Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
95
votes
3answers
20k views

How do I recover from the Heartbleed bug in OpenSSL?

CVE-2014-0160 a.k.a. Heartbleed is a vulnerability in OpenSSL. It looks scary. How do I determine whether I am affected? If I'm affected, what do I need to do? Apparently upgrading isn't enough.
6
votes
2answers
10k views

Openssl upgraded via apt-get, `openssl version` showing previous version

I am running Debian Wheezy. I have just upgraded my system and should have the latest version of openssl (1.0.1g which fixes a critical bug), but it does not appear to be being used. I have run: apt-...
22
votes
4answers
38k views

Safe way to pass password for >1 programs in bash

I'm writing a bash script, and need to ask user for his password and pass it to openssl. Whilst openssl can read the password itself, I need for two runs of the program and don't want to ask the user ...
12
votes
1answer
15k views

The correct way of implementing SSL on localhost

Could anyone suggest a modern way of generating self-signed certificates to be implemented on localhost, which would be accepted by Chrome and Mozilla? I tried the openssl generation, however Mozilla ...
8
votes
1answer
19k views

How to convert SSH public key from PEM to DER format?

I'd like to convert an existing public key (generated using ssh-keygen) from PEM-format to DER-format I tried: openssl rsa -in ~/.ssh/id_rsa.pub -inform PEM -pubin -outform DER -out ~/.ssh/id_rsa....
13
votes
3answers
18k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I ...
7
votes
7answers
35k views

How do I upgrade OpenSSL?

According to these instructions: http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI I need to use OpenSSL 0.9.8k or later (right now it's on 1.0.0c) to use name based virtual hosts in apache. ...
5
votes
2answers
13k views

openssl generating SHA-256

I'm trying to use openssl to create a cryptographic hash of a file using HMAC-SHA-256. I'm confused as to why I'm seeing a 'no such file or directory' error on the output. The key I'm using is in a ...
3
votes
1answer
3k views

Generate a certificate signing request for an SSL server

I'm running CentOS 6.2 LAMP and I've just purchased an SSL certificate via Namecheap that I'm trying to install on my server. This is the certificate I purchased. How do I complete this process ...
2
votes
2answers
1k views

python2 and OpenSSL don't play together on Kali - how to fix?

I have a Kali Linux distrubution which is Kali GNU/Linux Rolling (currently version 2017.3) on amd64. I'm keeping it regularly up to date and have not meddled with system files or the package ...
1
vote
1answer
747 views

Local SSL Certificates in Chrom(e/ium) 63

I have asked a similar question here before. But the solution provided has stopped working. I am trying to get ssl certificates for local hosts. I do not need them to be official, they only need to ...
46
votes
5answers
266k views

List all available ssl ca certificates

My git client claims error: Peer's Certificate issuer is not recognized. That means it can not find the corresponding ssl server key in the global system keyring. I want to check this by looking at ...
44
votes
5answers
24k views

How do I generate SSHFP records?

I need to setup SSHFP records in the DNS for my host. I have done some searching but I haven't found any good example. What are SSHFP records? What does SSHFP records look like? How do I create SSHFP ...
28
votes
3answers
43k views

Encrypting and compressing

Is there a better way to compress and then encrypt files other than tar followed by openssl or gpg?
15
votes
3answers
39k views

How to convert ssl ciphers to curl format?

The official ssl docs list ciphers in a different format than curl takes. For instance, if I want curl to use the cipher TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA, I have to pass it curl --ciphers ...
7
votes
3answers
43k views

How can I get TLSv1.2 support in Apache on RHEL6/CentOS/SL6?

I'd like to have TLSv1.2 support in Apache on my Scientific Linux 6 (RHEL6 rebuild) server. Is there some semi-supported pathway to getting this working? Preferably with minimal custom rebuilding. ...
11
votes
0answers
6k views

OpenSSL Package Rebuild CentOS 6.4 [closed]

Rebuilding openssl with Elliptic Curves on CentOS 6.4 The strategy is: 1) Download the "official" CentOS source package (.src.rpm) 2) Modify the .spec file to enable elliptic curves. (change no-EC ...
11
votes
3answers
24k views

OpenSSL 1.1.1b warning: Using -iter or -pbkdf2 would be better while decrypting a file encrypted using OpenSSL 1.1.0g

Today I got this warning issued by OpenSSL in Cygwin after updating some packages, I believe openssl was included: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be ...
9
votes
2answers
3k views

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference?

RSA 2048 keypair generation: via openssl 0.5s via gpg 30s, why the difference There are several programs which can gerate RSA public/private keypairs GnuPG/OpenPGP for instance has a wizzard being ...
1
vote
1answer
20k views

Linux openssl CN/Hostname verification against SSL certificate

How does an Enterprise Linux system with openssl 1.0.1+ verify that the CN=hostname value in the cert matches the server it resides on? Does it use a plain old reverse DNS lookup on the IP address of ...
14
votes
3answers
36k views

bad magic number on decrypt

In April I encrypted a file using the command openssl enc -aes-256-cbc -salt -pass file:<passwordfile> < infile > outfil Now I want to decrypt it with openssl enc -d -aes-256-cbc -salt -...
3
votes
2answers
2k views

How can I encrypt a large file with OpenSSL using RSA keys?

How can I encrypt a large file with a public key so that no one other than who has the private key be able to decrypt it? I don't want to use GPG!
8
votes
3answers
7k views

How do I extract all subjects of a cacertfile with the openssl command line?

Is there an openssl command to extract all certifacte subjects of a cacertfile (a file containing several certificates like /etc/ssl/certs/ca-certificates.crt)? I tried openssl x509 -in /etc/ssl/...
7
votes
5answers
15k views

Cannot Compile Apache: “Error, SSL/TLS libraries were missing or unusable”

Arch Linux 2011.08.19 (Linux 3.4.2 i686) Apache 2.2.22 → 2.2.22 (recompile & reinstall) OpenSSL 1.0.1.c-1 These details are likely irrelevant, but: I’m using yaourt with customizepkg to build ...
5
votes
2answers
504 views

makepasswd not working properly in Debian Stretch

I am using makepasswd to generate a bunch of random passwords in a VM. After the upgrade to Stretch/Debian 9, the script either generates one or two passwords, and stops, or none at all. It seems to ...
4
votes
1answer
9k views

Install OpenSSL from source [duplicate]

I installed OpenSSL from source by: wget https://www.openssl.org/source/openssl-1.0.2h.tar.gz tar -xvzf openssl-1.0.2h.tar.gz cd openssl-1.0.2h/ ./config --prefix=/usr/local/openssl --openssldir=/usr/...
4
votes
4answers
4k views

Creating a *.local ssl certificate

I am trying to set up a single SSL certificate that will make any *.local website work over https. I have all .local domains pointing back to my local machine. I use these when developing websites. A ...
4
votes
2answers
1k views

Generate HPKP fingerprints for all certificate chain

From below command able to generate Base64 pin for only first depth certificate. But need to generate pin for all depth of certificate. openssl s_client -servername example.com -connect example.com:...
3
votes
2answers
4k views

openssl 'genpkey -algorithm RSA' vs. 'genrsa'

What is difference between below two commands? 1. openssl genpkey -algorithm RSA 2. openssl genrsa In document difference is "Private Key" and "RSA Private Key". Then.. What is diference between "...
2
votes
1answer
1k views

How to make openssl encrypt passwords like php via command line

I have this php script (encrypt.php) <?php function encrypt($pure_string, $encryption_key, $encryptionMethod = "AES-256-CBC") { $iv = "3571984260"; $encrypted_string = ...
8
votes
4answers
61k views

RHEL 6.4 and OpenSSL 1.0.1 - Dependency missing.. but it isn't?

I am trying to install phpMyAdmin, however I am getting an error about openssl libraries being missing. However, I have installed them using the ius repo; Error: Package: php-cli-5.4.26-1.el6.remi....
7
votes
2answers
6k views

libssl and libcrypto backward compatible?

I have an old server application that requires libssl.so.0.9.6 and libcrypto.so.0.9.6. My issue is I currently have libssl.so.1.0.0a and libcrypto.so.1.0.0a on my system. I tried symlinking to the ...
6
votes
9answers
39k views

nginx ./configure can't find openssl

I'm trying to install nginx and no matter what I do, nginx can't seem to find my openssl path. It looks like it's searching for files that don't exist in any of the openssl directories. Below is my ...
6
votes
1answer
641 views

Are Debian- and RedHat-style repositories compromised by Heartbleed OpenSSL bug?

The Heartbleed exploit (CVE-2014-0160) makes SSL connections using OpenSSL vulnerable to private key leakage. Does it mean that official update channels in RHEL/CentOS/etc. and Debian/Ubuntu shall be ...
3
votes
2answers
2k views

OpenSSL buffering problem

I have a stream that I would like to encrypt in real time, but the problem is that openssl encrypt only when it could read from stdin enough bytes, otherwise it waits. Look at those examples: $ (...
3
votes
1answer
1k views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
2
votes
0answers
1k views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
2
votes
1answer
7k views

compiling curl with openssl giving wrong openssl version

I have found various answers on this, but I can't get anything that works for me. I am trying to compile curl with nghttp2 on my CentOS server. I have compiled it all ok, but my problem is that curl -...
2
votes
0answers
2k views

The certificate is not valid for the name localhost

I am trying to generate a certificate for serving both from localhost and other names I used the following commands openssl genrsa -out nebula3.key 1024 openssl req -key nebula3.key -new -out ...
1
vote
1answer
387 views

Installing Python 3.7 from source with custom openssl installation: test_ssl failed [closed]

To be able to install Python from source without root permission on a Ubuntu server, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1....
1
vote
1answer
353 views

How do I find what's wrong with the certificate used for EAP-TLS?

I'm trying to connect Raspberry Pi to a EAP-TLS Wi-Fi access point. The connection fails: wlan0: CTRL-EVENT-EAP-STARTED EAP authentication started wlan0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 ...
0
votes
1answer
644 views

openssl: local installation caused certificate issue

To install Python from source without root permission, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1.1.1e.tar.gz tar -xzvf openssl-...
0
votes
1answer
176 views

dhclient OPENSSL_1_1_1

My dhcp client because some openssl version mismatch. Here is an error: debian:~$ sudo dhclient dhclient: /usr/local/lib/libcrypto.so.1.1: version `OPENSSL_1_1_1' not found (required by /lib/x86_64-...
0
votes
1answer
129 views

Hex has unknown character / in the output

I need to create a Rc2Key variable and then convert this to hexadecimal. I have done this with two commands. The Rc2Key variable has to be 16 characters long, so in my test module I used "...
0
votes
1answer
341 views

upgrade OpenSSL from 0.9.8w to 1.0.0i or 1.0.1a on Linux server [duplicate]

I want to upgrade OpenSSL from 0.9.8w to 1.0.0I or 1.0.1a. I am using os.name Linux os.version 2.6.18-164.9.1.el5
0
votes
2answers
561 views

Problem with 2 php version and openssl

Hello I got 2 errors I don't know how to solve. First: installed manually the php7.1.10 and the installed by apt-get the version 7.1.11 (following this steps). Know with a phpinfo() I get PHP Version ...
-1
votes
3answers
13k views

How can I upgrade OpenSSL version to openssl-1.0.1s in RHEL 5 machine?

My current openssl version is openSSL 0.9.8e-fips-rhel5. I want to upgrade this to openssl-1.0.1s. The yum update openssl will not work here. I removed openssl binaries from following path /usr/lib/...