OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
1answer
110 views

Decrypting the CipherValue in a PSKC file

This is the opposite of what I was doing in this question - Encryption and HMAC in a PSKC file The spec is there at https://tools.ietf.org/rfc/rfc6030.txt The Data/seed is encrypted with AES-128-CBC ...
0
votes
2answers
49 views

What file to add to nginx certificate

I got a RaspberryPi on which I want to host Owncloud. So I followed this tutorial and it works well except the SSL part. I don't want to use self signed. I set my own subdomain and it works without ...
0
votes
1answer
454 views

Is it possible to merge my certificate (.crt) with my private key to export as a Base-64 encoded X.509 (.CER)

I am very clueless when it comes to certificates/security and the like so please excuse my ignorance. I purchased a certificate and it was sent to me. I generated the CSR using the java keytool. I ...
0
votes
1answer
1k views

OpenSSL 3DES encrytion parameters

Suppose that I want to encrypt a Text with TripleDES algorithm in CBC cipher, I have two choice. 1- An online tool, Like this 2- OpenSSL tool. In the Online tool, I enter the Text, the KEY, and ...
0
votes
2answers
687 views

Installing openssl on CentOS 5.3

I am trying building apache with mod_ssl and I am running into issues becuase my OpenSSL version is less than 0.9.8a. I tried updating but yum says I have the latest version ( 0.9.8e-27.el5_10.1, ...
0
votes
1answer
88 views

./configure says OpenSSL is missing, but it isn't

I'm trying to build this application which uses, among other things, OpenSSL. It has a bootstrap script, followed by ./configure , followed by make. In the ./configure stage, I get: yada yada yada ...
0
votes
1answer
1k views

What is the role of cakey.pem and cacert.pem in addition to .key and .crt based encryption

I have .key file which holds the private key data, .crt file which would be certificate with public key and, to my knowledge, that's it for public key encryption, right? Not exactly. In order to ...
0
votes
1answer
663 views

After the Heartbleed bug, do we need to update our OpenSSL DLL's?

Our software we develop uses the Indy internet component suite in Delphi. Indy has capabilities for OpenSSL. Since the Heartbleed incident, we're wondering if we need to take action. We distribute 2 ...
0
votes
2answers
102 views

heartbleed are CA private keys compromised?

have any CA private keys such as those used by godaddy to issue private/public key pairs compromised as a result of heartbleed?
0
votes
2answers
3k views

How do I use cat to encrypt stdin on the fly with openssl?

The following command works for encrypting stdin using echo: echo "abc" | openssl enc -base64 This command also works for substituting characters in stdin using cat: cat | sed 's/a/b/g' However, ...
0
votes
1answer
3k views

How can I send e-mails via Gmail SMTP via OpenSSL (on Windows)?

I know that the SMTP server requires TLS so I'm using OpenSSL (on Windows). openssl s_client -connect smtp.gmail.com:465 -crlf Now, I know that I have to encode a string (basically ...
0
votes
1answer
394 views

Cannot build lynx on windows with cygwin

There are many Windows builds of Lynx available over the 'net, but none of them support HTTPS, so I was trying to build with SSL enabled, among other things. The ./configure part is successful, but ...
0
votes
1answer
336 views

PowerShell in conEmu has different PATH from cmd

Why does PowerShell on conEmu have a different PATH from cmd? I see this when I do openssl version in PowerShell I see that 2007 version and in cmd I see the 2013 version.... This is my startup ...
0
votes
1answer
62 views

openssl: register a CA as an unprivileged user

I'm in a situation where I have a Certificate Authority (CA) that I need to register with openssl, but no root access. Even if I had root access, I don't think it would be right to register this at a ...
0
votes
2answers
1k views

Formatting OpenSSL encrypted message, and signature in the same plaintext file

I'm working on designing an API which requires encrypted messages to be signed and sent over TLS. The TLS is HTTP/SSL. The messages themselves are a few hundred Kb (at most) of JSON data, encrypted ...
0
votes
1answer
361 views

Certificate generation with Keytool, I can't confirm personal data

I'm trying to generate a self-signed certificate in order to sign some source code. I use: keytool -genkey -storepass mypass -alias lorenzos -keystore nbproject/private/keystore Then I fill in ...
0
votes
2answers
1k views

problem running utorrent server on cent os 5.5

i am trying to run utorrent server on remote machine via ssh µTorrent server version :alpha (3.0 build 25053) it throws error at startup ./utorrent-server-v3_0/utserver: error while loading shared ...
0
votes
1answer
2k views

nginx + OpenSSL Install

CHANGES LICENSE README conf contrib man openssl-1.0.0d pcre-8.12 src/ CHANGES.ru Makefile auto configure html/ objs/ openssl-1.0.0d.tar.gz pcre-8.12.tar.gz ./configure ./configure ...
0
votes
0answers
13 views

Install Tomcat SSL cert in CUCM signed by CA created through openssl

My problem looks like this. I want to install a Tomcat certificate in CUCM signed by CA created by me which exists in my ubuntu operating system.This is what I thought the steps should be: Generate ...
0
votes
0answers
10 views

Enforcing RC4 cipher and testing enabled ciphers with OpenSSL

I am trying to enable and enforce the RC4 cipher on Apache 2.4. I checked the Apache SSL HOWTO. It says the RC4 cipher can be enabled in the two ways below: SSLCipherSuite ...
0
votes
0answers
41 views

Thunderbird: Error: imap.server.com : server does not support RFC 5746, see CVE-2009-3555

I'm getting this error when checking my mail, and I can't download my mail. I recently updated Thundirbird yesterday, but it restarted and was working fine for many hours. I saw this question: How to ...
0
votes
2answers
27 views

Windows can't find the issuer of a client certificate

Hello and sorry about my bad english. I have a problem about a PKI which I did on Ubuntu using OpenSSL: when I installed the root certificate on Windows (it's a simple hierarchy: ROOT -> Intermediate ...
0
votes
0answers
21 views

X509 extensions in openssl

With "openssl" I want to sign a "csr" including several X509.v3 extensions. I do not known how to configure the following three ones: a) "X509v3 Private Key Usage Period", "not before/after than". ...
0
votes
0answers
23 views

Automated script to create/access an encrypted file with multiple recipients

My goal is to create an automated way of encrypting/decrypting some files using openssl. What I currently have are the public keys of the recipients (in PEM format) and the actual data I need to ...
0
votes
0answers
32 views

Mumble-Ruby openssl error when running scripts

First things first here are the instructions I am working off and system details: http://wiki.natenom.com/w/Mumble-Ruby_installation and this is for SuperBot a mumble ruby plugin. This is running ...
0
votes
1answer
199 views

What is NSS error -5961 (PR_CONNECT_RESET_ERROR)

Can someone enlighten me the meaning of "NSS error -5961 (PR_CONNECT_RESET_ERROR)"? I am trying to connect to bitbucket.org with "https" protocol but got a refuse from the server. Then, I try to use ...
0
votes
0answers
16 views

OpenSSL failing to read combined key and certificate from /dev/stdin

I have a private key and a certificate, both in PEM format. I want to create a p12 file out of them This works: openssl pkcs12 -export -in operator.crt -inkey operator.key -out test.p12 -password ...
0
votes
0answers
15 views

Stunnel can't open web page

I am using stunnel with following configuration on my mac. It is Yosemite. output = stunnel.log options = NO_SSLv2 accept = 443 connect = 80 [gmail-pop3] client = yes accept = 127.0.0.1:110 ...
0
votes
0answers
63 views

How to RC4 decryption in command line when encrypting using C program

I used the code Decrypt RC4 in Linux (by mr.spuratic) to encrypt a file. How is it possible to decrypt it using openssl command? for example- openssl enc -d -rc4 -in rc4.txt -out plain.txt -K ...
0
votes
1answer
69 views

Homebrew OpenSSL: rehash failed to verify, something is wrong

Reposted from StackOverflow Just noticed 'You have mail' in shell prompt. Here is what is says: $ mail Mail version 8.1 6/6/93. Type ? for help. "/var/mail/pain": 1 message 1 new >N 1 ...
0
votes
0answers
163 views

OpenSSL Error: Error loading extension section server

The system is Fedora fc21. The objective is to run the examples shown here: “APACHE web server and SSL authentication” The openssl.cnf file has been created and the following command run: openssl ...
0
votes
1answer
43 views

SSL not available when attempting to compile“wget” from source?

I was trying to install wget from source in Linux by: ./configure --with-ssl=openssl But it returns me: configure: error: --with-ssl=openssl was given, but SSL is not available. If I do: ...
0
votes
0answers
14 views

openssl print numeric value of the key?

Given a file contains the public key, I need to get the numeric value of the modulus and the e. But I can only get something like this: $ openssl rsa -in key -pubin -text Modulus (2050 bit): ...
0
votes
0answers
66 views

Public armored key for OpenPGP from .pfx file?

With OpenSSL I can generate a public key file from a .pfx file as follows: openssl pkcs12 -in cert.pfx -clcerts -nokeys -out pubcert.pem openssl x509 -pubkey -in pubcert.pem -noout > pubkey.pem ...
0
votes
0answers
49 views

OpenSSL s_client and putting binary data

I'm creating application with half-binary and half-textual protocol. Because I'm not writing client application yet, I decided to use openssl s_client to test protocol. I don't know how to pass binary ...
0
votes
0answers
29 views

openSSL: How to specify the signature hash algorithms I will accept?

Using openSSL, on a TLS client, I specified a unique cipher suite with SSL_CTX_set_cipher_list(). When I use wireshark to look at the messages, I see in the Client Hello message, the cipher suites ...
0
votes
0answers
63 views

Patch Heartbleed Vulnerability on Oracle Enterprise Linux 6.5

After running an application scan on a webapp hosted on Oracle Enterprise Linux 6.5, the scan reported that the app was vulnerable to Heartbleed. I am having a tough time updating OpenSSL on OEL 6.5. ...
0
votes
0answers
162 views

Can't convert .p12 to .pem with openSSL

After running this: openssl pkcs12 -in path.p12 -out newfile.crt.pem -clcerts -nokeys I get prompted with the option descriptions. After running this openssl pkcs12 -in path.p12 -out ...
0
votes
0answers
44 views

OpenSSL CA use CSR's supplied extensions

I've set up a CA with OpenSSL on my old BSD-computer. No problem at all. But if I sign a CSR, how can I adopt the x509v3 extensions submitted with the CSR? The only way I know is either to include the ...
0
votes
1answer
81 views

RPM created using checkinstall giving dependency error

Compiled openssl-1.0.1.i using commands: export CFLAGS="-fPIC" ./config shared --openssldir=/usr/share/ssl make depend make all make install here it is not asking for any dependencies I am able to ...
0
votes
2answers
1k views

Unable to verify the certificate from StartSSL?

I'm new to OpenSSL and I'm unable to verify the certificate from StartSSL. The command that I tried in order to verify the certificate is: openssl verify -CAfile ca.pem mydomain.com.crt The error ...
0
votes
1answer
139 views

Weird characters at the end of openssl dhparam output file

When I generated a diffie-hellman prime number using openssl, the output file had some weird characters at the end and I wanted to understand what it means. Background info: My goal was to generate ...
0
votes
0answers
332 views

testing cipher suite using openssl for tomcat server is resulting in wrong manner

I am using tomcat 6.0.28. and I have configured connector with "TLS_ECDHE_RSA_WITH_RC4_128_SHA" but when i am testing whether cipher is suited as follows I am getting following error: > ...
0
votes
0answers
74 views

nginx is still linked to old openssl

We're running CentOS 6.5. We recently updated via yum: OpenSSL to OpenSSL 1.0.1e-30.el6_6.4 nginx to nginx-1.6.2-1.el5.ngx However, I noticed that even though nginx was configured to use TLS v1, ...
0
votes
0answers
77 views

Error when start of the apache2 service: version OPENSSL_1.0.1 not defined

I'm using a Debian Wheezy server where I have installed apache2, php5 and libapache2-mod-php5 packages via apt-get. But when I'm trying to start the apache2 the follow error occurs: service apache2 ...
0
votes
0answers
40 views

RSA Private Key: set Common Name

I create an RSA private key openssl genrsa -out mykey.key 2048 Using a certificate and the generated key, I create a .p12 file openssl pkcs12 -export -inkey mykey.key -in certificate.pem -out ...
0
votes
0answers
82 views

how to pass password file to openssl srp

I'm trying to pass password to the openssl srp through a file using -passin param as below but im getting errors. openssl srp -verbose -passin file:password.srpv.attr -srpvfile password.srpv -add -gn ...
0
votes
0answers
119 views

ldap_bind: Confidentiality required (13)

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it ...
0
votes
1answer
85 views

Command fails in a script? [closed]

I'm trying to script the OpenSSL ec command. The script is used to validate a collection of keys produced by another library. The script is shown below after the question. The following works from a ...
0
votes
0answers
865 views

OpenSSL, Converting CRT to PEM

I've been trying to use openssl to convert a .crt certificate to a .pem openssl.exe x509 -in server.crt -out openssl.pem -inform der -outform pem After using that command, I get unable to load ...