Questions tagged [openssl]

OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.

Filter by
Sorted by
Tagged with
3
votes
1answer
4k views

How can I view certificate details on a smart card

I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules) I can get a listing of the certs on ...
0
votes
1answer
783 views

The same curl binary shows different version of openssl on 2 different servers

so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version: OpenSSL/1.1.0f After that, I copied the very same library into ...
1
vote
1answer
525 views

How to decrypt a file to a temporary one, and read it without saving?

say this: openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt Then rm test.txt Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
2k views

show values of an ed22519 private key stored in OpenSSH format

(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.) If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
3
votes
1answer
3k views

Apache + mod_ssl build not linking to my OpenSSL build

I have spent some time searching online but none of what I found seems to help. I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
598 views

Manual install of curl can't find openssl

My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option. I got the following warning ...
-1
votes
1answer
98 views

Compilation fails on version 1.0.2p

Compilation fails with linker error although it complains with warning messages. logs: # gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto server.c: In function ‘InitServerCTX’: server.c:62:5: ...
1
vote
1answer
2k views

Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small

Short Version of Question Assuming the existence of the relevant files, why does the following sequence of commands not work? socat tcp-listen:10001,fork exec:'/bin/cat' & socat openssl-listen:...
2
votes
4answers
8k views

How to upgrade openssl 1.0.1 in debian

TL;DR: I'm trying to install a package that needs libssl 1.0.2 or greater but can't: # dpkg -i my_package_name_3.0.1.8_amd64.deb Selecting previously unselected package my_package_name. (Reading ...
1
vote
1answer
447 views

syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency

Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases Amidst ./configure --prefix=/app/...
0
votes
0answers
598 views

How to decrypt RSA file with openssl

I have 3 files publickey.pem, aeskey.rsa.enc and img.png.aes.enc. I know that I could use openssl to decrypt the png file, but I simply don't know how to do it.
0
votes
1answer
454 views

Apache SSL problems (Centos 7)

I have deleted /etc/pki/tls/private and /etc/pki/tls/certs, after that I can't access page. I saw in logs error like [suexec:notice] [pid 30215] AH01232: suEXEC mechanism enabled (wrapper: /usr/...
3
votes
1answer
5k views

Generating duplicate certificates with OpenSSL CA

At work a lot of our internal servers have SSL certs we've generated ourselves with openssl (through some simple scripts). The generation works fine, but the subsequent handling needs improvements, as ...
1
vote
0answers
272 views

openssl hangs on server

I have a problem on the server. Commands wget, curl and dependent commands are not working when a request is via 443 port. Commands hangs on 2-3 minutes and after just say "time out": # curl -v ...
0
votes
0answers
346 views

Decrypt old openssl data

I have a git repo encrypted with openssl. I have moved the repo to a new host. The original host was using: » openssl version OpenSSL 1.0.2g 1 Mar 2016 The current host is using: » openssl version ...
1
vote
1answer
189 views

How to run my compiled python not the system installed one

I have compiled python3.6.5 from the source and linked it to my compiled openssl as the following: export LDFLAGS="-L/usr/local/openssl/lib/ -L/usr/local/openssl/lib64/" export LD_LIBRARY_PATH="/usr/...
0
votes
1answer
6k views

yum install openssl-devel fails

Running yum install openssl-devel leads to dependency checking errors and do not install it. I guess there is a problem in my repositories however I don't know what is wrong with my installed version ...
0
votes
0answers
48 views

Let's Encrypt Expire Bot showing different date then command line

Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018. but when I log in to the server, and check the ...
2
votes
1answer
787 views

dsa still supported for ssh?

I have an old id_dsa ssh key that I'd like to keep for passwordless ssh to my test machines, but recently it stopped working for ssh. "Recently" includes upgrading from SuSE Leap 42.2 -> 42.3 -> 15.0. ...
1
vote
1answer
916 views

How to use openssl smime -sign to get digest value in -out xml?

Wanted to know command of openssl smime -sign to get digest value . Something like below - MIME-Version: 1.0 Content-Type: multipart/signed;protocol="application/pkcs7- signature";micalg="sha-256";...
0
votes
1answer
1k views

valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed

System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed Symptoms: wget https://api.xxx.io will result in this error: ERROR: cannot verify api.xxx.io's certificate,...
-2
votes
1answer
860 views

Command line HMAC calulation is different from Node.JS crypto.createHmac('sha256')

In Node.js I use following code hash = crypto.createHmac('sha256', SECRET).update(fileContent).digest('hex'); to calculate HMAC. C++/Qt code analogue QByteArray hash = QMessageAuthenticationCode::...
1
vote
1answer
2k views

How do you use the AES key wrap cipher with the OpenSSL command line utility?

When you run the command openssl enc -ciphers a list of supported ciphers is printed. In more recent versions of the OpenSSL utility the ciphers -id-aes256-wrap, -id-aes256-wrap-pad, and -aes256-wrap ...
0
votes
2answers
889 views

Stunnel 5.x on Centos 6.5

Im looking for an stunnel 5.x RPM for Centos 6.5 so I can get TLS1.2 support. Ive looked everywhere, but cannot find one. Ive tried downloading and compiling, as per another question on here (title: ...
1
vote
1answer
1k views

Download over https on Debian not working (openssl misconfiguration?)

I'm on a Debian wheezy server and I'm trying to download stuff by https without success. When I try to use curl, it gives me this answer by example: curl: (60) SSL certificate problem, verify that ...
2
votes
1answer
4k views

Create HTTPS server with socat

Currently I am trying to setup a toy https server with socat I am doing the following: As described here: EXAMPLE FOR OPENSSL CONNECTION USING SOCAT cert() { openssl genrsa -out $1.key 2048 ...
2
votes
0answers
595 views

On Ubuntu 18.04 OpenSSL 1.1.0g - can't decrypt files, even with md5

Previously, I was encrypting with: openssl des3 -salt -in $INSECURE_CONFIG_FILE -out $CONFIG_FILE -pass pass:$PASSWORD and decrypting with: openssl des3 -d -salt -in $CONFIG_FILE -out $...
3
votes
1answer
839 views

How to install php7 on solaris 10 with OpenSSL 1.0.1

I am trying to install php7 on Solaris 10. OpenSSL 1.0.1 was installed from https://www.opencsw.org/packages/libssl1_0_0/ To check for the installed ssl I did pkginfo -i | grep -i "ssl" and I ...
1
vote
1answer
3k views

Apache SSL configuration Connection refused connect:errno=111

I am trying to configure SSL on an old opensuse server: openSUSE 11.4 (x86_64) VERSION = 11.4 CODENAME = Celadon I enabled the apache SSL module: apache2ctl -M Loaded Modules: core_module (static) ...
5
votes
2answers
12k views

openssl generating SHA-256

I'm trying to use openssl to create a cryptographic hash of a file using HMAC-SHA-256. I'm confused as to why I'm seeing a 'no such file or directory' error on the output. The key I'm using is in a ...
0
votes
1answer
2k views

Old CentOS 5.6, Due to github.com delete the TLSv1/TLSv1.1 support, How can I access to github.com/repo.git using git system

Now I have a cluster with Rocks 5.4 based on CentOS 5.6. When I git push the code to github.com, I run into the errors: error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert ...
1
vote
0answers
1k views

Hmac with openssl's command line tool with a key that might contain null bytes

Let's say I want to do an SHA256HMAC digest of a file with the openssl command line utility: openssl dgst -sha256 -hmac "$(cat $KEY_FILE)" -hex "$TARGET_FILE" How can I protect this command against ...
0
votes
0answers
35 views

Generate Self-sign certificate from existing CA

I have following two file on Linux Web server. CA = cacert.pem Key = key.pem Now i want to generate certificate from it so what i need to do?
1
vote
0answers
754 views

SSLPassPhraseDialog: file '/usr/libexec/httpd-ssl-pass-dialog' does not exist

When I'm starting apache with this command sudo /usr/sbin/httpd -k start, I get the following error: Syntax error on line 18 of /etc/httpd/conf.d/ssl.conf: SSLPassPhraseDialog: file '/usr/libexec/...
3
votes
0answers
15k views

Curling a https url via a proxy results in NSS error 5938

A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7). We added their IP address to our software firewall but nothing was going through. They ...
1
vote
1answer
1k views

libapache2-mod-php7.0 not working on Debian Stretch

I am trying to install PHP 7.0 on Debian 9.4. When I install libapache2-mod-php7.0 I get the following error. Syntax error on line 141 of /etc/apache2/apache2.conf: Syntax error on line 3 of /etc/...
1
vote
2answers
9k views

Self-signed certificate gives error “x509: certificate signed by unknown authority”

I want to establish a secure connection with self-signed certificates. I used the following conf file for openssl [req] distinguished_name = req_distinguished_name x509_extensions = v3_req prompt = ...
1
vote
1answer
308 views

Tomcat Crashes By throwing Fatal Error In JRE

I am running Tomcat 9 with jdk 1.8.0_162-b12 on Ubuntu 16.04 64-bit Server. Development is done in Java. The error in catalina.out shows this- A fatal error has been detected by the Java Runtime ...
2
votes
1answer
1k views

FIPS 140-2 compliance for Apache and Haproxy on CentOS 7 [closed]

I have CentOS 7 and Apache and the Haproxy load balancer with SSL support. How to make the server compliant to FIPS 140-2? From CHAPTER 10. FEDERAL STANDARDS AND REGULATIONS | redhat.com I got the ...
1
vote
0answers
734 views

Static build of curl with openssl: `/lib64/libcrypto.so.10: version `OPENSSL_1.0.2' not found`

This error looks like this is not static build - and OpenSSL not inside of curl, but after configure among others I see: ... SSL support: enabled (OpenSSL) ... Build libcurl: Shared=no, Static=...
0
votes
1answer
648 views

Command to get ssl certificate pinning from certificate

There is a new certificate in PEM format. How to get from it (using OpenSSL?) a format expected by iOS? (example: Alamofire/Source/ServerTrustEvaluation.swift) I've tried using something like: ...
1
vote
1answer
107 views

Confused by openssl make

I need to generate the libssl* and libcrypto* binaries for use on a different system. I wrote a trivial script doing it #!/bin/bash set -evx OPENSSL_VERSION="1.0.2l" TARGET=openssl-linux64 /bin/rm ...
1
vote
0answers
180 views

Is this the right way to generate a wildcard CSR?

I generated my CSR on an Amazon Linux system using this command openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr I verified ...
0
votes
2answers
118 views

RSA Key work only with my user

My ssh key work normally, i can connect directly to other server with: MyUser@host1: ssh server No passphrase is requested and the connection success , but when i use root: root@host1: ssh ...
1
vote
2answers
4k views

How to force use OpenSSL from /usr/local

I have a single board computer with a 64bit ARM CPU and AES instruction set. The provided image of Debian 8 Jessie Mate Desktop uses OpenSSL 1.0.1k build that can't use that acceleration. I've ...
1
vote
1answer
578 views

How to compile OpenSSL with -DPURIFY from src.rpm

I am trying to run a program that uses OpenSSL under Valgrind but OpenSSL does some funny stuff that results in a lot of "false positives" so after some searching around I discovered that I need to ...
0
votes
1answer
2k views

HTTPS request connection timeout (NGINX) [closed]

I tried a lot by reading different answers on Stackoverflow and other forums but unable to identify the error, can someone please check the below configuration and tell me what could be wrong? server ...
1
vote
1answer
857 views

Clone a repo from github on RHEL 5

I am using RedHat 5.2 and I need to clone a repo from Github. Sadly, since February 1st of this year, they disabled TLSv1 and TLSv1.1 Unfortunately, Red Hat 5 does not have a point release that ...
3
votes
2answers
3k views

encrypt/decrypt string with openssl error

I need to encrypt and decrypt a password using bash script. For that, I'm using openssl. The decryption is needed because I'm moving the password between hosts. The weird thing is it looks like the ...
4
votes
2answers
3k views

OpenSSL fetches different SSL certificate than the one obtained via a browser

I need to download a SSL cert in PEM format from a HTTPS website, https://api.paczkomaty.pl . So I am using OpenSSL to do that: openssl s_client -connect api.paczkomaty.pl:443 > myfile openssl ...

1 2 3
4
5
13