Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

9
votes
3answers
2k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I would like it to echo "working" AND if the ...
0
votes
0answers
33 views

Perl v5.10.0 required--this is only v5.8.8, stopped at ./Configure line 12

when I try to configure new openssl package(openssl-1.1.1), I am getting that perl error.New openssl has dependency on perl version of 5.10.1. My build machine has two versions of perl -5.8.8 and 5.10....
2
votes
0answers
37 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...
2
votes
1answer
42 views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
0
votes
1answer
38 views

The same curl binary shows different version of openssl on 2 different servers

so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version: OpenSSL/1.1.0f After that, I copied the very same library into ...
0
votes
0answers
19 views

mbsync “unable to get issuer certificate” error

I am currently using Mutt to access my corporate mail via imap. I'm trying to download my email using isync/mbsync so that I can index and search them using notmuch, however mbsync gives me a ...
1
vote
1answer
34 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
67 views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
1
vote
0answers
102 views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
40 views

Manual install of curl can't find openssl

My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option. I got the following warning ...
-1
votes
1answer
21 views

Compilation fails on version 1.0.2p

Compilation fails with linker error although it complains with warning messages. logs: # gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto server.c: In function ‘InitServerCTX’: server.c:62:5: ...
1
vote
1answer
162 views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
1
vote
3answers
240 views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
1
vote
1answer
44 views

syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency

Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases Amidst ./configure --prefix=/app/...
1
vote
0answers
157 views

How to decrypt RSA file with openssl

I have 3 files publickey.pem, aeskey.rsa.enc and img.png.aes.enc. I know that I could use openssl to decrypt the png file, but I simply don't know how to do it.
0
votes
1answer
44 views

Apache SSL problems (Centos 7)

I have deleted /etc/pki/tls/private and /etc/pki/tls/certs, after that I can't access page. I saw in logs error like [suexec:notice] [pid 30215] AH01232: suEXEC mechanism enabled (wrapper: /usr/...
2
votes
1answer
37 views

Making a new SSL cert for a name that already has

At work a lot of our internal servers have SSL certs we've generated ourselves with openssl (through some simple scripts). The generation works fine, but the subsequent handling needs improvements, as ...
1
vote
0answers
23 views

openssl hangs on server

I have a problem on the server. Commands wget, curl and dependent commands are not working when a request is via 443 port. Commands hangs on 2-3 minutes and after just say "time out": # curl -v ...
0
votes
0answers
33 views

openssl/sha.h: No such file or directory [duplicate]

So, i'm kind of new to linux, i'm using the latest version of kali, i downloaded "hcxpcaptool tool" from Git as a zip, decompressed it and run : make on the decompressed repository and it tells me ...
0
votes
0answers
49 views

Decrypt old openssl data

I have a git repo encrypted with openssl. I have moved the repo to a new host. The original host was using: » openssl version OpenSSL 1.0.2g 1 Mar 2016 The current host is using: » openssl version ...
1
vote
1answer
38 views

How to run my compiled python not the system installed one

I have compiled python3.6.5 from the source and linked it to my compiled openssl as the following: export LDFLAGS="-L/usr/local/openssl/lib/ -L/usr/local/openssl/lib64/" export LD_LIBRARY_PATH="/usr/...
0
votes
1answer
259 views

yum install openssl-devel fails

Running yum install openssl-devel leads to dependency checking errors and do not install it. I guess there is a problem in my repositories however I don't know what is wrong with my installed version ...
0
votes
0answers
23 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
0
votes
0answers
46 views

apache server for ejbca certificate error

I was configuring EJBCA certification authority over an apache server for commercial certificate on centos 7 and apache version is 2.4.6. With apache configuration for file vim /etc/httpd/conf.d/ca....
0
votes
0answers
88 views

Apache error during Make “undefined reference to symbol dlclose@@GLIBC_2.2.5”

I'm installing Apache and OpenSSL from source to experiment with HeartBleed. Installing Apache from apt bundled a different version of OpenSSL with it. I currently perform these steps. Installing ...
0
votes
0answers
61 views

openssl: Define private key / keyform / engine in configuration file

I've successfully set up my openssl environment to use a YubiKey for a CA certificate. I can sign CSRs with the following command: openssl ca -engine pkcs11 -keyfile "pkcs11:manufacturer=piv_II;id=%...
1
vote
1answer
108 views

dsa still supported for ssh?

I have an old id_dsa ssh key that I'd like to keep for passwordless ssh to my test machines, but recently it stopped working for ssh. "Recently" includes upgrading from SuSE Leap 42.2 -> 42.3 -> 15.0. ...
1
vote
1answer
117 views

How to use openssl smime -sign to get digest value in -out xml?

Wanted to know command of openssl smime -sign to get digest value . Something like below - MIME-Version: 1.0 Content-Type: multipart/signed;protocol="application/pkcs7- signature";micalg="sha-256";...
0
votes
0answers
373 views

Can't load certificate

When I am trying to sign my cert I keep getting this error [root@sls0626 CA]# openssl ca -out newcerts/testcert.pem -infiles requests/testcsr.pem Using configuration from /etc/pki/tls/openssl.cnf ...
0
votes
1answer
246 views

valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed

System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed Symptoms: wget https://api.tcell.io will result in this error: ERROR: cannot verify api.tcell.io's ...
-2
votes
1answer
144 views

Command line HMAC calulation is different from Node.JS crypto.createHmac('sha256')

In Node.js I use following code hash = crypto.createHmac('sha256', SECRET).update(fileContent).digest('hex'); to calculate HMAC. C++/Qt code analogue QByteArray hash = QMessageAuthenticationCode::...
0
votes
1answer
212 views

How do you use the AES key wrap cipher with the OpenSSL command line utility?

When you run the command openssl enc -ciphers a list of supported ciphers is printed. In more recent versions of the OpenSSL utility the ciphers -id-aes256-wrap, -id-aes256-wrap-pad, and -aes256-wrap ...
0
votes
2answers
210 views

Stunnel 5.x on Centos 6.5

Im looking for an stunnel 5.x RPM for Centos 6.5 so I can get TLS1.2 support. Ive looked everywhere, but cannot find one. Ive tried downloading and compiling, as per another question on here (title: ...
1
vote
1answer
228 views

Download over https on Debian not working (openssl misconfiguration?)

I'm on a Debian wheezy server and I'm trying to download stuff by https without success. When I try to use curl, it gives me this answer by example: curl: (60) SSL certificate problem, verify that ...
1
vote
1answer
368 views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here http://www.dest-unreach.org/socat/doc/socat-openssl.txt cert() { openssl genrsa -out $1....
1
vote
0answers
202 views

On Ubuntu 18.04 OpenSSL 1.1.0g - can't decrypt files, even with md5

Previously, I was encrypting with: openssl des3 -salt -in $INSECURE_CONFIG_FILE -out $CONFIG_FILE -pass pass:$PASSWORD and decrypting with: openssl des3 -d -salt -in $CONFIG_FILE -out $...
0
votes
0answers
62 views

OpenSSL Linux vs. Mac

When generating a CA: time openssl genrsa -aes256 -passout pass:test -out test.pem 4096 The latest MacBookPro 2017, returns: 9.67s user 0.02s system 99% cpu 9.713 total An old Xenon on CentOS ...
3
votes
1answer
164 views

How to install php7 on solaris 10 with OpenSSL 1.0.1

I am trying to install php7 on Solaris 10. OpenSSL 1.0.1 was installed from https://www.opencsw.org/packages/libssl1_0_0/ To check for the installed ssl I did pkginfo -i | grep -i "ssl" and I ...
0
votes
0answers
268 views

Apache SSL configuration Connection refused connect:errno=111

I am trying to configure SSL on an old opensuse server: openSUSE 11.4 (x86_64) VERSION = 11.4 CODENAME = Celadon I enabled the apache SSL module: apache2ctl -M Loaded Modules: core_module (static) ...
0
votes
0answers
12 views

How to turn back a PEM encoded PKCS#7 structure into the original SMIME message

How to turn a PEM encoded PKCS#7 structure into the original SMIME message? In other words, what is the oposite operation of openssl smime -pk7out as in cat SMIME-message.txt | openssl smime -pk7out
3
votes
2answers
763 views

openssl generating SHA-256

I'm trying to use openssl to create a cryptographic hash of a file using HMAC-SHA-256. I'm confused as to why I'm seeing a 'no such file or directory' error on the output. The key I'm using is in a ...
0
votes
1answer
177 views

Old CentOS 5.6, Due to github.com delete the TLSv1/TLSv1.1 support, How can I access to github.com/repo.git using git system

Now I have a cluster with Rocks 5.4 based on CentOS 5.6. When I git push the code to github.com, I run into the errors: error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert ...
1
vote
0answers
101 views

Hmac with openssl's command line tool with a key that might contain null bytes

Let's say I want to do an SHA256HMAC digest of a file with the openssl command line utility: openssl dgst -sha256 -hmac "$(cat $KEY_FILE)" -hex "$TARGET_FILE" How can I protect this command against ...
0
votes
0answers
68 views

PKCS#11 Installation error in Kali Linux

I am working on a project which requires pkcs11 library. I downloaded the git repository and installed it for my openssl-1.0.2n. But when I ran the following command in my /opt/openssl/1.0.2n/lib lib ...
0
votes
0answers
20 views

Generate Self-sign certificate from existing CA

I have following two file on Linux Web server. CA = cacert.pem Key = key.pem Now i want to generate certificate from it so what i need to do?
1
vote
0answers
234 views

SSLPassPhraseDialog: file '/usr/libexec/httpd-ssl-pass-dialog' does not exist

When I'm starting apache with this command sudo /usr/sbin/httpd -k start, I get the following error: Syntax error on line 18 of /etc/httpd/conf.d/ssl.conf: SSLPassPhraseDialog: file '/usr/libexec/...
3
votes
0answers
786 views

Curling a https url via a proxy results in NSS error 5938

A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7). We added their IP address to our software firewall but nothing was going through. They ...
1
vote
1answer
445 views

libapache2-mod-php7.0 not working on Debian Stretch

I am trying to install PHP 7.0 on Debian 9.4. When I install libapache2-mod-php7.0 I get the following error. Syntax error on line 141 of /etc/apache2/apache2.conf: Syntax error on line 3 of /etc/...
0
votes
2answers
1k views

Self-signed certificate gives error “x509: certificate signed by unknown authority”

I want to establish a secure connection with self-signed certificates. I used the following conf file for openssl [req] distinguished_name = req_distinguished_name x509_extensions = v3_req prompt = ...
1
vote
1answer
53 views

Tomcat Crashes By throwing Fatal Error In JRE

I am running Tomcat 9 with jdk 1.8.0_162-b12 on Ubuntu 16.04 64-bit Server. Development is done in Java. The error in catalina.out shows this- A fatal error has been detected by the Java Runtime ...