OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
1answer
103 views

How can I decrypt a file encrypted with the FreeBSD bdes(1) command using openssl?

The file was encrypted using the FreeBSD bdes(1) command with the default parameters.
0
votes
2answers
142 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
2
votes
0answers
146 views

DSA private key format

So I used puttygen to generate a DSA private key and then exported that to the OpenSSH format and here's what I got when I ran OpenSSL's asn1parse on it: 0:d=0 hl=4 l= 443 cons: SEQUENCE ...
2
votes
3answers
144 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
0answers
234 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
460 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
3
votes
1answer
3k views

OpenSSL CA and non CA certificate

I am able to generate a self-signed CA certificate and generate intermediate CA cert. Now I tried to generate a end-user certificate that should not be able to sign other certificates. So I opened ...
4
votes
4answers
2k views

OpenSSL hash function for generating AES key

What hash function does OpenSSL use to generate a key for AES-256? I can't find it anywhere in their documentation. $ touch file $ openssl aes-256-cbc -nosalt -P -in file enter aes-256-cbc ...
0
votes
1answer
985 views

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network?

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network? Use cases: you want to be able to access some restricted destinations ...
2
votes
0answers
341 views

OpenSSL force client to use specific protocol

When subversion attempts to connect to an https URL, the underlying protocol library (openssl) attempts to start the secure protocol negotiation at the most basic level, plain SSL. Unfortunately, I ...
2
votes
1answer
1k views

How to Import CA cert to pkcs12

I am wondering if it is possible to import CA certificate in .p12 file. I google it and found that maybe it is possible, but how? Thanks
0
votes
1answer
219 views

How can I create an unencrypted PKCS#12 certificate?

Given a certificate, thing.crt and a key, thing.key, I can create an PKCS#12 certificate with: openssl pkcs12 -export -in thing.crt -inkey thing.key -out thing.p12 Problem is, openssl asks me for a ...
2
votes
4answers
707 views

Text editors with encryption plugins?

I am looking for a text editor which supports openssl encryption as a plugin. So, instead of manually: decrypt a file in shell edit it in the text editor encrypt the file in shell Hopefully, the ...
2
votes
1answer
2k views

How to install self signed certificate on Apache in Linux?

Where certificate files being created while using openssl? How to install custom generated certificate on Apache https? root@ubuntu:/# openssl req \ > -x509 -nodes -days 365 \ > -newkey ...
0
votes
1answer
1k views

curl failed setting cipher list

I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can ...
2
votes
1answer
1k views

Why openssl insist on requiring a passphrase on genrsa command?

Issue command: openssl genrsa -out rsaprivatekey-nake.pem -des3 1024 If not providing a passphrase(just press enter when requested), it keeps saying: Enter pass phrase for rsaprivatekey-nake.pem: ...
3
votes
1answer
685 views

OpenSSL CSR generation with subject key from stdin

Is it possible to pass in the subject's key from stdin when creating CSRs with OpenSSL? Like in the following (non-working) openssl req -new -key stdin -subj ...
0
votes
2answers
861 views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
1
vote
1answer
194 views

Convergence notary server error

Trying to run a convergence notary to learn some stuff and I get an error when starting the service. I am running Ubuntu server 11.04 fully updated. I followed the directions that are here. When I ...
0
votes
1answer
302 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
2
votes
2answers
3k views

Decode file encoded on one system using openssl on another system

I am encrypting a file on Ubuntu machine with openSSL using following command: openssl enc -aes-256-cbc -in mydbBackup.tar -out mydbBackup.enc.tar -pass pass:scecret I transfer it to ftp ...
4
votes
1answer
500 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
0
votes
2answers
732 views

Amazon EC2 and eventmachine encryption issues

I'm testing out an Amazon EC2 instance (Amazon Linux AMI 2011.09, EBS boot, 32-bit architecture with Amazon EC2 AMI Tools.) to see if it'll serve my purposes. I've written a small backend in Ruby ...
4
votes
1answer
6k views

Confusion with Pem Pass Phrase and Challenge Password

When creating a CSR with openSSL it asks me: Enter PEM pass phrase: After that it asks: Please enter the following 'extra' attributes to be sent with your certificate request A challenge password ...
8
votes
3answers
18k views

OpenSSL missing during ./configure. How to fix?

I was trying to install node.js and found OpenSSL support missing during ./configure. How can I fix it? Is it a mandatory step? Would the --without-ssl option fix the problem? # ./configure ...
1
vote
1answer
1k views

Trying convert webserver certificate to PEM file for wireshark to monitor ssl traffic in HTTP format

I am trying to monitor https traffic as readable HTML. I have downloaded the certificate from the server. "In Internet Explorer, I selected the certificate and copy to file, DER encoded binary X.509 ...
0
votes
2answers
5k views

yum install error: protected multilib versions error

I am trying to install the development headers for openssl on a RHEL 6.1 system, but get the following error: $sudo yum install openssl-devel.x86_64 <SNIP> --> Finished Dependency ...
0
votes
2answers
582 views

Trying to install lighttpd with macports, but get 'upgrade openssl failed'?

I want to install lighttpd with macports, but: $ sudo port install lighttpd ---> Computing dependencies for openssl ---> Building openssl Error: Target org.macports.build returned: shell ...
0
votes
1answer
1k views

Extract server certificate from PCKS12

I have a p12 file which apparently contains the server certificate. I need to extract the x509 server certificate from the p12 file so that I can add it to my java trust store, the problem is that I'm ...
1
vote
2answers
2k views

How to get the key ID from a .pem openssl file?

I have a .pem private key generated by openssl. How to extract the key ID from it? Edit: the generated rsa keypair is for Amazon cloudfront. When uploaded on the console, a 'Key ID' is displayed. ...
2
votes
0answers
465 views

Problem Verifying S/MIME Messages with Mutt

I'm having problems verifying some S/MIME messages in Mutt. First some background $ mutt -v Mutt 1.5.21 (2010-09-15) Copyright (C) 1996-2009 Michael R. Elkins and others. Mutt comes with ABSOLUTELY ...
1
vote
1answer
434 views

Encrypting using DES 64-bit with openssl

I'm trying to do a very simple thing, namely using a 64-bit password and a 64-bit plaintext (both in hex) and encrypt it with simple old DES. my script looks like this: plaintext=`echo -n "$2" | sed ...
1
vote
1answer
33 views

Why does Openssl 0.9.8g suddenly changes to 0.9.8b?

I have a weird problem in which I try to use cryptodev in Openssl version 0.9.8g, but then if an error occurs or the system logs out, the version for Openssl rolls back to 0.9.8b.I have also tried ...
2
votes
1answer
11k views

Does openssl errno 104 mean that SSLv2 is disabled?

I want to check if my server has SSLv2 disabled. I am doing this by attempting to connect remotely with openssl with the following shell command. openssl s_client -connect HOSTNAME:443 -ssl2 Most ...
0
votes
0answers
548 views

Can't install openssl-devel because of unmet dependencies

I need to recompile php, in order to do that I needed openssl-devel but when I tried installing it, I got the following error: # apt-get install openssl-devel Reading Package Lists... Building ...
0
votes
2answers
1k views

problem running utorrent server on cent os 5.5

i am trying to run utorrent server on remote machine via ssh µTorrent server version :alpha (3.0 build 25053) it throws error at startup ./utorrent-server-v3_0/utserver: error while loading shared ...
0
votes
1answer
2k views

nginx + OpenSSL Install

CHANGES LICENSE README conf contrib man openssl-1.0.0d pcre-8.12 src/ CHANGES.ru Makefile auto configure html/ objs/ openssl-1.0.0d.tar.gz pcre-8.12.tar.gz ./configure ./configure ...
2
votes
1answer
811 views

Using openssl command line tool to encrypt/decrypt data, DES ECB

How can I create a random 64 bit key for DEC ECB encryption/decryption, and then use the same key for encryption/decryption many times? All this must be done using openssl command line tool. In all ...
0
votes
1answer
715 views

problem in installing qca-ossl plugin

I have been trying to compile and install the qca-ossl plugin for qca and qt. QT, QCA and openssl i installed without any problems. But now i have to compile qca-ossl. While compiling some error ...
19
votes
3answers
9k views

OpenSSL without prompt

I am using following code to generate keys: apt-get -qq -y install openssl; mkdir -p /etc/apache2/ssl; openssl genrsa -des3 -out server.key 1024; openssl req -new -key server.key -out server.csr; cp ...
2
votes
2answers
12k views

SVN over HTTPS and SSL handshake fails

I am trying to checkout from my team's svn server. It requires client side authentication. I'm running Ubuntu 10.04. Here's what I get: $ svn checkout https://myproject.myserver.org/svn/project/ ...
7
votes
1answer
3k views

Checking ssh keys have passphrases

I have a bunch of users, who with SSH keys have access to accounts on other servers. Currently I have a script which collects up the ssh public keys and distributes them to the correct account on the ...
1
vote
1answer
176 views

Failure to build ACE

I gunzipped and tarred ace_tao5.6.3.tar.gz. After creating the "ACE_wrappers" directory I successfuly ran configure. When I tried to make, I got an "Open SSL" missing dependency. After installing ...
12
votes
2answers
2k views

openssl certificate generation commands [duplicate]

I am making a self signed certificate using OpenSSL. I want to make the certificate in one go, means that it will not ask me for the input for Company Name, Common Name etc etc. Is there anyway to do ...
1
vote
1answer
625 views

What are the correct set of DLLs and placement for SSL support in mIRC on 64 bit Windows?

I am using mIRC 6.35 on a fresh install of Windows 7 64-bit. No matter what versions of the OpenSSL DLLs I use, nor where I place them, I cannot get mIRC to work with SSL; I get the "ssl not ...
0
votes
1answer
1k views

Where can I find OpenSSL 1.0.0 for Windows?

I have been searching the web, and can't seem to find a downloadable package of OpenSSL v1.0.0 for Windows. Does anyone know where I can find this?
0
votes
4answers
3k views

Can you use OpenSSL to generate an md5 or sha hash on a directory of files?

I'm interested in storing an indicator of file / directory integrity between two archived copies of directories. It's around 1TB of data stored recursively on hard drives. Is there a way using ...