OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

1
vote
2answers
85 views

Heartbleed threat: Do I need to change password for websites that I rarely logon?

I've a dozen email accounts, probably a hundred websites and forum accounts and I don't want to go about changing all the passwords. Do I need to change the password of websites that I seldom logon - ...
1
vote
1answer
886 views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
1
vote
1answer
31 views

How to create a user and set permission only to some folders on ubuntu 10.04?

I need to create a user and only allow access to some folders on my server. The user also needs to be able to create an SSL Key with the command: openssl req -new -newkey rsa:2048 -nodes -keyout ...
1
vote
1answer
239 views

OpenSSL ECDSA sign and verify file

I would like to sign and verify a pdf with elliptic curve. I got some code but it dosen't work. Create private key: openssl ecparam -genkey -name secp384r1 -noout -out private.pem Create public ...
1
vote
1answer
1k views

no version information available (required by /usr/bin/ssh)

I am getting no version information available when making ssh. Openssl verion: sat:~# openssl version OpenSSL 1.0.1f 6 Jan 2014 Here is output of ldd /usr/bin/ssh: /usr/bin/ssh: ...
1
vote
1answer
128 views

Creating stronger self signed certificate

I've installed the calomel addon in Firefox, which gives information about the quality of an SSL certificate. I have created a self signed certificate, which scores full point on PFS and the Bulk ...
1
vote
3answers
1k views

SSL (imap) doesn't work from some machines - ssl handshake failure - how to narrow down further?

A few days ago our IMAP SSL (port 993) connections stopped working from our home network two Windows 7 PCs in our home network. Two other PCs, one with Windows XP, one also with Win7 professional ...
1
vote
1answer
317 views

ECDSA public key generation with openssl (HEX)

How can I generate a hexadecimal EC keypair with openssl? Example output: ec private key: 1d6d6f979fe944658ef72336d0472d122d641c347d62af8b80cbd5a6d9595298 ec public key: ...
1
vote
1answer
46 views

If you're using stdout-stdin already, could you somehow use a higher file descriptor?

Can the following be done without creating a temp.pem? openssl pkcs12 -passin pass:notasecret -in $DATASTORE_PRIVATE_KEY_FILE -nocerts -nodes -out temp.pem cat myfile | openssl sha -sha256 -sign ...
1
vote
1answer
2k views

yum update to the specific version of package

I am using yum update command to update openssl on Linux machine. The command is # yum update openssl To update to to a specific version Say If I want to update this to the specific version like ...
1
vote
2answers
2k views

Trying to install libcurl on a Linux RHEL, unable to install openssl

I am a programmer, and I am trying to give a clear sure fire way for the engineering team to install libcurl on a Linux RHEL machine. The machine already has the following installed by default: ...
1
vote
2answers
36 views

Download self-signed server certicate

Summary I need to download a self-signed certificate from a server, to create a .JKS-file to use as truststore in an application. How can I do that from a Red Hat server? What I have tried I have ...
1
vote
1answer
49 views

How to get system-wide use of Intel's AES-NI acceleration with OpenSSL 0.9.8?

I found the following instructions to get Intel's contrib OpenSSL 0.9.8 engine code on some Westmere-based systems that we have: $ wget https://www.openssl.org/contrib/intel-accel-1.5.tar.gz $ tar ...
1
vote
1answer
331 views

Can't S/MIME sign using OpenSSL even if “verify” suceeds

I have a client certificate in Chrome, that I used for logging into StartSSL. I exported it using pk12util to certfile.p12. Now I want to use it for signing with S/MIME. I converted the p12 file to ...
1
vote
1answer
384 views

How to restart PHP on windows ? Unable to find the socket transport “ssl”

I am trying to load openssl module, I uncommented it in the php.ini: extension=php_openssl.dll But when running my script I get error: Failed to connect: 0 Unable to find the socket transport ...
1
vote
1answer
174 views

Signature Verification using OpenSSL

I have been experimenting with OpenSSL and OpenSSH and I have been unable to sign and verify using RSA key pairs. I did the following Generated key pairs: $ ssh-genkey -b 2048 -t rsa ...
1
vote
1answer
271 views

python urllib2 HTTPSHandler error

I just installed openSuse 12.3 server onto my server and I have been loading everything onto it from the old server(CentOS 6.2) and I use python as my programming language and I tried to use pip to ...
1
vote
1answer
902 views

upgrade to openssl 1.0.1e on windows

I know I am missing a crucial step, but I can't figure out what to do I have openssl OpenSSL 0.9.8e 23 Feb 2007 I downloaded openssl for win32 and installed it in c:\openssl I added c:\openssl\bin ...
1
vote
1answer
202 views

Convergence notary server error

Trying to run a convergence notary to learn some stuff and I get an error when starting the service. I am running Ubuntu server 11.04 fully updated. I followed the directions that are here. When I ...
1
vote
1answer
1k views

Trying convert webserver certificate to PEM file for wireshark to monitor ssl traffic in HTTP format

I am trying to monitor https traffic as readable HTML. I have downloaded the certificate from the server. "In Internet Explorer, I selected the certificate and copy to file, DER encoded binary X.509 ...
1
vote
1answer
33 views

Why does Openssl 0.9.8g suddenly changes to 0.9.8b?

I have a weird problem in which I try to use cryptodev in Openssl version 0.9.8g, but then if an error occurs or the system logs out, the version for Openssl rolls back to 0.9.8b.I have also tried ...
1
vote
1answer
653 views

What are the correct set of DLLs and placement for SSL support in mIRC on 64 bit Windows?

I am using mIRC 6.35 on a fresh install of Windows 7 64-bit. No matter what versions of the OpenSSL DLLs I use, nor where I place them, I cannot get mIRC to work with SSL; I get the "ssl not ...
1
vote
0answers
13 views

Strange null bytes in CN from openssl req

I need to send CSR (certificate signing request) to the SSL authority for our wildcard domain SSL certificate. I see strange values in the CN (common name) field, for example ...
1
vote
2answers
54 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
0answers
39 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
0answers
58 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
2answers
64 views

How do you create an AES XTS key?

I am interested in hacking around with Gluster cloud FS whose most recent beta uses AES with XTS only. It also requires openssl >= 1.0.1. The 1.0.1f Jan 2014 openssl (with 64 bit lib) install for my ...
1
vote
1answer
36 views

How to generate a P12 file with openSSL?

I'm new to the Command-Line tool and I would like to generate a P12 file, based on a key and a PEM version of an iPhone developer certificate. This is the command for it: openssl pkcs12 -export ...
1
vote
0answers
89 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
406 views

Can't import public key into OSX Keychain

I created a couple of self-signed S/MIME certificates (using OSX Keychain & OpenSSL) and then exported these into 3 files: Certificate (.cer) Private Key (.p12) Public Key (.pem) When ...
1
vote
1answer
428 views

No valid certificate found using self signed S/MIME with iOS [closed]

My goal is to get S/MIME email encryption to work with certificates signed with my own CA cert. This works fine except from iOS. I can send encrypted and signed e-mails from Mutt and MacOS Mail. I ...
1
vote
0answers
33 views

Exchange server doesn't respond to input from openssl client

I'm using openssl s_client to connect to an exchange server. The exchange server doesn't react to anything I type. I'm on OSX using the terminal. $ openssl s_client -connect pop.server.com:995 ...
1
vote
1answer
115 views

Digital ID for internal communication

We are looking for a simple solution where we can create digital ID of our staff member [3-4] only. And then we install their ID in Outlook and can use to send encrypted and digitally signed Emails. ...
1
vote
1answer
713 views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
1
vote
0answers
197 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
1answer
69 views

How to use arrow keys when typing into openssl terminal on OS X?

In developing for IMAP I type raw commands into an IMAP openssl connection very often, and I'm trying to figure out how to make this tool more usable. I connect via openssl s_client -connect ...
1
vote
0answers
57 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
384 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
210 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
594 views

Openssl decrypt from encrypted text from command issue

I am using following command to decrypt an base64 string. openssl enc -in ciphertext -out binarytext -d -a openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem I am facing an ...
1
vote
0answers
294 views

How can I export public key in PEM format with GnuPG?

I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them? I found this from ...
1
vote
1answer
629 views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
1
vote
0answers
76 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
848 views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
1
vote
0answers
666 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
92 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
249 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
514 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
1
vote
1answer
459 views

Encrypting using DES 64-bit with openssl

I'm trying to do a very simple thing, namely using a 64-bit password and a 64-bit plaintext (both in hex) and encrypt it with simple old DES. my script looks like this: plaintext=`echo -n "$2" | sed ...
1
vote
1answer
177 views

Failure to build ACE

I gunzipped and tarred ace_tao5.6.3.tar.gz. After creating the "ACE_wrappers" directory I successfuly ran configure. When I tried to make, I got an "Open SSL" missing dependency. After installing ...