OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
1answer
289 views

Error with curl

I'm having this error with curl: curl https://www.google.com -v * About to connect() to www.google.com port 443 (#0) * Trying 2607:f8b0:400e:c01::67... * Failed to connect to ...
0
votes
1answer
601 views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
0answers
416 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
1
vote
1answer
267 views

Signature Verification using OpenSSL

I have been experimenting with OpenSSL and OpenSSH and I have been unable to sign and verify using RSA key pairs. I did the following Generated key pairs: $ ssh-genkey -b 2048 -t rsa ...
0
votes
1answer
152 views

How can i embed my openssl certificate in firefox?

How can i embed my openssl certificate in firefox? When i visit mywebsite it show ssl warning, but i want to rebuild firefox a custom release so it will not show ssl warning how can i do that ? What ...
1
vote
1answer
331 views

python urllib2 HTTPSHandler error

I just installed openSuse 12.3 server onto my server and I have been loading everything onto it from the old server(CentOS 6.2) and I use python as my programming language and I tried to use pip to ...
7
votes
1answer
8k views

Can self-signed SSL certificate be renewed? How?

I'm fairly new to SSL certificates and would like to know if a self-signed certificate which I use for HTTPS can be renewed to extend its expiry date without all clients of the site having to go ...
3
votes
1answer
1k views

How to properly setup openssl CA to generate ssl client certificates

I am configuring my first CA. It purpose will be to issue certificates for our clients, who will use them to access our EDI service over https. So I need to generate ssl client certificates. Whole ...
4
votes
3answers
9k views

Check expiry date of ssl certificate for multiple remote servers

I can find out the expiry date of ssl certificates using this OpenSSL command: openssl x509 -noout -in <filename> -enddate But if the certificates are scattered on different web servers, how ...
1
vote
0answers
62 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
496 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
2
votes
1answer
5k views

Openssl pkcs8 default format gives RSA PRIVATE KEY

I'm running this command on my pc (Openssl version: 1.0.1) : openssl pkcs8 -inform DER -in file.key -passin pass:12345678a -outform PEM -out key.pem and i got this key.pem: -----BEGIN PRIVATE ...
2
votes
1answer
4k views

updating openssl on Debian

I compiled OpenSSL-1.0.1e on Debian Lenny (armv4 architecture) from the [source code][1]. I followed the instruction on http://www.linuxfromscratch.org/blfs/view/svn/postlfs/openssl.html to compile ...
0
votes
1answer
77 views

x590cafile default location for gnutls-cli

I am using gnutls-cli from Cygwin, on a laptop running Windows XP Home (I have openssl from cygwin also). I am wondering where does gnutls-cli look for CA certificates if I don't specify option ...
1
vote
0answers
244 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
851 views

Openssl decrypt from encrypted text from command issue

I am using following command to decrypt an base64 string. openssl enc -in ciphertext -out binarytext -d -a openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem I am facing an ...
0
votes
1answer
438 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
0
votes
2answers
2k views

How do I use cat to encrypt stdin on the fly with openssl?

The following command works for encrypting stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
0
votes
1answer
3k views

How can I send e-mails via Gmail SMTP via OpenSSL (on Windows)?

I know that the SMTP server requires TLS so I'm using OpenSSL (on Windows). openssl s_client -connect smtp.gmail.com:465 -crlf Now, I know that I have to encode a string (basically ...
1
vote
0answers
366 views

How can I export public key in PEM format with GnuPG?

I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them? I found this from ...
18
votes
2answers
6k views

How to use ssh-rsa public key to encrypt a text?

So, the scenario is: Given I'm Bob, I want to encrypt some message for Alice. The only public key I have is her ssh-rsa id_rsa.pub like this: ssh-rsa ...
1
vote
1answer
844 views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
0
votes
1answer
1k views

OpenSSL and what encryption method to use

I am on OS X 10.8.3, savvy with a command-line and I want to use OpenSSL to start encrypting sensitive information on my MacBook Pro I know that I can use openSSL in a syntax like: openssl enc ...
1
vote
0answers
82 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
0
votes
1answer
313 views

Cannot build lynx on windows with cygwin

There are many Windows builds of Lynx available over the 'net, but none of them support HTTPS, so I was trying to build with SSL enabled, among other things. The ./configure part is successful, but ...
0
votes
1answer
116 views

Permissions required to rum make install and yum update

I am researching on Openssl update manually and openssl update through yum update. I have figured out the commands to do it. But searching on permissions required to make install and yum update. ...
2
votes
0answers
1k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
0
votes
1answer
305 views

PowerShell in conEmu has different PATH from cmd

Why does PowerShell on conEmu have a different PATH from cmd? I see this when I do openssl version in PowerShell I see that 2007 version and in cmd I see the 2013 version.... This is my startup ...
1
vote
1answer
1k views

upgrade to openssl 1.0.1e on windows

I know I am missing a crucial step, but I can't figure out what to do I have openssl OpenSSL 0.9.8e 23 Feb 2007 I downloaded openssl for win32 and installed it in c:\openssl I added c:\openssl\bin ...
1
vote
1answer
3k views

yum update to the specific version of package

I am using yum update command to update openssl on Linux machine. The command is # yum update openssl To update to to a specific version Say If I want to update this to the specific version like ...
2
votes
1answer
3k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
1
vote
2answers
3k views

Trying to install libcurl on a Linux RHEL, unable to install openssl

I am a programmer, and I am trying to give a clear sure fire way for the engineering team to install libcurl on a Linux RHEL machine. The machine already has the following installed by default: ...
1
vote
1answer
2k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
4
votes
1answer
2k views

Elliptic curve crypto: Using same ECC parameters results in different keys in each pass. Why?

I've been using OpenSSL as the library of choice. I created ONE set of ECC parameters via openssl ecparam -out ecparams.pem -name secp521r1 -genkey I then created two certificate requests, with ...
1
vote
0answers
740 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
3
votes
2answers
508 views

Problems building a PKI with openssl

I've set up a small PKI using the openssl ca, by following a guide which explains the procedure and some of the concepts in good detail. I want to accomplish pretty much that three-tiered setup that ...
0
votes
1answer
59 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
3
votes
2answers
2k views

OpenSSL: How to create a certificate with an empty subject DN?

Is it possible to create a PKCS#10 certificate request / X.509 certificate with the identifying information only in the subject alternate name attribute/extension? According to X.509 4.1.2.6 Subject, ...
1
vote
0answers
98 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
2answers
177 views

Which cipher to use for very small file

I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
1answer
406 views

openSSL tutorial not fully working - Can sign but cannot restore original file

I'm writing, and testing, a little tutorial for my groupmates involved in an openSSL homework. We have a bunch of PDF files, I'm the CA and each one should send me a signed PDF for me to be verified. ...
0
votes
1answer
258 views

using RC4 in Openssl on Ubuntu instead of Camellia

I've got a very basic problem: I managed to run Openssl on my Server with a self-signed cert and Camellia 256-bit encryption. When I look up on Google / Facebook etc. encryption, they all use RC4 ...
0
votes
1answer
214 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
1answer
150 views

How can I decrypt a file encrypted with the FreeBSD bdes(1) command using openssl?

The file was encrypted using the FreeBSD bdes(1) command with the default parameters.
0
votes
2answers
167 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
2
votes
1answer
170 views

DSA private key format

So I used puttygen to generate a DSA private key and then exported that to the OpenSSH format and here's what I got when I ran OpenSSL's asn1parse on it: 0:d=0 hl=4 l= 443 cons: SEQUENCE ...
2
votes
3answers
446 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
0answers
270 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
612 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
3
votes
1answer
5k views

OpenSSL CA and non CA certificate

I am able to generate a self-signed CA certificate and generate intermediate CA cert. Now I tried to generate a end-user certificate that should not be able to sign other certificates. So I opened ...