Questions tagged [openssl]
OpenSSL is an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements the basic cryptographic functions and provides various utility functions.
608
questions
3
votes
1answer
4k views
How can I view certificate details on a smart card
I am using p11tool on CentOS to read a PIV smart card. The card is being read via the coolkey package driver (using libcoolkeypk11.so, per p11-kit list-modules)
I can get a listing of the certs on ...
0
votes
1answer
783 views
The same curl binary shows different version of openssl on 2 different servers
so I have built curl (possibly incorrectly) on debian 9 x64, and after curl -V command I can see that it uses the new version:
OpenSSL/1.1.0f
After that, I copied the very same library into ...
1
vote
1answer
525 views
How to decrypt a file to a temporary one, and read it without saving?
say this:
openssl enc -aes-256-cbc -e -in test.txt -out test-enc.txt
Then
rm test.txt
Then, I'd like do decrypt text-enc.txt without saving the output, just see it on a text editor (say sublime ...
0
votes
1answer
2k views
show values of an ed22519 private key stored in OpenSSH format
(note this question uses both 'openssh' and 'openssl' in the text, I am not confusing the two.)
If I use openssh to general an RSA keypair (ssh-keygen) then I can use 'openssl rsa -in ...' to view ...
3
votes
1answer
3k views
Apache + mod_ssl build not linking to my OpenSSL build
I have spent some time searching online but none of what I found seems to help.
I'm running CentOS 6 64bit and would like to compile Apache with mod_ssl and need to link it to my own OpenSSL build (...
0
votes
1answer
598 views
Manual install of curl can't find openssl
My system (Centos7) install of curl doesn't support https. So I followed this answer downloaded from source and installed myself, using the ./configure --with-ssl option.
I got the following warning ...
-1
votes
1answer
98 views
Compilation fails on version 1.0.2p
Compilation fails with linker error although it complains with warning messages.
logs:
# gcc -Wall -o server server.c -L/usr/lib -lssl -lcrypto
server.c: In function ‘InitServerCTX’:
server.c:62:5: ...
1
vote
1answer
2k views
Error using openssl with socat - SSL3_CHECK_CERT_AND_ALGORITHM:dh key too small
Short Version of Question
Assuming the existence of the relevant files, why does the following sequence of commands not work?
socat tcp-listen:10001,fork exec:'/bin/cat' &
socat openssl-listen:...
2
votes
4answers
8k views
How to upgrade openssl 1.0.1 in debian
TL;DR:
I'm trying to install a package that needs libssl 1.0.2 or greater but can't:
# dpkg -i my_package_name_3.0.1.8_amd64.deb
Selecting previously unselected package my_package_name.
(Reading ...
1
vote
1answer
447 views
syslog-ng configure on RHEL 7 fails with OpenSSL version 0.9.8 dependency
Building latest syslog-ng (3.17.2, rather than the packaged version in EPEL, which is 3.5.6, built 30-Dec-2015) from https://github.com/balabit/syslog-ng/releases
Amidst ./configure --prefix=/app/...
0
votes
0answers
598 views
How to decrypt RSA file with openssl
I have 3 files publickey.pem, aeskey.rsa.enc and img.png.aes.enc. I know that I could use openssl to decrypt the png file, but I simply don't know how to do it.
0
votes
1answer
454 views
Apache SSL problems (Centos 7)
I have deleted /etc/pki/tls/private and /etc/pki/tls/certs, after that I can't access page. I saw in logs error like
[suexec:notice] [pid 30215] AH01232: suEXEC mechanism enabled
(wrapper: /usr/...
3
votes
1answer
5k views
Generating duplicate certificates with OpenSSL CA
At work a lot of our internal servers have SSL certs we've generated ourselves with openssl (through some simple scripts). The generation works fine, but the subsequent handling needs improvements, as ...
asked Aug 10 '18 at 14:27
Henrik supports the community
4,3421 gold badge11 silver badges25 bronze badges
1
vote
0answers
272 views
openssl hangs on server
I have a problem on the server. Commands wget, curl and dependent commands are not working when a request is via 443 port.
Commands hangs on 2-3 minutes and after just say "time out":
# curl -v ...
0
votes
0answers
346 views
Decrypt old openssl data
I have a git repo encrypted with openssl. I have moved the repo to a new host. The original host was using:
» openssl version
OpenSSL 1.0.2g 1 Mar 2016
The current host is using:
» openssl version
...
1
vote
1answer
189 views
How to run my compiled python not the system installed one
I have compiled python3.6.5 from the source and linked it to my compiled openssl as the following:
export LDFLAGS="-L/usr/local/openssl/lib/ -L/usr/local/openssl/lib64/"
export LD_LIBRARY_PATH="/usr/...
0
votes
1answer
6k views
yum install openssl-devel fails
Running yum install openssl-devel leads to dependency checking errors and do not install it. I guess there is a problem in my repositories however I don't know what is wrong with my installed version ...
0
votes
0answers
48 views
Let's Encrypt Expire Bot showing different date then command line
Today I got an email notification from Let's Encrypt Expire Bot that the SSL certificate for my domain will be expired on the 31, july, 2018.
but when I log in to the server, and check the ...
2
votes
1answer
787 views
dsa still supported for ssh?
I have an old id_dsa ssh key that I'd like to keep for passwordless ssh to my test machines, but recently it stopped working for ssh. "Recently" includes upgrading from SuSE Leap 42.2 -> 42.3 -> 15.0. ...
1
vote
1answer
916 views
How to use openssl smime -sign to get digest value in -out xml?
Wanted to know command of openssl smime -sign to get digest value .
Something like below -
MIME-Version: 1.0
Content-Type: multipart/signed;protocol="application/pkcs7-
signature";micalg="sha-256";...
0
votes
1answer
1k views
valid SSL certificate verification reports as “Self-signed” and fails on ubuntu 14.04 for godaddy CA signed sites, despite root CAs being installed
System: Ubuntu 14.04, apt-upgraded to the latest. openssl, ca-certificates, wget installed
Symptoms:
wget https://api.xxx.io will result in this error:
ERROR: cannot verify api.xxx.io's certificate,...
-2
votes
1answer
860 views
Command line HMAC calulation is different from Node.JS crypto.createHmac('sha256')
In Node.js I use following code
hash = crypto.createHmac('sha256', SECRET).update(fileContent).digest('hex');
to calculate HMAC. C++/Qt code analogue
QByteArray hash = QMessageAuthenticationCode::...
1
vote
1answer
2k views
How do you use the AES key wrap cipher with the OpenSSL command line utility?
When you run the command openssl enc -ciphers a list of supported ciphers is printed. In more recent versions of the OpenSSL utility the ciphers -id-aes256-wrap, -id-aes256-wrap-pad, and -aes256-wrap ...
0
votes
2answers
889 views
Stunnel 5.x on Centos 6.5
Im looking for an stunnel 5.x RPM for Centos 6.5 so I can get TLS1.2 support. Ive looked everywhere, but cannot find one. Ive tried downloading and compiling, as per another question on here (title: ...
1
vote
1answer
1k views
Download over https on Debian not working (openssl misconfiguration?)
I'm on a Debian wheezy server and I'm trying to download stuff by https without success.
When I try to use curl, it gives me this answer by example:
curl: (60) SSL certificate problem, verify that ...
2
votes
1answer
4k views
Create HTTPS server with socat
Currently I am trying to setup a toy https server with socat I am doing the following:
As described here: EXAMPLE FOR OPENSSL CONNECTION USING SOCAT
cert() {
openssl genrsa -out $1.key 2048
...
2
votes
0answers
595 views
On Ubuntu 18.04 OpenSSL 1.1.0g - can't decrypt files, even with md5
Previously, I was encrypting with:
openssl des3 -salt -in $INSECURE_CONFIG_FILE -out $CONFIG_FILE -pass pass:$PASSWORD
and decrypting with:
openssl des3 -d -salt -in $CONFIG_FILE -out $...
3
votes
1answer
839 views
How to install php7 on solaris 10 with OpenSSL 1.0.1
I am trying to install php7 on Solaris 10.
OpenSSL 1.0.1 was installed from https://www.opencsw.org/packages/libssl1_0_0/
To check for the installed ssl I did
pkginfo -i | grep -i "ssl"
and I ...
1
vote
1answer
3k views
Apache SSL configuration Connection refused connect:errno=111
I am trying to configure SSL on an old opensuse server:
openSUSE 11.4 (x86_64)
VERSION = 11.4
CODENAME = Celadon
I enabled the apache SSL module:
apache2ctl -M
Loaded Modules:
core_module (static)
...
5
votes
2answers
12k views
openssl generating SHA-256
I'm trying to use openssl to create a cryptographic hash of a file using HMAC-SHA-256. I'm confused as to why I'm seeing a 'no such file or directory' error on the output.
The key I'm using is in a ...
0
votes
1answer
2k views
Old CentOS 5.6, Due to github.com delete the TLSv1/TLSv1.1 support, How can I access to github.com/repo.git using git system
Now I have a cluster with Rocks 5.4 based on CentOS 5.6. When I git push the code to github.com, I run into the errors:
error: error:1407742E:SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert ...
1
vote
0answers
1k views
Hmac with openssl's command line tool with a key that might contain null bytes
Let's say I want to do an SHA256HMAC digest of a file with the openssl command line utility:
openssl dgst -sha256 -hmac "$(cat $KEY_FILE)" -hex "$TARGET_FILE"
How can I protect this command against ...
0
votes
0answers
35 views
Generate Self-sign certificate from existing CA
I have following two file on Linux Web server.
CA = cacert.pem
Key = key.pem
Now i want to generate certificate from it so what i need to do?
1
vote
0answers
754 views
SSLPassPhraseDialog: file '/usr/libexec/httpd-ssl-pass-dialog' does not exist
When I'm starting apache with this command sudo /usr/sbin/httpd -k start, I get the following error:
Syntax error on line 18 of /etc/httpd/conf.d/ssl.conf:
SSLPassPhraseDialog: file '/usr/libexec/...
3
votes
0answers
15k views
Curling a https url via a proxy results in NSS error 5938
A B2B partner needs to make a callback from a Redhat machine to an API method on our web server (Centos7).
We added their IP address to our software firewall but nothing was going through.
They ...
1
vote
1answer
1k views
libapache2-mod-php7.0 not working on Debian Stretch
I am trying to install PHP 7.0 on Debian 9.4. When I install libapache2-mod-php7.0 I get the following error.
Syntax error on line 141 of /etc/apache2/apache2.conf: Syntax error on line 3 of /etc/...
1
vote
2answers
9k views
Self-signed certificate gives error “x509: certificate signed by unknown authority”
I want to establish a secure connection with self-signed certificates. I used the following conf file for openssl
[req]
distinguished_name = req_distinguished_name
x509_extensions = v3_req
prompt = ...
1
vote
1answer
308 views
Tomcat Crashes By throwing Fatal Error In JRE
I am running Tomcat 9 with jdk 1.8.0_162-b12 on Ubuntu 16.04 64-bit Server.
Development is done in Java.
The error in catalina.out shows this-
A fatal error has been detected by the Java Runtime ...
2
votes
1answer
1k views
FIPS 140-2 compliance for Apache and Haproxy on CentOS 7 [closed]
I have CentOS 7 and Apache and the Haproxy load balancer with SSL support.
How to make the server compliant to FIPS 140-2?
From CHAPTER 10. FEDERAL STANDARDS AND REGULATIONS | redhat.com
I got the ...
1
vote
0answers
734 views
Static build of curl with openssl: `/lib64/libcrypto.so.10: version `OPENSSL_1.0.2' not found`
This error looks like this is not static build - and OpenSSL not inside of curl, but after configure among others I see:
...
SSL support: enabled (OpenSSL)
...
Build libcurl: Shared=no, Static=...
0
votes
1answer
648 views
Command to get ssl certificate pinning from certificate
There is a new certificate in PEM format. How to get from it (using OpenSSL?) a format expected by iOS? (example: Alamofire/Source/ServerTrustEvaluation.swift)
I've tried using something like:
...
1
vote
1answer
107 views
Confused by openssl make
I need to generate the libssl* and libcrypto* binaries for use on a different system. I wrote a trivial script doing it
#!/bin/bash
set -evx
OPENSSL_VERSION="1.0.2l"
TARGET=openssl-linux64
/bin/rm ...
1
vote
0answers
180 views
Is this the right way to generate a wildcard CSR?
I generated my CSR on an Amazon Linux system using this command
openssl req -new -sha256 -key ~/mymaindomain.com.ssl/mymaindomain.com.key -out ~/mymaindomain.com.ssl/mymaindomain.com.csr
I verified ...
0
votes
2answers
118 views
RSA Key work only with my user
My ssh key work normally, i can connect directly to other server with:
MyUser@host1: ssh server
No passphrase is requested and the connection success , but when i use root:
root@host1: ssh ...
1
vote
2answers
4k views
How to force use OpenSSL from /usr/local
I have a single board computer with a 64bit ARM CPU and AES instruction set. The provided image of Debian 8 Jessie Mate Desktop uses OpenSSL 1.0.1k build that can't use that acceleration.
I've ...
1
vote
1answer
578 views
How to compile OpenSSL with -DPURIFY from src.rpm
I am trying to run a program that uses OpenSSL under Valgrind but OpenSSL does some funny stuff that results in a lot of "false positives" so after some searching around I discovered that I need to ...
0
votes
1answer
2k views
HTTPS request connection timeout (NGINX) [closed]
I tried a lot by reading different answers on Stackoverflow and other forums but unable to identify the error, can someone please check the below configuration and tell me what could be wrong?
server ...
1
vote
1answer
857 views
Clone a repo from github on RHEL 5
I am using RedHat 5.2 and I need to clone a repo from Github. Sadly, since February 1st of this year, they disabled TLSv1 and TLSv1.1
Unfortunately, Red Hat 5 does not have a point release that ...
3
votes
2answers
3k views
encrypt/decrypt string with openssl error
I need to encrypt and decrypt a password using bash script. For that, I'm using openssl.
The decryption is needed because I'm moving the password between hosts.
The weird thing is it looks like the ...
4
votes
2answers
3k views
OpenSSL fetches different SSL certificate than the one obtained via a browser
I need to download a SSL cert in PEM format from a HTTPS website, https://api.paczkomaty.pl . So I am using OpenSSL to do that:
openssl s_client -connect api.paczkomaty.pl:443 > myfile
openssl ...
