OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

-2
votes
1answer
20 views

Missing cipher suites when compiling OpenSSL on Windows

I'm trying to connect to a HTTPS server that supports the following ciphers/protocols, but the handshake fails: TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ...
1
vote
1answer
10 views

sTunnel failure to start

im a bit stuck and need help understanding what im being told as there is nothing in the log file, i get the following error when i try and run stunnel (servermode): sudo /etc/init.d/stunnel4 start ...
0
votes
0answers
6 views

Degrade in performance with SSL_OP_SINGLE_ECDH_USE?

Using SSL_OP_SINGLE_ECDH_USE when setting up our SSL_CTX . This seems to be causing a degrade in performance. I'm not able to find proper documentation for it except that it generates new ECDH ...
4
votes
2answers
427 views

Is my OpenSSL version 0.9.8 affected by heartbleed?

I am reading the OpenSSL cookbook, and here what I see there openssl version OpenSSL 1.0.1 14 Mar 2012 And this my the version of mu Ubuntu 14.04 server openssl version OpenSSL 0.9.8w 23 Apr ...
1
vote
1answer
13 views

openSSL Key and Certificate

As far I know, in an authenticated SSL connection, both the client and server have private keys and provide their certificates (with the corresponding public keys) across the connection before ...
1
vote
1answer
7 views

Remove Key Password with OpenSSL

This is something I've wanted to do for a while now. There wasn't a question already for it so I'm putting one in. How do you remove a password from a .key file using OpenSSL.
-1
votes
0answers
17 views

Unable to disable SSLv3 in Apache 2.4.18

One of my client wanted me to upgrade openssl and Apache on his server because he want to receive an A from SSLLabs. I went ahead and upgraded to Apache 2.4.18 and openssl to version 1.0.2e. I then ...
0
votes
1answer
29 views

GIT warning: unsupported ssl version tlsv1.2: using default

I am trying to clone a git repository and receiving the following warning and error message: Cloning into 'projectname'... warning: unsupported ssl version tlsv1.2: using default * Couldn't find host ...
0
votes
0answers
7 views

gitlab pem keychain validates but won't get used

I've got a certificate (cert.crt), intermediate certificate (int.crt) and a root certificate (root.crt). Root is trusted. I've made a file (both.pem) like so: cat cert.crt int.crt > both.pem. With ...
0
votes
0answers
7 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
0answers
13 views

How to install openssl cryptographic library on Lubuntu

I'm trying to build cryptsetup 1.6.8 (or 1.7.0) from source using the openssl libraries instead of libgcrypt. ./configure --with-crypto_backend=openssl I did install libssl-dev but it still gives ...
-1
votes
0answers
44 views

Private Key PKCS8 conversion

I have a pem-encoded private key. To convert it to PKCS8 form (+ der encoding) I use: openssl pkcs8 -topk8 -inform pem -in .\client.key -outform der -nocrypt -out clientpkcs8.der Well then, an ...
2
votes
1answer
26 views

How to extract public key from attestation certificate to use it for signature verification?

I want to extract the public key from a certificate to verify a given signature (to answer my own question in relation to the registration part). I've tried openssl x509 -in certificate.pem -pubkey ...
1
vote
0answers
35 views

Can I extract R and S from an ECDSA signature in bit form, and vica versa?

I have searched the forum and found related information, but not answer to this question. I am working in an extremely bandwidth-restricted environment, in need of creating as small ECDSA signatures ...
0
votes
1answer
8 views

server isn't sending Certificate after Server Hello

I used Wireshark to capture the packets sent to and from google.com and a personal website of mine and... google.com sends the Certificate right after the Server Hello. My own webserver, however, ...
0
votes
1answer
27 views

Problem in creating multi level certificate chain using OpenSSL

I am creating three level of certificates,viz, Root->A->B . A is signed by root and B is signed by A . The certificates are generated using OpenSSL command line utility for windows. The certificates ...
0
votes
0answers
17 views

SSL Connection using Windows Certificate Store

I am creating an SSL connection using OpenSSL API. As we know in a SSL handshake, series of Certificate Authentication occurs for Server or Client. Now for client certificate authentication, the ...
0
votes
0answers
31 views

How to Create X.509 certificate compatible to AWS IoT?

I am trying to create a self signed X.509 certificate to use in AWS IoT. If I am correct, it is not different from a normal OpenSSL certificate, but the PEM file which AWS creates for me is something ...
1
vote
0answers
27 views

Screwed up /etc/pki somehow (I think)

I can no longer access certain secure sites with any browser on one of my machines: > curl -vvv https://order.subway.com/ > /dev/null * About to connect() to order.subway.com port 443 (#0) * ...
1
vote
1answer
30 views

using a hash other than sha1 for OAEP with OpenSSL / CLI

The rsautl OpenSSL utility does not appear to have a setting wherein the hash for OAEP can be changed. My testing suggests that it just defaults to sha1 and that's it. My question is... is there a ...
0
votes
1answer
25 views

SSL: Can't convert DER to PEM

I'm working with ssl certificates and trying to convert myCA.cer to myCA.pem... $ openssl x509 -in myCA.crt -inform der -outform pem -out myCA.cer.pem unable to load certificate ...
0
votes
0answers
18 views

Importing/Deleting certificate in pkcs12 keystore using openssl

I have a pkcs12 keystore (keystore.p12). I am about to update an expired public key in it. So I have to delete the expired key first and import new certificate. But I could not find a proper way to ...
1
vote
2answers
43 views

Is it possible to have a certificate signed by 2 authorities?

To explain the situation a bit: I'm building an iOS application that uses SSL pinning. I've created a self-signed certificate authority that issues SSL certificates to my web server, and the CA's ...
0
votes
1answer
41 views

How to create SSL certificate with multiple DNS entries, signed with my own CA certificate

I need help creating SSL certificate with multiple subjectAltNames, signed with my own selfbrewed CA certificate. What I need: I'm on OSX 10.10.5 I have myCA.cer which I use to sign another SSL ...
3
votes
1answer
25 views

How do I store RSA keypair in Windows?

I'm trying to write a simple Encryption-Decryption program using Openssl-RSA. When a data is encrypted, a keypair is generated. If I want to decrypt the data, I need the exact keypair that was ...
-1
votes
1answer
197 views

The openssl extension is missing on windows while installing composer

"The openssl extension is missing, which means that secure HTTPS transfers are impossible. If possible you should enable it or recompile php with --with-openssl" i get this msg while installing ...
2
votes
1answer
17 views

OpenSSL - how to get all settings when encrypting

I'm using openssl to encrypt text with a vendor. I have to send test encrypted text and provide them with what they need to decrypt the text on their end. When I encrypt text and then try to decrypt ...
0
votes
1answer
22 views

Attempting to encrypt a text yields “unable to load Public Key”

My intention is to encrypt a text using a PEM formatted public key. (src) > echo "encrypt this." | openssl rsautl -encrypt -pubin -inkey pub.pem unable to load Public Key The same happens if I ...
1
vote
0answers
13 views

free https with openSSL and noip domain

I am trying to use https on my website using startSSL, I already registered myself and received emails saying that the certificate was accepted and issued, and now what I have to do? I am reading a ...
0
votes
1answer
61 views

openssl : How to create .pem file with private key, associated public certificate, and certificate chain all the way to the root certificate?

For test purposes (i.e. all self signed, not production), how would I use openssl to create a PEM file which contains the private key, the associated public certificate, and the certificate chain all ...
0
votes
1answer
29 views

Generate non-random EC private key with openssl

I'm trying to generate a deterministic private key for the EC secp384r1using the Unix command openssl. What I mean is, instead of picking up a random integer I want the private key to be a value x. ...
0
votes
1answer
40 views

QtCreator on Ubuntu 14.04 amd64 fails to load?

Every time I load QtCreator it says it cannot load the ProjectExplorer plugin, so I located the .so and ran ldd to find it cannot find the right version of OpenSSL. How can I resolve this? I've spent ...
-1
votes
1answer
16 views

How do I use a different version of openssl?

I have downloaded, compiled, and tested, openssl 1.0.2d. I can use it preferentially in my shell by editing .bash_profile and placing the openssl_x84_64 at the beginning of PATH. I would like to ...
1
vote
0answers
33 views

How to transcode AES encrypted files with AWS Elastic Transcoder

I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
0
votes
1answer
19 views

Deriving key with OpenSCv14.0

I am trying to derive a secret key with OpenSC tool. I generated EC key with help of openssl through following command: openssl ecparam -in secp384r1param.pem -genkey -noout -out secp384r1key.pem ...
0
votes
0answers
23 views

Ubuntu 14.04 LTS: what to do so that Python and NGINX use a secure ssl (ie 1.0.1p) library?

I'm going nuts over this issue. I'm totally unable to get a working system where Python 2.7 (Python 2.7.6 (default, Jun 22 2015, 17:58:13) and NGINX (nginx/1.4.6 (Ubuntu)) use a openssl which has been ...
1
vote
1answer
23 views

Is Ubuntu Server 14.04 LTS getting neglected by Canonical?

I'm doing some clean installs and am faced with the issue that OpenSSL is at version 1.0.1f 6 Jan 2014 (yay, heartbleed!), and Python at 2.7.6. I'm having a really hard time upping OpenSSL to the ...
0
votes
1answer
199 views

Any way to create OpenSSL certificate request that would be valid for two IP addresses?

I have a private app running as a webserver on a machine on an isolated wifi router using 192.168.1.*/255.255.255.0, with no DNS capability & no upstream Internet; basically, only local wireless. ...
0
votes
0answers
69 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
163 views

AES encryption with plain text key using bash openssl

I am trying to encrypt a string using AES CBC. The output of the online tool (http://aes.online-domain-tools.com/) and the bash openssl command do not match. Can anyone help me with what I am doing ...
0
votes
0answers
20 views

Making Cassandra work with certs/keys generated by OpenSSL instead of keytool

I saw this in the Cassandra documentation: http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using ...
0
votes
1answer
322 views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
1
vote
1answer
120 views

Generate RSA2 key in OpenSSH format [duplicate]

I have to generate a key, RSA v2 in OpenSSH format. I am a bit confused. I am trying to generate it using Putty Key Generator. There I see an option SSH2-RSA, SSH1-RSA. So is SSH2-RSA the RSA2 key or ...
1
vote
1answer
232 views

OpenSSL not found during ./configure

I'm trying to make one bitcoin-like daemon on my Ubuntu 14.04.3. When I hit ./configure: checking for SSL... no configure: error: openssl not found. but # apt-get install libssl-dev ...
2
votes
1answer
123 views

Enable SCHANNEL Protocols in Windows Registry (Win7 & 2012R2) DisabledByDefault or Enabled?

I have enabled TLS 1.0/1.1/1.2 protocols on my local Win7 machine and 2012R2 server as well as disabled SSL 2.0/3.0 using the registry DWord value DisabledByDefault = 0 based on the following ...
2
votes
0answers
42 views

Can I get a fingerprint of an ec key, using openssl?

Can I get a fingerprint of an ec key, using openssl? Running openssl ec -in keys/secp256k1.pub.pem -fingerprint gives an error telling me that -fingerprint is not an option.
0
votes
0answers
48 views

how to do ssl client to node security in cassandra using my self-signed CA

I have my self-signed CA, that is giving me .crt, .csr , .p12 and .key files. How I will use this to secure my cassandra. I tried a lot whatever I found on net but still I am not able to solve this. ...
1
vote
1answer
53 views

How do you verify a client rsa key via cli?

I am experiencing some issues with openvpn and I would like to verifiy the client's connecting key. I found a number of samples on how to verify the servers key: linux-3kfe:/usr/share/easy-rsa/keys # ...
0
votes
0answers
62 views

Recompile mod_ssl for TLSv1.2

I have looked all day to get TLSv1.2 to work on my Debian Squeeze server without success. I have openssl 1.0.1 installed now: admin:/etc# openssl version OpenSSL 1.0.1 14 Mar 2012 However, from ...
0
votes
2answers
143 views

How can I perform PGP encryption and decryption method using openssl commands

I have a PGP public key of B. Now A wants to send an encrypted message to B using his PGP Public key by using PGP method. How can I do this with OpenSSL? Edit I have seen wiki page for PGP method ...