Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

0
votes
0answers
16 views

Enable SSLV3 request in libcurl 7.52.1

I am using libcurl 7.52.1 to send http request so far I have successfully tried to send TLS request down to TLSV1.0. I need to send SSLV3 requests how can I enable SSLV3 request on my current libcurl ...
0
votes
1answer
26 views

Can openssl convert SSH public key to a PEM file without private key?

So I've seen many many posts on how to do the conversion with private key; but does anyone one know how I can do this with just only public key? As I'm trying to convert someone else's public key. Or ...
0
votes
0answers
30 views

Curl is not supporting SSL (./configure --with-ssl)

I am trying to install curl in opensuse Leap 15.0. I have downloaded the .zip file from this link (version 7.63.0) I am running this command from the curl root directory: ./configure --with-ssl=/usr/...
0
votes
1answer
45 views

Where to get info about deprecated options of OpenSSL RSAUTIL of Mojave?

It seems that on macOS since Mojave (OSX 10.14.3), the -ssl option had been deprecated from RSA Utils (rsautl command) on it's default OpenSSL. $ sw_vers ProductName: Mac OS X ProductVersion: 10....
0
votes
0answers
18 views

Debain 9, no keyring login prompt

I am using Debian 9, and currently, I do not have my Phone with me. Usually, I start Skype and log in and then it will ask me for my Keyring login. Now I do not have my Phone with me, so I can not log ...
1
vote
1answer
55 views

How to install self signed .pem certificate for an application in OpenSuse?

Recently my workplace has updated the internet usage policies and imposed a Sophos security layer to monitor the traffic. I am trying to clone a git repo (using git clone command) but getting this ...
0
votes
0answers
37 views

openssl - sign with private key not from file

I'm signing a file using SHA256withRSA: openssl dgst -sha256 -hmac "$privateKey where $privateKey is the stuff in between -----BEGIN PRIVATE KEY----- and -----END PRIVATE KEY-----. Am I doing it ...
0
votes
2answers
47 views

split (one-line) cert bundle into 2 file

I have one RSA PRIVATE KEY and one CERTIFICATE in one line, and I have to split it to one .key and .crt file. Is it possible with sed or/and awk? EDI1: example (as you can see its literally one line)...
2
votes
1answer
94 views

NanoPi M4 - RK3399: Apache2 + SSL: Large download hangs

I've a brand new setup of Apache2 running under Debian 9 (armbian on NanoPi M4). Everything works fine until I try to download a large file over HTTPS. Small files download successfully however, ...
2
votes
0answers
36 views

PHP Curl when accessing SSL slows down connection. How to correct?

After migrating to a new server, our scripts slowed down dramatically. Some troubleshooting showed that the slowdown occurred during Curl connections as the server was trying to load the SSL cert. ...
11
votes
1answer
2k views

how to make Gnu/Linux trust a certificate that's trusted by Windows out-of-the-box?

There is a server with a broken SSL chain, as reported by this SSL check: I know this is a problem that should be solved on the server itself, but sometimes this is hard to have fixed (I'm not the ...
1
vote
0answers
34 views

What is this error for rootca for wrong system time? [closed]

Getting this error for openssl smime verify 140392937076368:error:21075075:PKCS7 routines:PKCS7_verify:certificate verify error:pk7_smime.c:342:Verify error:certificate is not yet valid After ...
0
votes
1answer
49 views

How to run apache httpd 2.4.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, on CentOS 7.6?

I'm trying to run apache httpd 2.4.6 on CentOS 7.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, but apache is not accepting this as a valid key. I ensured all ...
1
vote
1answer
195 views

CERTIFICATE_VERIFY_FAILED when connecting to GMail with offlineimap

Under an Arch Linux, I want to use offlineimap to synchronize to GMail like this. [general] accounts = Gmail maxsyncaccounts = 3 [Account Gmail] localrepository = LocalGmail remoterepository = ...
0
votes
1answer
51 views

How to get openssl to work on Debian 9.5

This is my distribution I use root@ci-server:~/temp# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 9.5 (stretch) Release: ...
1
vote
1answer
103 views

Update OpenSSH on RHEL 5.5

I must update OpenSSH on my RHEL 5.5 because of CVE-2018-15473. My OpenSSH version is OpenSSH_4.3p2 and must be update to OpenSSH_7.9, when i want to do this i get that message when using configure ...
0
votes
0answers
24 views

SSL and programs like wget,curl with https on hpux

Simple question: every program (wget,curl,etc) which can use https works perfect on linux,and bad on hpux. See this example using https://google.com on linux wget https://www.google.com/ --2018-12-...
-3
votes
1answer
176 views

CA certificates location in Ubuntu 18.04

Can you please point to me where can I locate the CA certificates file in Ubuntu 18.04? I have a program that needs the path that point to the CAs directory for certs. validation.
0
votes
4answers
125 views

How are the public and private keys stored and related on both client and server?

I have tried to match the public keys and private keys on both my client and server as well as the configuration files but cannot get my head around the mismatches. I can successfully connect to the ...
0
votes
1answer
31 views

How to connect PHP 5.6 to SQL db after compilation

I installed PHP 5.6 from source on Debian server 9 server. The OpenSSL version in Debian 9 is too new for PHP 5.6, so I had to compile an older version in /opt/openssl to use it with PHP 5.6. ( ...
0
votes
2answers
271 views

Unable to install openssl-libs

I'm trying to install dotnet-sdk-2.1 but it's failing due to that fact that openssl-libs isn't found. I've tried manually installing it using yum, but to no avail. yum repolist
-3
votes
2answers
388 views

Calling sh with script on stdin and passing command line arguments

This works of course. I can run ./test1.sh cats and the argument cats is passed correctly to ls. $ cat test1.sh #!/bin/sh ls -l $1 Can you tell me how do I make this second example — the same ...
1
vote
1answer
111 views

nginx 1.14 on Debian Testing (buster) - no TLS 1.0 / 1.1?

Just updated Debian from "stable" 9.* to "testing" 10.*. Have nginx 1.14 - used to come from "stable backports" now included in Debian itself. Seeing a strange issue with TLS versions in nginx. TLS ...
2
votes
0answers
179 views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
0
votes
1answer
30 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...
2
votes
1answer
402 views

wpa_supplicant not connecting, because SSL3 is unsupported

I've a laptop running Debian GNU/Linux Unstable with Network Manager. Since an update of OpenSSL (1.1.1 I think), I can't connect to a Wi-Fi network using WPA2 Enterprise with PEAP (MSCHAPv2). In /var/...
1
vote
0answers
345 views

OpenSSL: how to encrypt/decrypt?

In Debian, I'll encrypt a file or text: $ echo test | openssl enc -aes-256-cbc -in - -pass pass:password -out /tmp/test.enc Then move the file to macOS (Mojave) and attempt to decrypt: $ openssl ...
2
votes
0answers
54 views

Charm crypto library - unit tests failing with undefined symbol: BN_is_negative

I'm trying to build and test the python Charm crypto library from source. It compiles and installs ok, but I get 91 cases of undefined symbol: BN_is_negative when running sudo make test: /charm/charm/...
0
votes
1answer
124 views

EVP_CIPHER_CTX in openssl 1.1.x

error: storage size of 'ctx' isn't known EVP_CIPHER_CTX ctx; I am getting this error with openssl -1.1.1. Compared openssl-1.0.* and openssl-1.1.1 and this EVP_CIPHER_CTX struture has not been made ...
10
votes
3answers
3k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I would like it to echo "working" AND if the ...
0
votes
0answers
202 views

Perl v5.10.0 required--this is only v5.8.8, stopped at ./Configure line 12

when I try to configure new openssl package(openssl-1.1.1), I am getting that perl error.New openssl has dependency on perl version of 5.10.1. My build machine has two versions of perl -5.8.8 and 5.10....
2
votes
0answers
161 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...
2
votes
1answer
411 views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
0
votes
1answer
110 views

The same curl binary shows different version of openssl on 2 different servers

so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version: OpenSSL/1.1.0f After that, I copied the very same library into ...
0
votes
0answers
35 views

mbsync “unable to get issuer certificate” error

I am currently using Mutt to access my corporate mail via imap. I'm trying to download my email using isync/mbsync so that I can index and search them using notmuch, however mbsync gives me a ...
1
vote
1answer
40 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
258 views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
1
vote
0answers
548 views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
183 views

Manual install of curl can't find openssl

My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option. I got the following warning ...
-1
votes
1answer
27 views

Compilation fails on version 1.0.2p

Compilation fails with linker error although it complains with warning messages. logs: # gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto server.c: In function ‘InitServerCTX’: server.c:62:5: ...
1
vote
1answer
414 views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
1
vote
3answers
1k views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
1
vote
1answer
137 views

syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency

Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases Amidst ./configure --prefix=/app/...
1
vote
0answers
324 views

How to decrypt RSA file with openssl

I have 3 files publickey.pem, aeskey.rsa.enc and img.png.aes.enc. I know that I could use openssl to decrypt the png file, but I simply don't know how to do it.
0
votes
1answer
109 views

Apache SSL problems (Centos 7)

I have deleted /etc/pki/tls/private and /etc/pki/tls/certs, after that I can't access page. I saw in logs error like [suexec:notice] [pid 30215] AH01232: suEXEC mechanism enabled (wrapper: /usr/...
2
votes
1answer
121 views

Making a new SSL cert for a name that already has

At work a lot of our internal servers have SSL certs we've generated ourselves with openssl (through some simple scripts). The generation works fine, but the subsequent handling needs improvements, as ...
1
vote
0answers
50 views

openssl hangs on server

I have a problem on the server. Commands wget, curl and dependent commands are not working when a request is via 443 port. Commands hangs on 2-3 minutes and after just say "time out": # curl -v ...
0
votes
0answers
172 views

Decrypt old openssl data

I have a git repo encrypted with openssl. I have moved the repo to a new host. The original host was using: » openssl version OpenSSL 1.0.2g 1 Mar 2016 The current host is using: » openssl version ...
1
vote
1answer
54 views

How to run my compiled python not the system installed one

I have compiled python3.6.5 from the source and linked it to my compiled openssl as the following: export LDFLAGS="-L/usr/local/openssl/lib/ -L/usr/local/openssl/lib64/" export LD_LIBRARY_PATH="/usr/...
0
votes
1answer
715 views

yum install openssl-devel fails

Running yum install openssl-devel leads to dependency checking errors and do not install it. I guess there is a problem in my repositories however I don't know what is wrong with my installed version ...