Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
3
votes
1answer
1k views

What is the correct arrangement of symlinks to allow both openssl 1.1.0 and 1.0.2 shared libraries to co-exist?

I want to have openssl-1.0.2 and openssl-1.1.0 both available for dynamic linking to different applications. I'm slightly unsure about this, because I would expect 1.0.2 to be installed in a file ...
0
votes
0answers
47 views

ssh to remote server is not working

when app user tried to connect remote server via cmd ssh <remote server dns>, it is failing with error:Couldn't obtain random bytes (error 0x2d092087) But other local users are able to connect ...
1
vote
1answer
33 views

How to encrypt a text file in a portable manner based solely on a password?

I used to use openssl aes-256-cbc, but the problem I have with this is when I try to decrypt in a different version of the distro it fails, as if it depends also on some internal key or something, ...
1
vote
3answers
3k views

Not able to connect to openldap server in ldaps mode - CentOS

I have configured my openldap server in ldaps mode. But after configuring I am not able to connect it on 636 port where as I am able to connect on 389 port [root@testldap certs]# ldapsearch -x -LLL -...
74
votes
4answers
370k views

How can I verify SSL certificates on the command line?

I'm trying to validate/verify that the rsa key, ca-bundle, and certificate stored here are ok. They are not being served by a webserver. How can I verify them?
0
votes
1answer
2k views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
1
vote
0answers
19 views

String RSA Encrypt with Public Key in bash?

I want to crypt a String with bash, Example: (No longer i using this keys after sharing. D'ont worry about this.) ~/.myprogram.publickey.txt ...
0
votes
0answers
20 views

Disable vulnerability in RHEL7 - TLSv1.2 ciphers

Using RHLE7 and I have been recommended to disable below cipher on TLSv1.2. Can someone please assist how to disable these ciphers? Try to find a config file where i can disable these entries? Please ...
2
votes
4answers
8k views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
0
votes
2answers
18 views

openssl generating sha256

i'm about to struggle with calculating a sha256 signature with the same result as <openssl dgst -sha256 -hmac> does calculate. this subject already was discussed in question. inspired by this ...
1
vote
1answer
2k views

Apache / OpenSSL configuration keywords `SSLProtocol` vs. `SSLCipherSuite`

According to the Apache docs I can configure the cipher suite with (a.o.) two different keywords and examples on Internet often use both (but not necessarily identical to below example). What is the ...
0
votes
1answer
51 views

How to convert RFC4716 private keys to PEM private keys?

How to convert RFC4716 private keys to PEM private keys in ubuntu 20.04? For our project we generated ssh keys on a device running the latest openssh software. JSch complained about authentication: ...
0
votes
0answers
27 views

How to downgrade OpenSSL from 1.1.1 to 1.0.2? Mips32rl?

ffmpeg libraries does not support HTTPS protocol on my linux stp (mips32rl enigma2) Because, newer openssl 1.1.1.. so how downgrade from 1.1.1 to 1.0.2 ? thank you
0
votes
1answer
21 views

Certificate signed with custom CA in Kubernetes not Valid

I am attempting to setup the following process. Pod starts and generates a private key and csr Submits csr to password protected service for signing and ip verification Service returns valid crt that ...
4
votes
1answer
97 views

grep -q with openssl not working

If I execute openssl x509 -in ./somecert -text | grep SCTs I get the expected output. If I use grep -q openssl x509 -in ./somecert -text | grep -q SCTs I get unable to write certificate ...
2
votes
2answers
2k views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 afl-...
1
vote
1answer
3k views

Apache SSL configuration Connection refused connect:errno=111

I am trying to configure SSL on an old opensuse server: openSUSE 11.4 (x86_64) VERSION = 11.4 CODENAME = Celadon I enabled the apache SSL module: apache2ctl -M Loaded Modules: core_module (static) ...
1
vote
1answer
1k views

libapache2-mod-php7.0 not working on Debian Stretch

I am trying to install PHP 7.0 on Debian 9.4. When I install libapache2-mod-php7.0 I get the following error. Syntax error on line 141 of /etc/apache2/apache2.conf: Syntax error on line 3 of /etc/...
1
vote
1answer
739 views

openssl command queries NGINX by ip and not hostname

Here's a situation I am having a hard time understanding. I have nginx setup with two blocks for hosts like the following server { server_name _; listen *:443 default_server deferred; ...
2
votes
1answer
2k views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
3
votes
1answer
3k views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
126 views

openssl giving me unknown option

kindly asking help for this crazy behavior: openssl x509 -noout -subject -in 01.pem subject= .... Above works, but when I try to run it for multiple files, it fails: find . -name "*.pem" -...
-1
votes
3answers
13k views

How can I upgrade OpenSSL version to openssl-1.0.1s in RHEL 5 machine?

My current openssl version is openSSL 0.9.8e-fips-rhel5. I want to upgrade this to openssl-1.0.1s. The yum update openssl will not work here. I removed openssl binaries from following path /usr/lib/...
1
vote
1answer
2k views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
1
vote
1answer
2k views

openssl issue while installing apache 2.4.23

I'm trying to install apache2.4.23 on centos 6.8 and i'm getting this : ab.c: In function 'main': ab.c:2398: warning: implicit declaration of function 'SSLv2_client_method' ab.c:2398: warning: ...
2
votes
1answer
4k views

How to Resolve undefined reference to 'RAND_egd'

Debian 8 Jessie, OpenSSL version 1.1.0, cURL version: 7.50.2 I am trying to build curl on a Linux Debian system. All stages go well up until trying to build with make command. The linking stage fails ...
5
votes
2answers
5k views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
0
votes
1answer
21 views

Convert p12 to gpg files that thunderbird can understand

I have a .p12 certificate emitted by spanish authorities. I would like to use that certificate for encryption in thunderbird. For that, I am trying to convert the certificate to gpg format so that I ...
0
votes
0answers
14 views

openssl smtp email client no email sent

I am trying to send email through openssl using script shown below but it quits after showing certificate, login and pwd are correct. #!/bin/bash username="engrmasood2002@gmail.com"; ...
51
votes
3answers
108k views

How to export CA certificate chain from PFX in PEM format without bag attributes

I have a PKCS12 file containing the full certificate chain and private key. I need to break it up into 3 files for an application. The 3 files I need are as follows (in PEM format): an unecrypted key ...
1
vote
1answer
37 views

Bash script generates 'hash hmac' different then PHP

Problem my command script generates sometimes different result then PHP hash_hmac command. Can somebody explain or show an example how it should be done. The script generates username based on ...
0
votes
2answers
35 views

openssl — is there a salt limit?

was reading another post and the example of using a salt was: openssl passwd -crypt -salt foo bar foXrpAKGo3142 but if I change the salt to openssl passwd -crypt -salt foo111 bar, I still get ...
0
votes
1answer
3k views

Problems in creating certificate with SHA256 / SHA512

I want to generate a self-signed certificate with SHA256 or SHA512, but I have problems with it. I have created a script, which should does this automatically: #!/bin/bash set -e echo "WORKSPACE: $...
44
votes
5answers
24k views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create SSHFP ...
9
votes
1answer
7k views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
4
votes
4answers
4k views

Creating a *.local ssl certificate

I am trying to set up a single SSL certificate that will make any *.local website work over https. I have all .local domains pointing back to my local machine. I use these when developing websites. A ...
3
votes
2answers
4k views

ssl needed for Python-3.8 on RHEL 6

I'm working with a older server running Linux 6. I was asked to install aws-CLI on the machine to allow us to start saving files directly to s3 buckets. This requires python 3.4 or higher (starting ...
4
votes
1answer
2k views

Gem install producing “OpenSSL” error

For at least a week now i have been trying to install Bettercap on my Raspberry PI using gem but whenever i type in: sudo gem install bettercap i receive an error message that says ERROR: While ...
0
votes
1answer
159 views

NRPE Could not complete SSL handshake - Peer did not return a ceritificate

I am getting SSL Handshake errors with NRPE after enabling SSL. It worked perfectly fine without SSL doing check_nrpe. The allowed host is correct and when run without SSL enabled it shows the proper ...
0
votes
2answers
44 views

Creating client certificate with OpenSSL

I'm trying to configure a Client Authentication Certificate with OpenSSL with this command: openssl ca -config intermediate/openssl.cnf \ -extensions usr_cert -days 7200 -notext -md sha256 \ ...
13
votes
3answers
18k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I ...
1
vote
2answers
3k views

Confused about salt in openssl encrypt file

When using openssl version 1.0.2m, I encrypted my test file as follows: openssl enc -aes-256-cbc -salt -in test.txt -out test.txt.enc Just entering password, that's what I wanted. Now, the question ...
0
votes
1answer
41 views

Raspberry PI (local) openSSL help: red-line through HTTPS fix?

I recently installed SSL on my RPi.. after using a few different tutorials.. I finally got the https:// url to resolve into showing the webpage content. However.. I had to 'ignore' the SSL warning (...
2
votes
1answer
4k views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here: EXAMPLE FOR OPENSSL CONNECTION USING SOCAT cert() { openssl genrsa -out $1.key 2048 ...
0
votes
1answer
1k views

Cannot generate proper RSA keys using openssl genpkey utility with RSA-PSS option

I am trying to create an RSA key using openssl on Linux and then converting it to PuTTY format so that I can use it from my Windows PC as well. openssl genpkey -algorithm RSA-PSS -out myKey.pem -...
0
votes
1answer
1k views

valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed

System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed Symptoms: wget https://api.xxx.io will result in this error: ERROR: cannot verify api.xxx.io's certificate,...
0
votes
1answer
2k views

Old CentOS 5.6, Due to github.com delete the TLSv1/TLSv1.1 support, How can I access to github.com/repo.git using git system

Now I have a cluster with Rocks 5.4 based on CentOS 5.6. When I git push the code to github.com, I run into the errors: error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert ...
1
vote
2answers
4k views

How to force use OpenSSL from /usr/local

I have a single board computer with a 64bit ARM CPU and AES instruction set. The provided image of Debian 8 Jessie Mate Desktop uses OpenSSL 1.0.1k build that can't use that acceleration. I've ...
22
votes
4answers
38k views

Safe way to pass password for >1 programs in bash

I'm writing a bash script, and need to ask user for his password and pass it to openssl. Whilst openssl can read the password itself, I need for two runs of the program and don't want to ask the user ...
0
votes
1answer
39 views

Tomcat http to https

I am newbie to tomcat, in that case i had my website to work under http://myserver:8080/path/login/login.html I wanted to activate https with the port 8443 https://myserver:8443/path/login/login.html ...

1
2 3 4 5
13