OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

1
vote
1answer
727 views

No valid certificate found using self signed S/MIME with iOS [closed]

My goal is to get S/MIME email encryption to work with certificates signed with my own CA cert. This works fine except from iOS. I can send encrypted and signed e-mails from Mutt and MacOS Mail. I ...
1
vote
1answer
175 views

Digital ID for internal communication

We are looking for a simple solution where we can create digital ID of our staff member [3-4] only. And then we install their ID in Outlook and can use to send encrypted and digitally signed Emails. ...
1
vote
1answer
1k views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
1
vote
0answers
240 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
1answer
84 views

How to use arrow keys when typing into openssl terminal on OS X?

In developing for IMAP I type raw commands into an IMAP openssl connection very often, and I'm trying to figure out how to make this tool more usable. I connect via openssl s_client -connect ...
1
vote
0answers
62 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
495 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
244 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
849 views

Openssl decrypt from encrypted text from command issue

I am using following command to decrypt an base64 string. openssl enc -in ciphertext -out binarytext -d -a openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem I am facing an ...
1
vote
0answers
366 views

How can I export public key in PEM format with GnuPG?

I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them? I found this from ...
1
vote
1answer
842 views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
1
vote
0answers
82 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
739 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
98 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
270 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
612 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
1
vote
1answer
520 views

Encrypting using DES 64-bit with openssl

I'm trying to do a very simple thing, namely using a 64-bit password and a 64-bit plaintext (both in hex) and encrypt it with simple old DES. my script looks like this: plaintext=`echo -n "$2" | sed ...
1
vote
1answer
178 views

Failure to build ACE

I gunzipped and tarred ace_tao5.6.3.tar.gz. After creating the "ACE_wrappers" directory I successfuly ran configure. When I tried to make, I got an "Open SSL" missing dependency. After installing ...
1
vote
2answers
177 views

Which cipher to use for very small file

I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
4answers
4k views

Can you use OpenSSL to generate an md5 or sha hash on a directory of files?

I'm interested in storing an indicator of file / directory integrity between two archived copies of directories. It's around 1TB of data stored recursively on hard drives. Is there a way using ...
0
votes
1answer
11 views

package full ssl cert, w private key and intermediate certs into a single pfx file?

I have this kit of files: 1.crt: My certificate 2.key: private key 3.crt: intermediate cert auth (from godaddy) 4.crt: root cert or intermediate cert (from godaddy) n.crt: some others like this from ...
0
votes
1answer
845 views

OpenSSL CA keyUsage extension

I want to set up a chain of certificates, with a self signed 'root' CA at the top that signs sub CAs, which can then sign client and server certificates. When setting up openssl.cnf, I noticed a ...
0
votes
1answer
2k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
2answers
195 views

Openssl generating private key

I'm trying to generate a private key with passphrase from the command line. For the same pass:: shmicha and the same algo -aes128 i'm getting differents results. It' is normal ? Please help openssl ...
0
votes
1answer
600 views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
1answer
214 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
2answers
167 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
0
votes
1answer
1k views

Where can I find OpenSSL 1.0.0 for Windows?

I have been searching the web, and can't seem to find a downloadable package of OpenSSL v1.0.0 for Windows. Does anyone know where I can find this?
0
votes
2answers
25 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
0
votes
1answer
309 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...
0
votes
1answer
390 views

OpenSSL 3DES encrytion parameters

Suppose that I want to encrypt a Text with TripleDES algorithm in CBC cipher, I have two choice. 1- An online tool, Like this 2- OpenSSL tool. In the Online tool, I enter the Text, the KEY, and ...
0
votes
2answers
384 views

Installing openssl on CentOS 5.3

I am trying building apache with mod_ssl and I am running into issues becuase my OpenSSL version is less than 0.9.8a. I tried updating but yum says I have the latest version ( 0.9.8e-27.el5_10.1, ...
0
votes
1answer
71 views

./configure says OpenSSL is missing, but it isn't

I'm trying to build this application which uses, among other things, OpenSSL. It has a bootstrap script, followed by ./configure , followed by make. In the ./configure stage, I get: yada yada yada ...
0
votes
1answer
442 views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
0
votes
1answer
569 views

After the Heartbleed bug, do we need to update our OpenSSL DLL's?

Our software we develop uses the Indy internet component suite in Delphi. Indy has capabilities for OpenSSL. Since the Heartbleed incident, we're wondering if we need to take action. We distribute 2 ...
0
votes
2answers
99 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
2answers
2k views

How do I use cat to encrypt stdin on the fly with openssl?

The following command works for encrypting stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
0
votes
1answer
3k views

How can I send e-mails via Gmail SMTP via OpenSSL (on Windows)?

I know that the SMTP server requires TLS so I'm using OpenSSL (on Windows). openssl s_client -connect smtp.gmail.com:465 -crlf Now, I know that I have to encode a string (basically ...
0
votes
1answer
312 views

Cannot build lynx on windows with cygwin

There are many Windows builds of Lynx available over the 'net, but none of them support HTTPS, so I was trying to build with SSL enabled, among other things. The ./configure part is successful, but ...
0
votes
1answer
305 views

PowerShell in conEmu has different PATH from cmd

Why does PowerShell on conEmu have a different PATH from cmd? I see this when I do openssl version in PowerShell I see that 2007 version and in cmd I see the 2013 version.... This is my startup ...
0
votes
1answer
59 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
0
votes
2answers
980 views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
0
votes
1answer
337 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
0
votes
2answers
1k views

problem running utorrent server on cent os 5.5

i am trying to run utorrent server on remote machine via ssh µTorrent server version :alpha (3.0 build 25053) it throws error at startup ./utorrent-server-v3_0/utserver: error while loading shared ...
0
votes
1answer
2k views

nginx + OpenSSL Install

CHANGES LICENSE README conf contrib man openssl-1.0.0d pcre-8.12 src/ CHANGES.ru Makefile auto configure html/ objs/ openssl-1.0.0d.tar.gz pcre-8.12.tar.gz ./configure ./configure ...
0
votes
1answer
13 views

RPM created using checkinstall giving dependency error

Compiled openssl-1.0.1.i using commands: export CFLAGS="-fPIC" ./config shared --openssldir=/usr/share/ssl make depend make all make install here it is not asking for any dependencies I am able to ...
0
votes
1answer
19 views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
0
votes
1answer
12 views

Weird characters at the end of openssl dhparam output file

When I generated a diffie-hellman prime number using openssl, the output file had some weird characters at the end and I wanted to understand what it means. Background info: My goal was to generate ...
0
votes
0answers
59 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > ...
0
votes
0answers
15 views

nginx is still linked to old openssl

We're running CentOS 6.5. We recently updated via yum: OpenSSL to OpenSSL 1.0.1e-30.el6_6.4 nginx to nginx-1.6.2-1.el5.ngx However, I noticed that even though nginx was configured to use TLS v1, ...