OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

1
vote
0answers
11 views

How to check for OpenSSL Oracle Vulnerability for internal application?

I am trying to test our internal applications(DEV and QA enironments) which are behind the firewall for OpenSSL Oracle Vulnerability. I am able to run Qualys(ssllabs.com) to check for Oracle ...
1
vote
1answer
66 views

Scrapy using older version of OpenSSL

I am running into errors because my Scrapy is using an older version of openssl (OpenSSL 0.9.8zh). I upgraded my openssl version (1.0.2h) using brew install openssl but I don't think Scrapy is using ...
1
vote
0answers
36 views

OpenSSL with added CA certificate on CentOS

So the problem is: I'm trying to add CA certificate on CentOS (on server) and check the working of SSL of one of my clients domain. The same thing works perfectly on Ubuntu: How do you add a ...
1
vote
1answer
35 views

Can it be found out, what websites/domains an SSL (pem) certificate approves of?

A (non-wildcard) SSL certificate can be issued to match multiple domains and subdomains, like mysub1.example1.com, www.example2.com, and many others, all in one certificate with the same private key. ...
1
vote
0answers
25 views

Extract and Trust certificate via command line in windows

I am trying to setup a printer via command line in windows. So far I everything is working well except I don't know of any way to extract .cer from .cat via command line. I could extract it via ...
1
vote
1answer
73 views

How to speed up SSL connection establishment?

I have an OpenSSL setup on my Linux PC using Apache2. NO, I haven't enabled DNS resolving. I have the certificate on the machine, LOCALLY. Still, Chrome devtools tell me that Initial Connection took ...
1
vote
0answers
98 views

SSL Decode Error 50 : Alert 21

I have been getting an SSL decode error while connecting to the server. This is in a lab environment and I am using openssl s_client utility. It throws an decode error as 50 and alert no as 21. On the ...
1
vote
1answer
159 views

openssl fails to install from source ERROR: /usr/bin/ld: cannot find -lssl

I am trying to install openssl by source I run: wget wget ftp://ftp.openssl.org/source/openssl-1.0.2g.tar.gz tar xvzf openssl-1.0.2g.tar.gz cd openssl-1.0.2g ./config --prefix=/home/david/project ...
1
vote
1answer
270 views

WAMP php openssl extension activated but not loaded

I've installed WAMP3 and everything finally went well. However, I am now encountering a problem where a PHP extension seems activated but not loaded. WAMP 32bit on 64bit system (had to for MSSQL ...
1
vote
1answer
77 views

sTunnel failure to start

im a bit stuck and need help understanding what im being told as there is nothing in the log file, i get the following error when i try and run stunnel (servermode): sudo /etc/init.d/stunnel4 start &...
1
vote
1answer
120 views

How to install openssl cryptographic library on Lubuntu

I'm trying to build cryptsetup 1.6.8 (or 1.7.0) from source using the openssl libraries instead of libgcrypt. ./configure --with-crypto_backend=openssl I did install libssl-dev but it still gives ...
1
vote
0answers
62 views

Screwed up /etc/pki somehow (I think)

I can no longer access certain secure sites with any browser on one of my machines: > curl -vvv https://order.subway.com/ > /dev/null * About to connect() to order.subway.com port 443 (#0) * ...
1
vote
0answers
133 views

How to transcode AES encrypted files with AWS Elastic Transcoder

I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
1
vote
1answer
27 views

Is Ubuntu Server 14.04 LTS getting neglected by Canonical?

I'm doing some clean installs and am faced with the issue that OpenSSL is at version 1.0.1f 6 Jan 2014 (yay, heartbleed!), and Python at 2.7.6. I'm having a really hard time upping OpenSSL to the ...
1
vote
1answer
133 views

How do you verify a client rsa key via cli?

I am experiencing some issues with openvpn and I would like to verifiy the client's connecting key. I found a number of samples on how to verify the servers key: linux-3kfe:/usr/share/easy-rsa/keys # ...
1
vote
0answers
45 views

Python 2.7 don't have HTTPSHandler and _ssl modules on Centos4.4

I build Python 2.7 from source code on Centos4.4, but there aren't HTTPSHandler and _ssl modules in Python2.7.10. I have already installed and upgrade openssl and openssl-devel before building Python2....
1
vote
1answer
156 views

OpenSSL AES speed different with EVP and no AES-NI

My computer does not have AES-NI, but when I run openssl speed with and without -evp I see a speed difference. Why is this? openssl speed aes-128-cbc Doing aes-128 cbc for 3s on 16 size blocks: ...
1
vote
0answers
32 views

Using OpenSSL and nmichaels.org/rsa.py respectively get the different encrypted results

First, I used OpenSSL to create a public key(modulus, e), then a text file is encrypted with the public key. Second, I inputed modulus and e(from 'First') at http://nmichaels.org/rsa.py, then using ...
1
vote
0answers
39 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
78 views

How to extract the Subject Alternative Name from a CSR by just using the openssl command?

I would need to extract the Subject Alternative Name from a CSR. Is there any way I can extract this other than using the "-text" in openssl req -in test.csr -text -noout? (Maybe similar with the -...
1
vote
0answers
189 views

Client not connecting to port running openssl s_server

Question Context: I want to test a TLS handshake and see all the output (for learning/work related purposes) between my local computer (running OSX Yosemite) and a remote work server (running amazon ...
1
vote
1answer
327 views

Creating PEM public key for Google App Engine

I am running a small company and unfortunately my IT support just quit. I am running a site on GAE. My SSL expired and I ordered a new one, receiving the following files: 3 .cer files in an SHA-1 ...
1
vote
1answer
388 views

Activate PHP OpenSSL module on Mac Yosemite

I've got a new MacBook Pro (with latest Yosemite) I'm setting up for web development. I am running PHPStorm as my IDE. PHPStorm cannot use its built-in composer functionality, saying it cannot connect ...
1
vote
1answer
3k views

PuTTY Key Generator says “Couldn't load private key (not a private key)” when loading a PEM file

I have a certificate ("gridcert.p12") in PKCS12 format that I'm trying to convert to a keypair that I can use in PuTTY. I'm using OpenSSL to convert the PKCS12 file to a pair of PEM files, one for a ...
1
vote
1answer
340 views

Imported CA certificate to Firefox Browser not working

I created Certificate Authority (CA) according to Ubuntu help using openssl. After creating a certificate for Apache2 and adding to certificate to it, I want to import it in Firefox. In the end of ...
1
vote
1answer
223 views

python broken after conda remove openssl

While trying to resolve package dependency problems, I used conda to uninstall openssl, since this appeared to be one of the packages with unsatisfiable specifications. However, once I did this, ...
1
vote
2answers
3k views

Links SSL Error

What version of links does the user called "bytepool" have that he's able to find this workaround? Refer to link below. How to tell `links` to ignore expired SSL certificate and proceed? He writes "...
1
vote
1answer
669 views

TLS negotiation failed on ldaps:// - sslv3 alert bad record mac

We are facing an issue in one of our openldap environments, while enabling secure queries via ldaps:// our integration environment keeps returning the following error to out ldapsearch command: ...
1
vote
0answers
62 views

openSSL upgrade in apache webserver

we are using apache webserver ver 2.2.3 with open SSL version 0.9.8e-fips-rhel5 (linux environment). We are required to upgrade the openSSL to the latest version for security reasons. I have following ...
1
vote
0answers
501 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I?
1
vote
2answers
437 views

Generate a public key certificate signed by CA with OpenSSL

I am working on a webservice that requires a signature in the sent and received messages. After sending a certificate request to the entity that will consume the webservice, they sent me (in addition ...
1
vote
0answers
511 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
1answer
213 views

Is OpenSSL FIPS Object Module fips validated for ARM64?

For OpenSSL FIPS Object Module on http://csrc.nist.gov/groups/STM/cmvp/documents/140-1/1401vend.htm I don't see support for ARM64 / iOS 7, just ARM7 and ARMV7S Does this mean that for ARM64 it isn'...
1
vote
0answers
155 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
2answers
421 views

How do you create an AES XTS key?

I am interested in hacking around with Gluster cloud FS whose most recent beta uses AES with XTS only. It also requires openssl >= 1.0.1. The 1.0.1f Jan 2014 openssl (with 64 bit lib) install for my ...
1
vote
1answer
462 views

How to generate a P12 file with openSSL?

I'm new to the Command-Line tool and I would like to generate a P12 file, based on a key and a PEM version of an iPhone developer certificate. This is the command for it: openssl pkcs12 -export -...
1
vote
0answers
221 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 16:26:...
1
vote
1answer
1k views

Apache proxy throws error connecting to a third party

Connection to a certain thirdparty service via php curl throws this error: CURL error: Received HTTP code 403 from proxy after CONNECT The apahe error log on the proxy throws this: Connect to ...
1
vote
1answer
388 views

Digital ID for internal communication

We are looking for a simple solution where we can create digital ID of our staff member [3-4] only. And then we install their ID in Outlook and can use to send encrypted and digitally signed Emails. ...
1
vote
1answer
2k views

Can not combine two CA certificate files to a CA certificate chain

Ι' m trying to concatenate two valid self-signed CA pem files generated using openssl in order to import a single CA file in Firefox (client side), using the following command: cat CA_file0.pem ...
1
vote
0answers
395 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
1answer
131 views

How to use arrow keys when typing into openssl terminal on OS X?

In developing for IMAP I type raw commands into an IMAP openssl connection very often, and I'm trying to figure out how to make this tool more usable. I connect via openssl s_client -connect imap....
1
vote
1answer
444 views

How can i embed my openssl certificate in firefox?

How can i embed my openssl certificate in firefox? When i visit mywebsite it show ssl warning, but i want to rebuild firefox a custom release so it will not show ssl warning how can i do that ? What ...
1
vote
0answers
105 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
831 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
376 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
2k views

Openssl decrypt from encrypted text from command issue

I am using following command to decrypt an base64 string. openssl enc -in ciphertext -out binarytext -d -a openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem I am facing an ...
1
vote
1answer
1k views

openvpn 2.2.1 error from SSL_CTX_load_verify_locations

I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
1
vote
0answers
91 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...