does the error mean this file was not created using OpenSSL? If not, how do I figure out what encrypted this file?

When running the below command, I received this error: OpenSSL> rsautl -decrypt -in binarytext -out file.txt -inkey file2.txt unable to load Private Key 7324:error:0909006C:PEM routines:get_name:no ...
0
votes
0answers
30 views

Transmission 3.00 configure: error: OpenSSL support requested, but library not found

On Linux Mint 20 Cinnamon, I would like to know, why installing all listed required packages on Transmission official GitHub page did not exactly work. I can understand there was still something ...
2
votes
1answer
123 views

Trust a x509 certificate that is already trusted on another host

I have two hosts, one with Debian Buster and one with CentOS 7. I'd like to connect to an SMTP server over SSL from both of them. However, I can only do it from CentOS: CentOS: $ openssl s_client -...
0
votes
1answer
124 views

davmail: can only connect with openssl to localhost

I've read a number of articles on setting up davmail, and followed https://www.digitalocean.com/community/tutorials/how-to-setup-davmail-on-centos-6#basic-configuration to enable it on my CentOS ...
0
votes
0answers
74 views

How to use openssl shake256 hash string into a specified length hash-string?

How to use openssl shake256 hash string to a specified length hash-string? I use the following command to generate a shake256 hash string with the default length in Linux: echo -n 28713 | openssl ...
0
votes
0answers
35 views

How to download certificate from LDAPS (not LDAP) using Linux Utilities?

I tried following in linux: [wildfly@alq-esb-app02 log]$ echo -n | openssl s_client -connect cdc201.cop.copcommon.com:636 | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > ldapserver.pem ...
1
vote
2answers
27 views

“Certificate authority” messages are not being recorded in /var/log/messages

I am running an openssl server on my CentOS device. I am using an expired certificate and expect to see a "Certificate authority error" msg in /var/log/messages, but there is no ...
0
votes
0answers
139 views

Rocket chat enable ssl in apache

I have installed rocket chat on docker - on Debian 9 OS. I am unable to enable https for the same. I can access it using fqdn - http://chat.xyz.com:3003 I have generated ssl certificates using certbot....
2
votes
1answer
179 views

Renew Self-Signed Certificate from an Existing Private Key and CSR

I have this files generated for a Postgres instance -rw-r--r-- 1 root root 2733 Jun 8 20:37 server-cert.pem -rw-r--r-- 1 root root 3322 Jun 8 20:37 server.csr -rw------- 1 root root 1704 Jun 8 ...

1
2 3 4 5
13