Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
0
votes
1answer
505 views

Default Directories Not Working In OpenSSL Configuration File

I have set the directory in the /etc/ssl/openssl.cnf file but every time I issue the command openssl req -x509 -newkey rsa:4096 -keyout cakey.pem -out cacert.pem -days 3650 it places the files in ...
0
votes
0answers
60 views

What is the sha1sum -c equivalent with OpenSSL?

I generated checksums for a list of files and stored them a .sha1 file by using the following command: openssl dgst -r -sha1 -out sums.sha1 * which is the equivalent of: sha1sum * > sums.sha1 ...
0
votes
1answer
247 views

how to use openssl random key in bash script?

Below is my sample code: KEY_FILE=/tmp/key.txt KEY=$(openssl rand 16) echo $KEY > $KEY_FILE ID=2345 source .mysqlCredentials.txt MySqlCommand="mysql -h $IP -u $UserName -p$Password $DBName -e" $...
0
votes
1answer
332 views

Using a tool that can't find libssl 0.9.8 when I have openssl 1.0.2 for tool to work and receiving error

I am working with a tool(Netscout ASR) that uses a community string to access flow data in my network. I am using this tool on a rhel7 server that has: openssl version OpenSSL 1.0.2k-fips 26 Jan ...
0
votes
3answers
1k views

Why is the output of “openssl passwd” different each time?

The openssl passwd command computes the hash of a password typed at run-time or the hash of each password in a list. The password list is taken from the named file for option -in file, from stdin ...
1
vote
0answers
565 views

OPENSSL_ALGORITHM_DEFINES no longer supported

I am trying to compile mosquitto_auth_plugin. During the compilation i get openssl error: /usr/include/x86_64-linux-gnu/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer ...
0
votes
0answers
110 views

(OPENVPN/OPENSSL) Configuration file routines:STR_COPY:variable has no value:conf_def

I can't run "openssl req" to create a new key, the output presents an error error on line 39 of /etc/openvpn/openvpn-ssl.cnf 140264035997600:error:0E065068:configuration file routines:STR_COPY:...
0
votes
0answers
219 views

u-boot FIT image signing in dtb

Creating a dtb to attach to u-boot that has public keys to verify a signed FIT image is a 2 step process: 1) dtc u-boot_pubkey.dts -O dtb -o u-boot_pubkey.dtb 2) tools/mkimage -f fitImage.its -K u-...
3
votes
3answers
8k views

OpenSSL 1.1.1b warning: Using -iter or -pbkdf2 would be better while decrypting a file encrypted using OpenSSL 1.1.0g

Today I got this warning issued by OpenSSL in Cygwin after updating some packages, I believe openssl was included: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be ...
0
votes
0answers
187 views

OpenSSL Missing Ciphers

I have two instances of RHEL (6.2 and 6.5) both using the same versions of OpenSSL and OpenSSH (albeit different versions). Red Hat Enterprise Linux Server release 6.2 # yum info openssl Installed ...
0
votes
0answers
270 views

How to compile Nagios NRPE with static OpenSSL libraries

I'm compiling NRPE to deploy on several remote systems. The remote single-board computers run a stripped version of Debian on arm5 architecture. I'd like to avoid installing both OpenSSL and NRPE on ...
0
votes
1answer
142 views

SSL Cert in Keystore and Browser cert are different

Bitbucket and Jenkins, in-order to talk to each other we have installed SSL certs in Bitbucket server. Issue started when Jenkins team used to mess up with their configuration and end up changing ...
0
votes
0answers
125 views

Enable SSLV3 request in libcurl 7.52.1

I am using libcurl 7.52.1 to send http request so far I have successfully tried to send TLS request down to TLSV1.0. I need to send SSLV3 requests how can I enable SSLV3 request on my current libcurl ...
0
votes
1answer
2k views

Can openssl convert SSH public key to a PEM file without private key?

So I've seen many many posts on how to do the conversion with private key; but does anyone one know how I can do this with just only public key? As I'm trying to convert someone else's public key. Or ...
1
vote
0answers
538 views

Curl is not supporting SSL (./configure --with-ssl)

I am trying to install curl in opensuse Leap 15.0. I have downloaded the .zip file from this link (version 7.63.0) I am running this command from the curl root directory: ./configure --with-ssl=/usr/...
0
votes
1answer
222 views

Where to get info about deprecated options of OpenSSL RSAUTIL of Mojave?

It seems that on macOS since Mojave (OSX 10.14.3), the -ssl option had been deprecated from RSA Utils (rsautl command) on it's default OpenSSL. $ sw_vers ProductName: Mac OS X ProductVersion: 10....
1
vote
1answer
670 views

How to install self signed .pem certificate for an application in OpenSuse?

Recently my workplace has updated the internet usage policies and imposed a Sophos security layer to monitor the traffic. I am trying to clone a git repo (using git clone command) but getting this ...
0
votes
2answers
351 views

split (one-line) cert bundle into 2 file

I have one RSA PRIVATE KEY and one CERTIFICATE in one line, and I have to split it to one .key and .crt file. Is it possible with sed or/and awk? EDI1: example (as you can see its literally one line)...
2
votes
1answer
678 views

NanoPi M4 - RK3399: Apache2 + SSL: Large download hangs

I've a brand new setup of Apache2 running under Debian 9 (armbian on NanoPi M4). Everything works fine until I try to download a large file over HTTPS. Small files download successfully however, ...
2
votes
0answers
195 views

PHP Curl when accessing SSL slows down connection. How to correct?

After migrating to a new server, our scripts slowed down dramatically. Some troubleshooting showed that the slowdown occurred during Curl connections as the server was trying to load the SSL cert. ...
11
votes
1answer
3k views

how to make Gnu/Linux trust a certificate that's trusted by Windows out-of-the-box?

There is a server with a broken SSL chain, as reported by this SSL check: I know this is a problem that should be solved on the server itself, but sometimes this is hard to have fixed (I'm not the ...
0
votes
1answer
279 views

How to run apache httpd 2.4.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, on CentOS 7.6?

I'm trying to run apache httpd 2.4.6 on CentOS 7.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, but apache is not accepting this as a valid key. I ensured all ...
3
votes
1answer
832 views

CERTIFICATE_VERIFY_FAILED when connecting to GMail with offlineimap

Under an Arch Linux, I want to use offlineimap to synchronize to GMail like this. [general] accounts = Gmail maxsyncaccounts = 3 [Account Gmail] localrepository = LocalGmail remoterepository = ...
0
votes
1answer
377 views

How to get openssl to work on Debian 9.5

This is my distribution I use root@ci-server:~/temp# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 9.5 (stretch) Release: ...
1
vote
1answer
657 views

Update OpenSSH on RHEL 5.5

I must update OpenSSH on my RHEL 5.5 because of CVE-2018-15473. My OpenSSH version is OpenSSH_4.3p2 and must be update to OpenSSH_7.9, when i want to do this i get that message when using configure ...
0
votes
1answer
364 views

SSL and programs like wget,curl with https on hpux

Simple question: every program (wget,curl,etc) which can use https works perfect on linux,and bad on hpux. See this example using https://google.com on linux wget https://www.google.com/ --2018-12-...
0
votes
1answer
3k views

CA certificates location in Ubuntu 18.04

Can you please point to me where can I locate the CA certificates file in Ubuntu 18.04? I have a program that needs the path that point to the CAs directory for certs. validation.
0
votes
4answers
3k views

How are the public and private keys stored and related on both client and server?

I have tried to match the public keys and private keys on both my client and server as well as the configuration files but cannot get my head around the mismatches. I can successfully connect to the ...
0
votes
1answer
73 views

How to connect PHP 5.6 to SQL db after compilation

I installed PHP 5.6 from source on Debian server 9 server. The OpenSSL version in Debian 9 is too new for PHP 5.6, so I had to compile an older version in /opt/openssl to use it with PHP 5.6. ( ...
1
vote
3answers
2k views

Unable to install openssl-libs

I'm trying to install dotnet-sdk-2.1 but it's failing due to that fact that openssl-libs isn't found. I've tried manually installing it using yum, but to no avail. yum repolist
-3
votes
2answers
2k views

Calling sh with script on stdin and passing command line arguments

This works of course. I can run ./test1.sh cats and the argument cats is passed correctly to ls. $ cat test1.sh #!/bin/sh ls -l $1 Can you tell me how do I make this second example — the same ...
1
vote
1answer
679 views

nginx 1.14 on Debian Testing (buster) - no TLS 1.0 / 1.1?

Just updated Debian from "stable" 9.* to "testing" 10.*. Have nginx 1.14 - used to come from "stable backports" now included in Debian itself. Seeing a strange issue with TLS versions in nginx. TLS ...
2
votes
0answers
501 views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
0
votes
1answer
59 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...
3
votes
1answer
1k views

wpa_supplicant not connecting, because SSL3 is unsupported

I've a laptop running Debian GNU/Linux Unstable with Network Manager. Since an update of OpenSSL (1.1.1 I think), I can't connect to a Wi-Fi network using WPA2 Enterprise with PEAP (MSCHAPv2). In /var/...
1
vote
0answers
1k views

OpenSSL: how to encrypt/decrypt?

In Debian, I'll encrypt a file or text: $ echo test | openssl enc -aes-256-cbc -in - -pass pass:password -out /tmp/test.enc Then move the file to macOS (Mojave) and attempt to decrypt: $ openssl ...
2
votes
0answers
138 views

Charm crypto library - unit tests failing with undefined symbol: BN_is_negative

I'm trying to build and test the python Charm crypto library from source. It compiles and installs ok, but I get 91 cases of undefined symbol: BN_is_negative when running sudo make test: /charm/charm/...
0
votes
1answer
2k views

EVP_CIPHER_CTX in openssl 1.1.x

error: storage size of 'ctx' isn't known EVP_CIPHER_CTX ctx; I am getting this error with openssl -1.1.1. Compared openssl-1.0.* and openssl-1.1.1 and this EVP_CIPHER_CTX struture has not been made ...
10
votes
3answers
10k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I would like it to echo "working" AND if the ...
2
votes
0answers
506 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...
2
votes
1answer
2k views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
0
votes
1answer
435 views

The same curl binary shows different version of openssl on 2 different servers

so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version: OpenSSL/1.1.0f After that, I copied the very same library into ...
1
vote
1answer
273 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
631 views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
2
votes
0answers
2k views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
373 views

Manual install of curl can't find openssl

My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option. I got the following warning ...
-1
votes
1answer
60 views

Compilation fails on version 1.0.2p

Compilation fails with linker error although it complains with warning messages. logs: # gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto server.c: In function ‘InitServerCTX’: server.c:62:5: ...
1
vote
1answer
1k views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
1
vote
4answers
4k views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
1
vote
1answer
305 views

syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency

Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases Amidst ./configure --prefix=/app/...

1 2 3 4 5 12