OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
1answer
413 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
0
votes
2answers
2k views

How do I use cat to encrypt stdin on the fly with openssl?

The following command works for encrypting stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
-1
votes
1answer
2k views

How can I send e-mails via Gmail SMTP via OpenSSL (on Windows)?

I know that the SMTP server requires TLS so I'm using OpenSSL (on Windows). openssl s_client -connect smtp.gmail.com:465 -crlf Now, I know that I have to encode a string (basically ...
1
vote
0answers
337 views

How can I export public key in PEM format with GnuPG?

I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them? I found this from ...
17
votes
2answers
6k views

How to use ssh-rsa public key to encrypt a text?

So, the scenario is: Given I'm Bob, I want to encrypt some message for Alice. The only public key I have is her ssh-rsa id_rsa.pub like this: ssh-rsa ...
1
vote
1answer
754 views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
0
votes
1answer
1k views

OpenSSL and what encryption method to use

I am on OS X 10.8.3, savvy with a command-line and I want to use OpenSSL to start encrypting sensitive information on my MacBook Pro I know that I can use openSSL in a syntax like: openssl enc ...
1
vote
0answers
81 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
0
votes
1answer
278 views

Cannot build lynx on windows with cygwin

There are many Windows builds of Lynx available over the 'net, but none of them support HTTPS, so I was trying to build with SSL enabled, among other things. The ./configure part is successful, but ...
0
votes
1answer
101 views

Permissions required to rum make install and yum update

I am researching on Openssl update manually and openssl update through yum update. I have figured out the commands to do it. But searching on permissions required to make install and yum update. ...
2
votes
0answers
1k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
0
votes
1answer
301 views

PowerShell in conEmu has different PATH from cmd

Why does PowerShell on conEmu have a different PATH from cmd? I see this when I do openssl version in PowerShell I see that 2007 version and in cmd I see the 2013 version.... This is my startup ...
1
vote
1answer
1k views

upgrade to openssl 1.0.1e on windows

I know I am missing a crucial step, but I can't figure out what to do I have openssl OpenSSL 0.9.8e 23 Feb 2007 I downloaded openssl for win32 and installed it in c:\openssl I added c:\openssl\bin ...
1
vote
1answer
3k views

yum update to the specific version of package

I am using yum update command to update openssl on Linux machine. The command is # yum update openssl To update to to a specific version Say If I want to update this to the specific version like ...
2
votes
1answer
2k views

Permissions for SSL key?

I'm trying to set up a secure connection (https) in nginx. But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial. Should I change them? To what?
1
vote
2answers
3k views

Trying to install libcurl on a Linux RHEL, unable to install openssl

I am a programmer, and I am trying to give a clear sure fire way for the engineering team to install libcurl on a Linux RHEL machine. The machine already has the following installed by default: ...
1
vote
1answer
1k views

changing the pass phrase on a key from openssl

A while ago I created a key with openssl genrsa -aes256 4096 > server.key. The process prompts for a pass phrase. I would now like to change that pass phrase, is that possible?
4
votes
1answer
2k views

Elliptic curve crypto: Using same ECC parameters results in different keys in each pass. Why?

I've been using OpenSSL as the library of choice. I created ONE set of ECC parameters via openssl ecparam -out ecparams.pem -name secp521r1 -genkey I then created two certificate requests, with ...
1
vote
0answers
718 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
3
votes
2answers
491 views

Problems building a PKI with openssl

I've set up a small PKI using the openssl ca, by following a guide which explains the procedure and some of the concepts in good detail. I want to accomplish pretty much that three-tiered setup that ...
0
votes
1answer
53 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
3
votes
2answers
2k views

OpenSSL: How to create a certificate with an empty subject DN?

Is it possible to create a PKCS#10 certificate request / X.509 certificate with the identifying information only in the subject alternate name attribute/extension? According to X.509 4.1.2.6 Subject, ...
1
vote
0answers
96 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
2answers
168 views

Which cipher to use for very small file

I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
1answer
381 views

openSSL tutorial not fully working - Can sign but cannot restore original file

I'm writing, and testing, a little tutorial for my groupmates involved in an openSSL homework. We have a bunch of PDF files, I'm the CA and each one should send me a signed PDF for me to be verified. ...
0
votes
1answer
256 views

using RC4 in Openssl on Ubuntu instead of Camellia

I've got a very basic problem: I managed to run Openssl on my Server with a self-signed cert and Camellia 256-bit encryption. When I look up on Google / Facebook etc. encryption, they all use RC4 ...
0
votes
1answer
204 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
1answer
141 views

How can I decrypt a file encrypted with the FreeBSD bdes(1) command using openssl?

The file was encrypted using the FreeBSD bdes(1) command with the default parameters.
0
votes
2answers
163 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
2
votes
1answer
167 views

DSA private key format

So I used puttygen to generate a DSA private key and then exported that to the OpenSSH format and here's what I got when I ran OpenSSL's asn1parse on it: 0:d=0 hl=4 l= 443 cons: SEQUENCE ...
2
votes
3answers
355 views

Certificates signed by multiple CAs

Is it possible to have a OpenSSL Certificate signed by multiple CAs? Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
0answers
265 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
577 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
3
votes
1answer
4k views

OpenSSL CA and non CA certificate

I am able to generate a self-signed CA certificate and generate intermediate CA cert. Now I tried to generate a end-user certificate that should not be able to sign other certificates. So I opened ...
4
votes
4answers
3k views

OpenSSL hash function for generating AES key

What hash function does OpenSSL use to generate a key for AES-256? I can't find it anywhere in their documentation. $ touch file $ openssl aes-256-cbc -nosalt -P -in file enter aes-256-cbc ...
0
votes
1answer
1k views

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network?

How to use SSL tunnelling to give full internet access to some applications while you are on a restrictive corporate network? Use cases: you want to be able to access some restricted destinations ...
2
votes
0answers
435 views

OpenSSL force client to use specific protocol

When subversion attempts to connect to an https URL, the underlying protocol library (openssl) attempts to start the secure protocol negotiation at the most basic level, plain SSL. Unfortunately, I ...
2
votes
1answer
2k views

How to Import CA cert to pkcs12

I am wondering if it is possible to import CA certificate in .p12 file. I google it and found that maybe it is possible, but how? Thanks
0
votes
1answer
265 views

How can I create an unencrypted PKCS#12 certificate?

Given a certificate, thing.crt and a key, thing.key, I can create an PKCS#12 certificate with: openssl pkcs12 -export -in thing.crt -inkey thing.key -out thing.p12 Problem is, openssl asks me for a ...
2
votes
4answers
949 views

Text editors with encryption plugins?

I am looking for a text editor which supports openssl encryption as a plugin. So, instead of manually: decrypt a file in shell edit it in the text editor encrypt the file in shell Hopefully, the ...
2
votes
1answer
3k views

How to install self signed certificate on Apache in Linux?

Where certificate files being created while using openssl? How to install custom generated certificate on Apache https? root@ubuntu:/# openssl req \ > -x509 -nodes -days 365 \ > -newkey ...
0
votes
1answer
2k views

curl failed setting cipher list

I'm trying to make curl use GOST2001-GOST89-GOST89 cipher which is available and usable by OpenSSL but keep getting failed setting cipher list error despite the fact that curl sees gost engine and can ...
4
votes
1answer
2k views

Why openssl insist on requiring a passphrase on genrsa command?

Issue command: openssl genrsa -out rsaprivatekey-nake.pem -des3 1024 If not providing a passphrase(just press enter when requested), it keeps saying: Enter pass phrase for rsaprivatekey-nake.pem: ...
3
votes
1answer
926 views

OpenSSL CSR generation with subject key from stdin

Is it possible to pass in the subject's key from stdin when creating CSRs with OpenSSL? Like in the following (non-working) openssl req -new -key stdin -subj ...
0
votes
2answers
962 views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
1
vote
1answer
218 views

Convergence notary server error

Trying to run a convergence notary to learn some stuff and I get an error when starting the service. I am running Ubuntu server 11.04 fully updated. I followed the directions that are here. When I ...
0
votes
1answer
331 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
2
votes
2answers
4k views

Decode file encoded on one system using openssl on another system

I am encrypting a file on Ubuntu machine with openSSL using following command: openssl enc -aes-256-cbc -in mydbBackup.tar -out mydbBackup.enc.tar -pass pass:scecret I transfer it to ftp ...
5
votes
1answer
729 views

How to create private security certificates that behave like official ones?

I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users. There is a hardware server running a web service ...
0
votes
2answers
791 views

Amazon EC2 and eventmachine encryption issues

I'm testing out an Amazon EC2 instance (Amazon Linux AMI 2011.09, EBS boot, 32-bit architecture with Amazon EC2 AMI Tools.) to see if it'll serve my purposes. I've written a small backend in Ruby ...