OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

1
vote
2answers
164 views

Which cipher to use for very small file

I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
4answers
4k views

Can you use OpenSSL to generate an md5 or sha hash on a directory of files?

I'm interested in storing an indicator of file / directory integrity between two archived copies of directories. It's around 1TB of data stored recursively on hard drives. Is there a way using ...
0
votes
2answers
153 views

Openssl generating private key

I'm trying to generate a private key with passphrase from the command line. For the same pass:: shmicha and the same algo -aes128 i'm getting differents results. It' is normal ? Please help openssl ...
0
votes
1answer
376 views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
1answer
187 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
2answers
152 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
0
votes
1answer
1k views

Extract server certificate from PCKS12

I have a p12 file which apparently contains the server certificate. I need to extract the x509 server certificate from the p12 file so that I can add it to my java trust store, the problem is that I'm ...
0
votes
1answer
1k views

Where can I find OpenSSL 1.0.0 for Windows?

I have been searching the web, and can't seem to find a downloadable package of OpenSSL v1.0.0 for Windows. Does anyone know where I can find this?
0
votes
1answer
33 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...
0
votes
1answer
78 views

OpenSSL 3DES encrytion parameters

Suppose that I want to encrypt a Text with TripleDES algorithm in CBC cipher, I have two choice. 1- An online tool, Like this 2- OpenSSL tool. In the Online tool, I enter the Text, the KEY, and ...
0
votes
2answers
65 views

Installing openssl on CentOS 5.3

I am trying building apache with mod_ssl and I am running into issues becuase my OpenSSL version is less than 0.9.8a. I tried updating but yum says I have the latest version ( 0.9.8e-27.el5_10.1, ...
0
votes
1answer
56 views

./configure says OpenSSL is missing, but it isn't

I'm trying to build this application which uses, among other things, OpenSSL. It has a bootstrap script, followed by ./configure , followed by make. In the ./configure stage, I get: yada yada yada ...
0
votes
1answer
420 views

After the Heartbleed bug, do we need to update our OpenSSL DLL's?

Our software we develop uses the Indy internet component suite in Delphi. Indy has capabilities for OpenSSL. Since the Heartbleed incident, we're wondering if we need to take action. We distribute 2 ...
0
votes
2answers
86 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
1answer
120 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
1answer
1k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
2answers
1k views

How do I use cat to encrypt stdin on the fly with openssl?

The following command works for encrypting stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
0
votes
1answer
245 views

Cannot build lynx on windows with cygwin

There are many Windows builds of Lynx available over the 'net, but none of them support HTTPS, so I was trying to build with SSL enabled, among other things. The ./configure part is successful, but ...
0
votes
1answer
284 views

PowerShell in conEmu has different PATH from cmd

Why does PowerShell on conEmu have a different PATH from cmd? I see this when I do openssl version in PowerShell I see that 2007 version and in cmd I see the 2013 version.... This is my startup ...
0
votes
1answer
52 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
0
votes
2answers
918 views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
0
votes
1answer
319 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
0
votes
2answers
1k views

problem running utorrent server on cent os 5.5

i am trying to run utorrent server on remote machine via ssh µTorrent server version :alpha (3.0 build 25053) it throws error at startup ./utorrent-server-v3_0/utserver: error while loading shared ...
0
votes
1answer
2k views

nginx + OpenSSL Install

CHANGES LICENSE README conf contrib man openssl-1.0.0d pcre-8.12 src/ CHANGES.ru Makefile auto configure html/ objs/ openssl-1.0.0d.tar.gz pcre-8.12.tar.gz ./configure ./configure ...
0
votes
0answers
17 views

Command fails in a script?

I'm trying to script the OpenSSL ec command. The script is used to validate a collection of keys produced by another library. The script is shown below after the question. The following works from a ...
0
votes
0answers
24 views

Can I use CentOS 5 updates repo on a Fedora Core 5 Bordeaux server?

I'd like to update the OpenSSL 0.9.8a of my old Fedora Core 5 Bordeaux server to the 0.9.8e-27.el5_10.3 version using yum to and I'd like to know if it's possible to use the CentOS 5 updates repo. Do ...
0
votes
0answers
22 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...
0
votes
1answer
27 views

Is OpenSSL FIPS Object Module fips validated for ARM64?

For OpenSSL FIPS Object Module on http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm I don't see support for ARM64 / iOS 7, just ARM7 and ARMV7S Does this mean that for ARM64 it ...
0
votes
1answer
81 views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
0
votes
1answer
311 views

Disable Specific Cipher Suites Apache with WHM/cPanel

We are operating a few web servers that have WHM/cPanel installed so we can easily mange our sites and projects. To ensure our information and users information is secured, we have been running some ...
0
votes
0answers
131 views

Decrypting RSA cipher-text from Windows Crypto API With openssl

I have a program that encrypts a small blocks of text with an RSA 2048 public key using the Windows Crypto API CryptEncrypt() function. The public key I'm using is one derived by openssl from a pem ...
0
votes
0answers
43 views

compile lftp with different openssl version in cygwin

am trying to compile lftp with a different openssl version on cygwin but it does not compile in the one i want when configuring openssl i used ./config --prefix=/usr/local/apps/openssl-0.9.8t when ...
0
votes
1answer
110 views

Do I have to install Openssl 1.0.1g in usr/local/lib64 to overwrite usr/lib64 one? (CentOS 6.4, heartbleed issue)

I am using a VPS, I need to upgrade openssl with the new package in consequence of the heartbleed vulnerability issue. But I am a newbie in managing server, I need to know if I am getting this right ...
0
votes
0answers
565 views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
0
votes
1answer
89 views

libcrypt.a undefined reference to NSSLOW_

We have centos6 6.5 64bit server. It had been setup for 32bit development. Our project is statically linked. a team member installed the most recent openssl, openssl-devel, and openssl-static 64bit ...
0
votes
1answer
107 views

How to add Openvpn clients without the original rsa folder?

I have a working openvpn server, however I need to add a new client to my pool. The problem is that I do not seem to have the original rsa folder that was created when I was setting it up the first ...
0
votes
0answers
138 views

Apahce proxy throws error connecting to a third party

Connection to a certain thirdparty service via php curl throws this error: CURL error: Received HTTP code 403 from proxy after CONNECT The apahe error log on the proxy throws this: Connect to ...
0
votes
0answers
64 views

Installing libevent: need to set different version of openssl

I'm trying to run make verify to install libevent. However, I get the following issue with openSSL, that the version I'm using to compile is incorrect. regress: WARN regress_ssl.c:162: Version ...
0
votes
0answers
29 views

Is it possible to use custom random sources directly in gnutls or in openssl clients?

I've only saw the -rand option in openssl which is used to seed their custom random number generator. The help page are divided, so it is easy to miss an option. I couldn't get a list of options for ...
0
votes
0answers
38 views

How do I join, decrypt and uncompress my backups?

This is the line I used to back up some files for f in "*"; do tar -ch "$f" | pv | xz -9 -v |openssl des3 -salt -k “mypassword” | split -a 4 -b 200m – “/backups_${f%}.tar.xz_” ; done Now I am ...
0
votes
0answers
150 views

How to dump the Subject Alternative Name (SAN) from an SSL certificate file

I know that I can dump the entire information from a PEM certificate file with this command: openssl x509 -in certfile -noout -text And I've already found another direct parameter to show me only ...
0
votes
0answers
29 views

Calculate the padding on OpenSSL Algorithms (enc) [closed]

I am wondering by how much are padded OpenSSL algorithms.
0
votes
1answer
187 views

Error with curl

I'm having this error with curl: curl https://www.google.com -v * About to connect() to www.google.com port 443 (#0) * Trying 2607:f8b0:400e:c01::67... * Failed to connect to ...
0
votes
0answers
338 views

501 Not Implemented error

I'm trying to setup WAMP to act as a local server and setup ssl so that I can develop facebook applications. But when I open my localhost over https and try to open the project the .js and .css files ...
0
votes
1answer
120 views

How can i embed my openssl certificate in firefox?

How can i embed my openssl certificate in firefox? When i visit mywebsite it show ssl warning, but i want to rebuild firefox a custom release so it will not show ssl warning how can i do that ? What ...
0
votes
1answer
67 views

x590cafile default location for gnutls-cli

I am using gnutls-cli from Cygwin, on a laptop running Windows XP Home (I have openssl from cygwin also). I am wondering where does gnutls-cli look for CA certificates if I don't specify option ...
0
votes
1answer
387 views

How to add self signed certificate to certificate bundle?

How to add self signed certificate to certificate bundle so that the Curl http client can verify the self signed certificate as valid one?
0
votes
1answer
740 views

OpenSSL and what encryption method to use

I am on OS X 10.8.3, savvy with a command-line and I want to use OpenSSL to start encrypting sensitive information on my MacBook Pro I know that I can use openSSL in a syntax like: openssl enc ...
0
votes
1answer
77 views

Permissions required to rum make install and yum update

I am researching on Openssl update manually and openssl update through yum update. I have figured out the commands to do it. But searching on permissions required to make install and yum update. ...
0
votes
1answer
346 views

openSSL tutorial not fully working - Can sign but cannot restore original file

I'm writing, and testing, a little tutorial for my groupmates involved in an openSSL homework. We have a bunch of PDF files, I'm the CA and each one should send me a signed PDF for me to be verified. ...