OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

4
votes
0answers
279 views

get x and y components of ec public key using openssl

I am generating a KeyPair for ECC from curve 'secp128r1' using openssl Steps I followed : first I generated a private key using the command openssl ecparam -genkey -name secp128r1 -noout -out ...
2
votes
0answers
44 views

Can I get a fingerprint of an ec key, using openssl?

Can I get a fingerprint of an ec key, using openssl? Running openssl ec -in keys/secp256k1.pub.pem -fingerprint gives an error telling me that -fingerprint is not an option.
2
votes
0answers
375 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
2
votes
0answers
30 views

3DES_CMAC encryption using online tools or OpenSSL

I have a smart card that claims that its mutual authentication is based on 3DES_CMAC algorithm. In the first step, the user sends a random number to the card and the card calculate the encrypted ...
2
votes
0answers
781 views

SSH Public Key Auth doesn't work under clean reinstall of OS X Yosemite

After a clean reinstallation of my MacBook Pro with current Yosemite, the SSH login to all my servers using Public Key auth stopped working. Generating a new Public Key out of my Private Key and ...
2
votes
0answers
378 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
2
votes
0answers
2k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
787 views

Problem Verifying S/MIME Messages with Mutt

I'm having problems verifying some S/MIME messages in Mutt. First some background $ mutt -v Mutt 1.5.21 (2010-09-15) Copyright (C) 1996-2009 Michael R. Elkins and others. Mutt comes with ABSOLUTELY ...
1
vote
0answers
37 views

Can I extract R and S from an ECDSA signature in bit form, and vica versa?

I have searched the forum and found related information, but not answer to this question. I am working in an extremely bandwidth-restricted environment, in need of creating as small ECDSA signatures ...
1
vote
0answers
28 views

Screwed up /etc/pki somehow (I think)

I can no longer access certain secure sites with any browser on one of my machines: > curl -vvv https://order.subway.com/ > /dev/null * About to connect() to order.subway.com port 443 (#0) * ...
1
vote
0answers
35 views

How to transcode AES encrypted files with AWS Elastic Transcoder

I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
1
vote
0answers
36 views

Python 2.7 don't have HTTPSHandler and _ssl modules on Centos4.4

I build Python 2.7 from source code on Centos4.4, but there aren't HTTPSHandler and _ssl modules in Python2.7.10. I have already installed and upgrade openssl and openssl-devel before building ...
1
vote
0answers
23 views

Using OpenSSL and nmichaels.org/rsa.py respectively get the different encrypted results

First, I used OpenSSL to create a public key(modulus, e), then a text file is encrypted with the public key. Second, I inputed modulus and e(from 'First') at http://nmichaels.org/rsa.py, then using ...
1
vote
0answers
32 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
52 views

How to extract the Subject Alternative Name from a CSR by just using the openssl command?

I would need to extract the Subject Alternative Name from a CSR. Is there any way I can extract this other than using the "-text" in openssl req -in test.csr -text -noout? (Maybe similar with the ...
1
vote
0answers
128 views

Client not connecting to port running openssl s_server

Question Context: I want to test a TLS handshake and see all the output (for learning/work related purposes) between my local computer (running OSX Yosemite) and a remote work server (running amazon ...
1
vote
0answers
54 views

openSSL upgrade in apache webserver

we are using apache webserver ver 2.2.3 with open SSL version 0.9.8e-fips-rhel5 (linux environment). We are required to upgrade the openSSL to the latest version for security reasons. I have following ...
1
vote
0answers
343 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
431 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
0answers
103 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
0answers
198 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
1
vote
0answers
355 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
0answers
98 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
737 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
315 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
0answers
90 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
871 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
136 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
294 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
850 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
0
votes
0answers
23 views

How to save SSL certificate in terminal without openssl?

I've got the following scenario: A service runs on server-1, calling server-2 via SSL over proxy-1 Server-2 is external and out of our scope Server-2 can only be reached from server-1 over proxy ...
0
votes
0answers
4 views

LDAPS with openssl

I have generated ssl certificated on my Linux machine with openssl, how can I enable Secure LDAP on Windows AD with that certificates? I do not want to use Microsoft's tools to generate new ...
0
votes
0answers
10 views

Degrade in performance with SSL_OP_SINGLE_ECDH_USE?

Using SSL_OP_SINGLE_ECDH_USE when setting up our SSL_CTX . This seems to be causing a degrade in performance. I'm not able to find proper documentation for it except that it generates new ECDH ...
0
votes
0answers
9 views

gitlab pem keychain validates but won't get used

I've got a certificate (cert.crt), intermediate certificate (int.crt) and a root certificate (root.crt). Root is trusted. I've made a file (both.pem) like so: cat cert.crt int.crt > both.pem. With ...
0
votes
0answers
9 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
0answers
20 views

SSL Connection using Windows Certificate Store

I am creating an SSL connection using OpenSSL API. As we know in a SSL handshake, series of Certificate Authentication occurs for Server or Client. Now for client certificate authentication, the ...
0
votes
0answers
33 views

How to Create X.509 certificate compatible to AWS IoT?

I am trying to create a self signed X.509 certificate to use in AWS IoT. If I am correct, it is not different from a normal OpenSSL certificate, but the PEM file which AWS creates for me is something ...
0
votes
0answers
20 views

Importing/Deleting certificate in pkcs12 keystore using openssl

I have a pkcs12 keystore (keystore.p12). I am about to update an expired public key in it. So I have to delete the expired key first and import new certificate. But I could not find a proper way to ...
0
votes
0answers
13 views

free https with openSSL and noip domain

I am trying to use https on my website using startSSL, I already registered myself and received emails saying that the certificate was accepted and issued, and now what I have to do? I am reading a ...
0
votes
0answers
23 views

Ubuntu 14.04 LTS: what to do so that Python and NGINX use a secure ssl (ie 1.0.1p) library?

I'm going nuts over this issue. I'm totally unable to get a working system where Python 2.7 (Python 2.7.6 (default, Jun 22 2015, 17:58:13) and NGINX (nginx/1.4.6 (Ubuntu)) use a openssl which has been ...
0
votes
0answers
72 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
170 views

AES encryption with plain text key using bash openssl

I am trying to encrypt a string using AES CBC. The output of the online tool (http://aes.online-domain-tools.com/) and the bash openssl command do not match. Can anyone help me with what I am doing ...
0
votes
0answers
20 views

Making Cassandra work with certs/keys generated by OpenSSL instead of keytool

I saw this in the Cassandra documentation: http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using ...
0
votes
0answers
56 views

how to do ssl client to node security in cassandra using my self-signed CA

I have my self-signed CA, that is giving me .crt, .csr , .p12 and .key files. How I will use this to secure my cassandra. I tried a lot whatever I found on net but still I am not able to solve this. ...
0
votes
0answers
63 views

Recompile mod_ssl for TLSv1.2

I have looked all day to get TLSv1.2 to work on my Debian Squeeze server without success. I have openssl 1.0.1 installed now: admin:/etc# openssl version OpenSSL 1.0.1 14 Mar 2012 However, from ...
0
votes
0answers
137 views

Windows - OpenSSL Convert .p12 to .pem

Having issues converting an Apple Push .p12 to a .pem that is usable inside node-apn. I've installed OpenSSL Win32 from the following URL: http://slproweb.com/products/Win32OpenSSL.html And ...
0
votes
0answers
72 views

How can I allow use of the Certificate Store on Windows 7?

How can I allow use of the Certificate Store on Windows 7, IIS v. 7.5, debugging in VS2013? The top answer to this question first falls apart for me when I can't specify "allow private key to be ...
0
votes
0answers
24 views

Apache and ECC Curve Order

I have Ubuntu 15.04 with Apache 2.4.10 (OpenSSL 1.0.1f) and I would like to configure Apache SSL.conf specifically for "ECC Curve Order" as on Windows 10, where I select the preferred order of ...
0
votes
0answers
226 views

Install self-signed SSL certificate correctly (for use in Node.js)

I've been trying to create a self-signed certificate, use it in a simple Node.js server, and install it into the system to the system trusted. However, something is not working, the 'SSL certificate ...