Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

156 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8
votes
1answer
6k views

Installing openssl on R

I'm trying to install openssl inside R, using install.packages('openssl'), but I'm getting an error message: * installing *source* package ‘openssl’ ... ** package ‘openssl’ successfully unpacked and ...
5
votes
0answers
316 views

Is it possible to decrypt a single isolated dm-crypt sector (perhaps using OpenSSL)?

Given full knowledge of the parameters required to open a dm-crypt volume, is it possible to decrypt a single sector taken from such a volume ? Assume that the original volume is not available but ...
5
votes
1answer
3k views

OpenSSL converting chars to UTF-8 literals

I'm running a simple PKI web application in Php that uses OpenSSL shell commands and stores information in a text database. I have to deal with non-ASCII input characters (eg. German) but when a new ...
4
votes
1answer
2k views

Gem install producing “OpenSSL” error

For at least a week now i have been trying to install Bettercap on my Raspberry PI using gem but whenever i type in: sudo gem install bettercap i receive an error message that says ERROR: While ...
4
votes
0answers
493 views

two piped commands, each needs to read password from stdin

Is there a way to sensibly do this: scp user@host:/path/to/file /dev/tty | openssl [options] | less without creating a file, and without having to supply either password directly in arguments? The ...
4
votes
1answer
5k views

Building python with openssl support

I have the following directory structure: nchambers@nchambers-305E4A-305E5A-305E7A:~/mini-bin$ la 2to3 cpp-5.3.0 gcov-5.3.0 grmid-5.3.0 objcopy-2.25.1 ...
3
votes
0answers
9k views

Curling a https url via a proxy results in NSS error 5938

A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7). We added their IP address to our software firewall but nothing was going through. They ...
3
votes
0answers
149 views

Tips for Troubleshooting Remote IMAP/SMTP Host Connection with OPENSSL and NMAP

I work in tech support for a company that has an email inbox integration. Users can input IMAP and SMTP host names and ports and we will attempt to open a connection with those ports and host names so ...
3
votes
0answers
305 views

Is it possible to set up a lxc or docker container for a X application?

I need to use the Cisco packet tracer for college(I use Debian testing). Now I actually like that application, except it has one annoyance... it needs an ancient libssl version to run. What is even ...
3
votes
1answer
827 views

How do I find the ultimate CA cert in a 'valid' certificate

So I look after 2 web servers, one old, one new. The old one uses our old url, the new, our new url, both are internally signed. The HTTPS certificate is about to expire on the old one, so I've ...
3
votes
0answers
4k views

Apache server does not start on CentOS

I'm trying to install ssl certificate on a new linode machine with centos 7. I installed httpd and open_ssl. I followed this guide for apache: https://www.digitalocean.com/community/tutorials/how-to-...
3
votes
0answers
2k views

kerberos preauth pkinit failed to initialize: No realms configured correctly for pkinit support

I have successfully installed Kerberos on debian wheezy and can perform service authentication (Apache, ssh) with Kerberos tickets from kinit. I would like to use certificates for kinit (pkinit) ...
3
votes
0answers
4k views

Cross Compiling Openssl for MIPS

I've been trying to cross compile Ncat for the MIPS architecture (big endian), and I really need SSL support, so I first must compile OpenSSL. I downloaded the latest version from Github and ...
3
votes
0answers
5k views

FIPS integrity test failed

I recently enabled the fips module in my CentOS 6 machine using this guide. During reboot, the system halted with this error: SELF TEST FAILED (/usr/lib64/hmaccalc/sha512hmac.hmac) dracut: FATAL: ...
3
votes
1answer
850 views

SSL Configurations for Intermediate certificate

I had implement a mutual certificate authentication and it worked successfully for following steps : create root ca (self-signed) create server certificate and sign it with ca private key create ...
2
votes
2answers
879 views

ssl needed for Python-3.8 on RHEL 6

I'm working with a older server running Linux 6. I was asked to install aws-CLI on the machine to allow us to start saving files directly to s3 buckets. This requires python 3.4 or higher (starting ...
2
votes
0answers
877 views

Overriding OpenSSL CipherString at a more granular level in Debian 10?

In Debian 10, the upgraded OpenSSL package has more secure defaults (per https://wiki.debian.org/ContinuousIntegration/TriagingTips/openssl-1.1.1) which causes problems for some of my existing ...
2
votes
0answers
330 views

Cannot login into XFCE screen blink and return back to login screen

Recently a kernel upgrade to 4.19.0-5amd64 broke my desktop environment and produced other problems, some of them I already asked here - Unmet broken dependencies debian and radeon failed vce resume ...
2
votes
0answers
195 views

PHP Curl when accessing SSL slows down connection. How to correct?

After migrating to a new server, our scripts slowed down dramatically. Some troubleshooting showed that the slowdown occurred during Curl connections as the server was trying to load the SSL cert. ...
2
votes
0answers
138 views

Charm crypto library - unit tests failing with undefined symbol: BN_is_negative

I'm trying to build and test the python Charm crypto library from source. It compiles and installs ok, but I get 91 cases of undefined symbol: BN_is_negative when running sudo make test: /charm/charm/...
2
votes
0answers
506 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...
2
votes
0answers
2k views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
2
votes
0answers
402 views

On Ubuntu 18.04 OpenSSL 1.1.0g - can't decrypt files, even with md5

Previously, I was encrypting with: openssl des3 -salt -in $INSECURE_CONFIG_FILE -out $CONFIG_FILE -pass pass:$PASSWORD and decrypting with: openssl des3 -d -salt -in $CONFIG_FILE -out $...
2
votes
0answers
805 views

Why is Apache HTTP not offering the best available cipher suite from OpenSSL?

I am using OpenSSL version 1.0.2k and Apache HTTP version 2.4.27. Based on this advice in section “Putting It All Together", I queried OpenSSL for what cipher suites are available as so: openssl ...
2
votes
1answer
1k views

CentOS / http2 / ALPN

Now that CentOS 7.4 CR has delivered OpenSSL 1.0.2, I should be able to serve http/2 pages to Chrome, but I still see messages that ALPN is not enabled. OpenSSL 1.0.2 is installed: $ rpm -qa |grep ...
2
votes
1answer
1k views

What is the correct arrangement of symlinks to allow both openssl 1.1.0 and 1.0.2 shared libraries to co-exist?

I want to have openssl-1.0.2 and openssl-1.1.0 both available for dynamic linking to different applications. I'm slightly unsure about this, because I would expect 1.0.2 to be installed in a file ...
2
votes
1answer
469 views

Proper way to encrypt a .deb package

I want to be able to send my customer "firmware" updates to machines already sold to them. They aren't networked devices so it needs to be something done manually. Those hooks for getting the files ...
2
votes
0answers
304 views

Cannot use Yast CA management module from command line

I am trying to create a new certificate authority using Yast as follows: yast2 ca_mgm createCA caname=democa cn=democa email=peter@gmail.com days=3650 keyLength=2048 keyPasswd=sillypassword But it ...
2
votes
0answers
802 views

upgrade openssl for old version xampp

I am trying to enable TLS 1.1 on my xampp apache server, but it seems like the version of OpenSSL is too old for that. (Error: SSLProtocol: Illegal protocol 'TLSv1.1') Can anyone help me how I can ...
2
votes
0answers
612 views

Port 443 switching to filtered after openssl test

While I was investigating this issue related to SSL (published as OT in StackOverflow), I found a curious behaviour. Premise The premise is that I was trying to understand why my web server (hosted ...
2
votes
0answers
397 views

nginx crit error tlsv1 bad certificate status response:SSL alert number 113

I´m using nignx 1.4.6 with a let`s encrypt cert and getting a critical error in the nginx logs from time to time: [crit] 67#0: *2690713 SSL_do_handshake() failed (SSL: error:14094459:SSL routines:...
2
votes
0answers
2k views

The certificate is not valid for the name localhost

I am trying to generate a certificate for serving both from localhost and other names I used the following commands openssl genrsa -out nebula3.key 1024 openssl req -key nebula3.key -new -out ...
2
votes
0answers
3k views

SSL: certificate signature failure

The situation is: there is a root certificate (a „home brew”) there is an „intermediary” certificate signed by the previous one (also a „home brew”) there are two hosts (A and B) on which the above (...
2
votes
1answer
3k views

How to Resolve undefined reference to 'RAND_egd'

Debian 8 Jessie, OpenSSL version 1.1.0, cURL version: 7.50.2 I am trying to build curl on a Linux Debian system. All stages go well up until trying to build with make command. The linking stage fails ...
2
votes
1answer
504 views

How do I specify a requirement for a minimum version of openssl in RPM spec file?

The rpm spec file for my package looks like this: Requires:mysql-server >= 5.5.30, java >= 1.6, p7zip, openssl >= 1.0.2g I have an RHEL system where the OpenSSL version is this: [ag@rhel1]#...
2
votes
2answers
2k views

How to use afl-fuzz (American Fuzzy Lop) with openssl

I am trying to use afl-fuzz with openssl in Ubuntu. A normal usage of afl-fuzz would be: afl-gcc test.c //-- this will produce a.out mkdir testcases echo "Test case here." > testcases/case1 afl-...
2
votes
1answer
1k views

Protected multilib versions: openssl

I'm running on Centos 6.2 x86_64 Trying to install ruby 2.1.2 ---> Package libselinux-devel.x86_64 0:2.0.94-5.2.el6 will be installed --> Processing Dependency: libsepol-devel >= 2.0.32-1 ...
2
votes
0answers
900 views

How to get certificate type from SSL Certificate of a domain?

Is there any way to get Certificate Type (EV/OV/DV) from the certificate? I tried the following command and get entire certificate at output, but can't find Certificate Type from it. $ openssl ...
2
votes
0answers
493 views

SMTP works via Mail client but not via openssl

I'm trying to troubleshoot an SMTP issue. My credentials work fine via the OS X Mail client (and in other areas), so the credentials are definitely good. However, when I try to submit them via: ...
2
votes
0answers
825 views

Make SSL certificate trusted in browser via SSL Bump Squid

my goal is to insert custom HTML injections in HTTPS pages. I've setup Squid with SSL Bump. I generated a self signed certificate. With this setup I'm getting client side warnings that the ...
2
votes
1answer
282 views

Get OpenSSL FIPS Module Version Number

Is there a way for a user to determine what version of the FIPS module was compiled into OpenSSL? When I say "as user", I mean is there some functionality buried in the command line interface to get ...
2
votes
0answers
92 views

libpam load pam modules at every connection

I want to reduce ssh connection time, by debugging sshd have found that libpam is loading all pam modules specified in /etc/pam.d/sshd file at every connection. How to configure/modifiy libpam such ...
2
votes
0answers
7k views

'Git clone' times out with 443 error message

git clone -v https://github.com/me/myproj Cloning into 'myproj'... <minutes pass> error: Failed connect to github.com:443; Operation now in progress while accessing https://github.com/me/myproj....
1
vote
0answers
31 views

sshfs troubleshooting: what would cause openssl to fail?

I believe sshfs requires an sftp server on the remote computer (router): ipkg list_installed | grep -i sftp openssh-sftp-server - 5.9p1-1 - sftp-server only from a FREE version of the SSH protocol ...
1
vote
0answers
62 views

CMake failed to detect installed OpenSSL which was compiled from source

I am trying to compile Hadoop 3.2.0 from source on AIX 7.1 as the pre-built 32-bit binary is incompatible with the 64-bit machine we are using. The OpenSSL is built from source so I have both the ...
1
vote
0answers
128 views

TLS certificate works on Ubuntu 18.04 but not on Centos 7.6

I have a set of keys that authenticate me to some external server. They all use a root CA that's not installed in common distributions. I am validating if the external server responds, using a Docker ...
1
vote
1answer
57 views

Certificate Authority Not Working

If my understanding is correct, a CA acts like a parent certificate that is used to verify other certificates that have been signed by the CA certificate without having to install multiple server ...
1
vote
0answers
147 views

Why is “git pull” trying to use CURL_OPENSSL_3 while libcurl4-openssl-dev is installed?

When I run git pull I get the following error: git-remote-https: /usr/lib/x86_64-linux-gnu/libcurl.so.4: version `CURL_OPENSSL_3' not found (required by git-remote-https) Why is git trying to use ...
1
vote
1answer
161 views

Errors when trying to build openssl-1.0.2l

Debian 32-bit host PC, with a pre-built toolchain for ARM target in /opt dir. I tried to cross-compile project from the source code, got a lot of errors when system tried to build openssl package: &...
1
vote
0answers
261 views

Decrypt password with openssl

I have an old shell script, created by a person that is not in the company anymore, to encrypt and decrypt our access password. The old script is basically this: PFILE=/home/user/keys/pwfile if [ ! -...