OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

1
vote
0answers
60 views

How to extract the Subject Alternative Name from a CSR by just using the openssl command?

I would need to extract the Subject Alternative Name from a CSR. Is there any way I can extract this other than using the "-text" in openssl req -in test.csr -text -noout? (Maybe similar with the ...
1
vote
0answers
147 views

Client not connecting to port running openssl s_server

Question Context: I want to test a TLS handshake and see all the output (for learning/work related purposes) between my local computer (running OSX Yosemite) and a remote work server (running amazon ...
1
vote
1answer
285 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
1
vote
1answer
269 views

Activate PHP OpenSSL module on Mac Yosemite

I've got a new MacBook Pro (with latest Yosemite) I'm setting up for web development. I am running PHPStorm as my IDE. PHPStorm cannot use its built-in composer functionality, saying it cannot connect ...
1
vote
1answer
2k views

PuTTY Key Generator says “Couldn't load private key (not a private key)” when loading a PEM file

I have a certificate ("gridcert.p12") in PKCS12 format that I'm trying to convert to a keypair that I can use in PuTTY. I'm using OpenSSL to convert the PKCS12 file to a pair of PEM files, one for a ...
1
vote
1answer
299 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
1
vote
1answer
195 views

python broken after conda remove openssl

While trying to resolve package dependency problems, I used conda to uninstall openssl, since this appeared to be one of the packages with unsatisfiable specifications. However, once I did this, ...
1
vote
2answers
2k views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes ...
1
vote
1answer
606 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
1
vote
0answers
59 views

openSSL upgrade in apache webserver

we are using apache webserver ver 2.2.3 with open SSL version 0.9.8e-fips-rhel5 (linux environment). We are required to upgrade the openSSL to the latest version for security reasons. I have following ...
1
vote
0answers
415 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
2answers
396 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
0answers
484 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
1answer
199 views

Is OpenSSL FIPS Object Module fips validated for ARM64?

For OpenSSL FIPS Object Module on http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm I don't see support for ARM64 / iOS 7, just ARM7 and ARMV7S Does this mean that for ARM64 it ...
1
vote
0answers
141 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
2answers
397 views

How do you create an AES XTS key?

I am interested in hacking around with Gluster cloud FS whose most recent beta uses AES with XTS only. It also requires openssl >= 1.0.1. The 1.0.1f Jan 2014 openssl (with 64 bit lib) install for my ...
1
vote
1answer
414 views

How to generate a P12 file with openSSL?

I'm new to the Command-Line tool and I would like to generate a P12 file, based on a key and a PEM version of an iPhone developer certificate. This is the command for it: openssl pkcs12 -export ...
1
vote
0answers
217 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
1
vote
1answer
923 views

Apache proxy throws error connecting to a third party

Connection to a certain thirdparty service via php curl throws this error: CURL error: Received HTTP code 403 from proxy after CONNECT The apahe error log on the proxy throws this: Connect to ...
1
vote
1answer
357 views

Digital ID for internal communication

We are looking for a simple solution where we can create digital ID of our staff member [3-4] only. And then we install their ID in Outlook and can use to send encrypted and digitally signed Emails. ...
1
vote
1answer
2k views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
1
vote
0answers
374 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
1answer
126 views

How to use arrow keys when typing into openssl terminal on OS X?

In developing for IMAP I type raw commands into an IMAP openssl connection very often, and I'm trying to figure out how to make this tool more usable. I connect via openssl s_client -connect ...
1
vote
0answers
102 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
776 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
367 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
2k views

Openssl decrypt from encrypted text from command issue

I am using following command to decrypt an base64 string. openssl enc -in ciphertext -out binarytext -d -a openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem I am facing an ...
1
vote
1answer
1k views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
1
vote
0answers
91 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
887 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
138 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
296 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
882 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
1
vote
1answer
690 views

Encrypting using DES 64-bit with openssl

I'm trying to do a very simple thing, namely using a 64-bit password and a 64-bit plaintext (both in hex) and encrypt it with simple old DES. my script looks like this: plaintext=`echo -n "$2" | sed ...
1
vote
1answer
188 views

Failure to build ACE

I gunzipped and tarred ace_tao5.6.3.tar.gz. After creating the "ACE_wrappers" directory I successfuly ran configure. When I tried to make, I got an "Open SSL" missing dependency. After installing ...
1
vote
2answers
221 views

Which cipher to use for very small file

I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
4answers
7k views

Can you use OpenSSL to generate an md5 or sha hash on a directory of files?

I'm interested in storing an indicator of file / directory integrity between two archived copies of directories. It's around 1TB of data stored recursively on hard drives. Is there a way using ...
0
votes
1answer
184 views

Not able to GET resource using openssl s_client

I tried following command openssl s_client -connect google.com:443 and was able to connect with google.com over SSL. But when I tried to get some resource using GET /?q=cats HTTP/1.1 <enter> ...
0
votes
1answer
22 views

server isn't sending Certificate after Server Hello

I used Wireshark to capture the packets sent to and from google.com and a personal website of mine and... google.com sends the Certificate right after the Server Hello. My own webserver, however, ...
0
votes
1answer
59 views

package full ssl cert, w private key and intermediate certs into a single pfx file?

I have this kit of files: 1.crt: My certificate 2.key: private key 3.crt: intermediate cert auth (from godaddy) 4.crt: root cert or intermediate cert (from godaddy) n.crt: some others like this from ...
0
votes
1answer
5k views

openssl pkcs12 keeps removing the PEM passphrase from keystore's entry?

OpenSSL 1.0.1e 11 Feb 2013 Generating a self-signed certificate: openssl req -x509 -newkey rsa:1024 -keyout key.pem -out cert.pem -days 365 During the process a PEM passphrase is ...
0
votes
2answers
332 views

Openssl generating private key

I'm trying to generate a private key with passphrase from the command line. For the same pass:: shmicha and the same algo -aes128 i'm getting differents results. It' is normal ? Please help openssl ...
0
votes
1answer
2k views

How to enable openssl in libcurl without recompling PHP

I'm trying to implement OpenID login in PHP by using php-openid library. But it did not work on my server probably because PHP libcurl is using NSS, not OpenSSL for SSL connection(according to ...
0
votes
2answers
5k views

How do I use cat to base64 encode stdin on the fly with openssl?

The following command works for encoding stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
0
votes
1answer
4k views

How can I send e-mails via Gmail SMTP via OpenSSL (on Windows)?

I know that the SMTP server requires TLS so I'm using OpenSSL (on Windows). openssl s_client -connect smtp.gmail.com:465 -crlf Now, I know that I have to encode a string (basically ...
0
votes
1answer
322 views

Why my SSL doesn't work? [closed]

I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
2answers
189 views

Server unresponsive after successful OpenSSL connection

I'm testing server connections using OpenSSL, with varying results Server A: connection is successful, as are user login and the other commands I expected to work Server B: connection is successful, ...
0
votes
1answer
52 views

Attempting to encrypt a text yields “unable to load Public Key”

My intention is to encrypt a text using a PEM formatted public key. (src) > echo "encrypt this." | openssl rsautl -encrypt -pubin -inkey pub.pem unable to load Public Key The same happens if I ...
0
votes
1answer
177 views

openssl : How to create .pem file with private key, associated public certificate, and certificate chain all the way to the root certificate?

For test purposes (i.e. all self signed, not production), how would I use openssl to create a PEM file which contains the private key, the associated public certificate, and the certificate chain all ...