Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
1
vote
1answer
411 views

Errors when trying to build openssl-1.0.2l

Debian 32-bit host PC, with a pre-built toolchain for ARM target in /opt dir. I tried to cross-compile project from the source code, got a lot of errors when system tried to build openssl package: &...
-1
votes
1answer
1k views

Why are session resumption and early data with TLS 1.3 not working for my NGINX 1.16 server?

Server Information: freebsd@FreeBSD-Website:~ % freebsd-version 12.0-RELEASE-p5 freebsd@FreeBSD-Website:~ % /usr/local/bin/openssl version OpenSSL 1.1.1c 28 May 2019 freebsd@FreeBSD-Website:~ % nginx ...
1
vote
0answers
380 views

ssl not working in vsftpd; write:errno=32

this is what i have tried: 1) vsftpd.pem created using the following self-signed certificate: openssl req -x509 -nodes -newkey rsa:4096 -keyout $certname -out $certname -days 365 2) owner/...
0
votes
0answers
1k views

“bad decrypt” error while decrypting with openssl

I have created 2 scripts to encrypt and decrypt a password inside a file. The encryption script is as follow: set -x PFILE=/home/user/crypt/pfile echo "changing PASSWORD" P=`echo 'rawpassword' | ...
1
vote
2answers
1k views

Apache 2.4 with self-signed certificates always redirect to the default virtual host

I've been trying to make work virtual hosts with self-signed certificates with Apache 2.4. I've tried many setup combinations but no matter what, every virtual host I try in Firefox goes straight to ...
1
vote
0answers
797 views

Decrypt password with openssl

I have an old shell script, created by a person that is not in the company anymore, to encrypt and decrypt our access password. The old script is basically this: PFILE=/home/user/keys/pwfile if [ ! -...
-3
votes
1answer
2k views
0
votes
1answer
1k views

Cannot generate proper RSA keys using openssl genpkey utility with RSA-PSS option

I am trying to create an RSA key using openssl on Linux and then converting it to PuTTY format so that I can use it from my Windows PC as well. openssl genpkey -algorithm RSA-PSS -out myKey.pem -...
1
vote
0answers
549 views

Linux kernel cross-compile failure at arch/arm64/crypto

I encountered an error while trying to cross-compile Linux kernel v.5.0.0 on Ubuntu 18.04. I tested two different versions of aarch64-linux-gnu-gcc: v7.4.0 and v5.5.0, but both results in the same ...
1
vote
0answers
278 views

Can't use pip in red hat 4.4.7

I've installed python 3.7 and pip, but running pip gives me an error: pip3.7 install django pip is configured with locations that require TLS/SSL, however the ssl module in Python is not available. ...
0
votes
1answer
254 views

FFmpeg claims OpenSSL is not compatible with GPL v3?

FFmpeg says in the 4.1 docs, The Fraunhofer FDK AAC and OpenSSL libraries are under licenses which are incompatible with the GPLv2 and v3. To the best of our knowledge, they are compatible with the ...
-2
votes
1answer
155 views

How to convert a certificate in .pfx format to .jks in HP-UX server

I have a task to convert a .pfx SSL certificate to .jks format in a HP-UX B.11.31 server to be configured in our application's server.xml file, (keystoreFile=) for our 8090 connector port.
0
votes
1answer
2k views

Default Directories Not Working In OpenSSL Configuration File

I have set the directory in the /etc/ssl/openssl.cnf file but every time I issue the command openssl req -x509 -newkey rsa:4096 -keyout cakey.pem -out cacert.pem -days 3650 it places the files in ...
0
votes
0answers
113 views

What is the sha1sum -c equivalent with OpenSSL?

I generated checksums for a list of files and stored them a .sha1 file by using the following command: openssl dgst -r -sha1 -out sums.sha1 * which is the equivalent of: sha1sum * > sums.sha1 ...
0
votes
1answer
580 views

how to use openssl random key in bash script?

Below is my sample code: KEY_FILE=/tmp/key.txt KEY=$(openssl rand 16) echo $KEY > $KEY_FILE ID=2345 source .mysqlCredentials.txt MySqlCommand="mysql -h $IP -u $UserName -p$Password $DBName -e" $...
0
votes
1answer
851 views

Using a tool that can't find libssl 0.9.8 when I have openssl 1.0.2 for tool to work and receiving error

I am working with a tool(Netscout ASR) that uses a community string to access flow data in my network. I am using this tool on a rhel7 server that has: openssl version OpenSSL 1.0.2k-fips 26 Jan ...
4
votes
3answers
5k views

Why is the output of “openssl passwd” different each time?

The openssl passwd command computes the hash of a password typed at run-time or the hash of each password in a list. The password list is taken from the named file for option -in file, from stdin ...
1
vote
0answers
822 views

OPENSSL_ALGORITHM_DEFINES no longer supported

I am trying to compile mosquitto_auth_plugin. During the compilation i get openssl error: /usr/include/x86_64-linux-gnu/openssl/opensslconf.h:18:3: error: #error OPENSSL_ALGORITHM_DEFINES no longer ...
0
votes
1answer
513 views

(OPENVPN/OPENSSL) Configuration file routines:STR_COPY:variable has no value:conf_def

I can't run "openssl req" to create a new key, the output presents an error error on line 39 of /etc/openvpn/openvpn-ssl.cnf 140264035997600:error:0E065068:configuration file routines:STR_COPY:...
11
votes
3answers
24k views

OpenSSL 1.1.1b warning: Using -iter or -pbkdf2 would be better while decrypting a file encrypted using OpenSSL 1.1.0g

Today I got this warning issued by OpenSSL in Cygwin after updating some packages, I believe openssl was included: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be ...
0
votes
0answers
322 views

OpenSSL Missing Ciphers

I have two instances of RHEL (6.2 and 6.5) both using the same versions of OpenSSL and OpenSSH (albeit different versions). Red Hat Enterprise Linux Server release 6.2 # yum info openssl Installed ...
0
votes
1answer
300 views

SSL Cert in Keystore and Browser cert are different

Bitbucket and Jenkins, in-order to talk to each other we have installed SSL certs in Bitbucket server. Issue started when Jenkins team used to mess up with their configuration and end up changing ...
0
votes
0answers
163 views

Enable SSLV3 request in libcurl 7.52.1

I am using libcurl 7.52.1 to send http request so far I have successfully tried to send TLS request down to TLSV1.0. I need to send SSLV3 requests how can I enable SSLV3 request on my current libcurl ...
1
vote
1answer
4k views

Can openssl convert SSH public key to a PEM file without private key?

So I've seen many many posts on how to do the conversion with private key; but does anyone one know how I can do this with just only public key? As I'm trying to convert someone else's public key. Or ...
1
vote
0answers
983 views

Curl is not supporting SSL (./configure --with-ssl)

I am trying to install curl in opensuse Leap 15.0. I have downloaded the .zip file from this link (version 7.63.0) I am running this command from the curl root directory: ./configure --with-ssl=/usr/...
0
votes
1answer
332 views

Where to get info about deprecated options of OpenSSL RSAUTIL of Mojave?

It seems that on macOS since Mojave (OSX 10.14.3), the -ssl option had been deprecated from RSA Utils (rsautl command) on it's default OpenSSL. $ sw_vers ProductName: Mac OS X ProductVersion: 10....
1
vote
1answer
2k views

How to install self signed .pem certificate for an application in OpenSuse?

Recently my workplace has updated the internet usage policies and imposed a Sophos security layer to monitor the traffic. I am trying to clone a git repo (using git clone command) but getting this ...
0
votes
2answers
559 views

split (one-line) cert bundle into 2 file

I have one RSA PRIVATE KEY and one CERTIFICATE in one line, and I have to split it to one .key and .crt file. Is it possible with sed or/and awk? EDI1: example (as you can see its literally one line)...
2
votes
1answer
2k views

NanoPi M4 - RK3399: Apache2 + SSL: Large download hangs

I've a brand new setup of Apache2 running under Debian 9 (armbian on NanoPi M4). Everything works fine until I try to download a large file over HTTPS. Small files download successfully however, ...
3
votes
1answer
380 views

PHP Curl when accessing SSL slows down connection. How to correct?

After migrating to a new server, our scripts slowed down dramatically. Some troubleshooting showed that the slowdown occurred during Curl connections as the server was trying to load the SSL cert. ...
11
votes
1answer
3k views

how to make Gnu/Linux trust a certificate that's trusted by Windows out-of-the-box?

There is a server with a broken SSL chain, as reported by this SSL check: I know this is a problem that should be solved on the server itself, but sometimes this is hard to have fixed (I'm not the ...
0
votes
1answer
465 views

How to run apache httpd 2.4.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, on CentOS 7.6?

I'm trying to run apache httpd 2.4.6 on CentOS 7.6 with a self-signed certificate signed with an elliptic curve key brainpoolP384t1, but apache is not accepting this as a valid key. I ensured all ...
3
votes
1answer
1k views

CERTIFICATE_VERIFY_FAILED when connecting to GMail with offlineimap

Under an Arch Linux, I want to use offlineimap to synchronize to GMail like this. [general] accounts = Gmail maxsyncaccounts = 3 [Account Gmail] localrepository = LocalGmail remoterepository = ...
0
votes
1answer
635 views

How to get openssl to work on Debian 9.5

This is my distribution I use root@ci-server:~/temp# lsb_release -a No LSB modules are available. Distributor ID: Debian Description: Debian GNU/Linux 9.5 (stretch) Release: ...
1
vote
1answer
1k views

Update OpenSSH on RHEL 5.5

I must update OpenSSH on my RHEL 5.5 because of CVE-2018-15473. My OpenSSH version is OpenSSH_4.3p2 and must be update to OpenSSH_7.9, when i want to do this i get that message when using configure ...
0
votes
1answer
837 views

SSL and programs like wget,curl with https on hpux

Simple question: every program (wget,curl,etc) which can use https works perfect on linux,and bad on hpux. See this example using https://google.com on linux wget https://www.google.com/ --2018-12-...
4
votes
1answer
8k views

CA certificates location in Ubuntu 18.04

Can you please point to me where can I locate the CA certificates file in Ubuntu 18.04? I have a program that needs the path that point to the CAs directory for certs. validation.
0
votes
4answers
6k views

How are the public and private keys stored and related on both client and server?

I have tried to match the public keys and private keys on both my client and server as well as the configuration files but cannot get my head around the mismatches. I can successfully connect to the ...
0
votes
1answer
75 views

How to connect PHP 5.6 to SQL db after compilation

I installed PHP 5.6 from source on Debian server 9 server. The OpenSSL version in Debian 9 is too new for PHP 5.6, so I had to compile an older version in /opt/openssl to use it with PHP 5.6. ( ...
1
vote
3answers
5k views

Unable to install openssl-libs

I'm trying to install dotnet-sdk-2.1 but it's failing due to that fact that openssl-libs isn't found. I've tried manually installing it using yum, but to no avail. yum repolist
-3
votes
2answers
3k views

Calling sh with script on stdin and passing command line arguments

This works of course. I can run ./test1.sh cats and the argument cats is passed correctly to ls. $ cat test1.sh #!/bin/sh ls -l $1 Can you tell me how do I make this second example — the same ...
1
vote
1answer
996 views

nginx 1.14 on Debian Testing (buster) - no TLS 1.0 / 1.1?

Just updated Debian from "stable" 9.* to "testing" 10.*. Have nginx 1.14 - used to come from "stable backports" now included in Debian itself. Seeing a strange issue with TLS versions in nginx. TLS ...
2
votes
0answers
1k views

wget a zip file from GitHub, OpenSSL error [closed]

$ wget -O sindresorhus-is-online-master.zip https://github.com/sindresorhus/is-online/archive/master.zip --2018-11-03 13:48:20-- https://github.com/sindresorhus/is-online/archive/master.zip Resolving ...
0
votes
1answer
107 views

Entropy: whats the difference between bits and bytes?

If I use openssl to generate some random data (for a keyfile, for example): openssl rand -hex 2048 >/tmp/file Is this 4097 bits (or bytes?) of entropy? -rw-rw-r-- 1 username username 4097 Oct 30 ...
3
votes
1answer
2k views

wpa_supplicant not connecting, because SSL3 is unsupported

I've a laptop running Debian GNU/Linux Unstable with Network Manager. Since an update of OpenSSL (1.1.1 I think), I can't connect to a Wi-Fi network using WPA2 Enterprise with PEAP (MSCHAPv2). In /var/...
2
votes
0answers
1k views

OpenSSL: how to encrypt/decrypt?

In Debian, I'll encrypt a file or text: $ echo test | openssl enc -aes-256-cbc -in - -pass pass:password -out /tmp/test.enc Then move the file to macOS (Mojave) and attempt to decrypt: $ openssl ...
2
votes
0answers
219 views

Charm crypto library - unit tests failing with undefined symbol: BN_is_negative

I'm trying to build and test the python Charm crypto library from source. It compiles and installs ok, but I get 91 cases of undefined symbol: BN_is_negative when running sudo make test: /charm/charm/...
0
votes
1answer
3k views

EVP_CIPHER_CTX in openssl 1.1.x

error: storage size of 'ctx' isn't known EVP_CIPHER_CTX ctx; I am getting this error with openssl -1.1.1. Compared openssl-1.0.* and openssl-1.1.1 and this EVP_CIPHER_CTX struture has not been made ...
13
votes
3answers
18k views

How to grep for unicode � in a bash script

if grep -q "�" out.txt then echo "working" else cat out.txt fi Basically, if the file "out.txt" contains "�" anywhere in the file I ...
2
votes
0answers
958 views

socat parent process killed by failed connection

Short Question Failed connection attemps to a forking socat process seem to be killing the parent process. Is this a bug? What's the best solution to this? Long Question I'm running a socat server (...

1 2
3
4 5
13