OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

4
votes
0answers
485 views

get x and y components of ec public key using openssl

I am generating a KeyPair for ECC from curve 'secp128r1' using openssl Steps I followed : first I generated a private key using the command openssl ecparam -genkey -name secp128r1 -noout -out ...
2
votes
0answers
74 views

Can I get a fingerprint of an ec key, using openssl?

Can I get a fingerprint of an ec key, using openssl? Running openssl ec -in keys/secp256k1.pub.pem -fingerprint gives an error telling me that -fingerprint is not an option.
2
votes
0answers
691 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key my-private-key....
2
votes
0answers
36 views

3DES_CMAC encryption using online tools or OpenSSL

I have a smart card that claims that its mutual authentication is based on 3DES_CMAC algorithm. In the first step, the user sends a random number to the card and the card calculate the encrypted ...
2
votes
0answers
839 views

SSH Public Key Auth doesn't work under clean reinstall of OS X Yosemite

After a clean reinstallation of my MacBook Pro with current Yosemite, the SSH login to all my servers using Public Key auth stopped working. Generating a new Public Key out of my Private Key and ...
2
votes
0answers
492 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
2
votes
0answers
2k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
848 views

Problem Verifying S/MIME Messages with Mutt

I'm having problems verifying some S/MIME messages in Mutt. First some background $ mutt -v Mutt 1.5.21 (2010-09-15) Copyright (C) 1996-2009 Michael R. Elkins and others. Mutt comes with ABSOLUTELY ...
1
vote
0answers
19 views

Get a server's SSL/TLS certificate using “openssl s_client”

I am trying to get the SSL/TLS certificate for one of our load balancers (Netscaler) using: openssl s_client -showcerts -connect lb.example.com:443 But it won't show me the certificate: CONNECTED(...
1
vote
0answers
10 views

How to check for OpenSSL Oracle Vulnerability for internal application?

I am trying to test our internal applications(DEV and QA enironments) which are behind the firewall for OpenSSL Oracle Vulnerability. I am able to run Qualys(ssllabs.com) to check for Oracle ...
1
vote
0answers
36 views

OpenSSL with added CA certificate on CentOS

So the problem is: I'm trying to add CA certificate on CentOS (on server) and check the working of SSL of one of my clients domain. The same thing works perfectly on Ubuntu: How do you add a ...
1
vote
0answers
25 views

Extract and Trust certificate via command line in windows

I am trying to setup a printer via command line in windows. So far I everything is working well except I don't know of any way to extract .cer from .cat via command line. I could extract it via ...
1
vote
0answers
98 views

SSL Decode Error 50 : Alert 21

I have been getting an SSL decode error while connecting to the server. This is in a lab environment and I am using openssl s_client utility. It throws an decode error as 50 and alert no as 21. On the ...
1
vote
0answers
62 views

Screwed up /etc/pki somehow (I think)

I can no longer access certain secure sites with any browser on one of my machines: > curl -vvv https://order.subway.com/ > /dev/null * About to connect() to order.subway.com port 443 (#0) * ...
1
vote
0answers
130 views

How to transcode AES encrypted files with AWS Elastic Transcoder

I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
1
vote
0answers
45 views

Python 2.7 don't have HTTPSHandler and _ssl modules on Centos4.4

I build Python 2.7 from source code on Centos4.4, but there aren't HTTPSHandler and _ssl modules in Python2.7.10. I have already installed and upgrade openssl and openssl-devel before building Python2....
1
vote
0answers
32 views

Using OpenSSL and nmichaels.org/rsa.py respectively get the different encrypted results

First, I used OpenSSL to create a public key(modulus, e), then a text file is encrypted with the public key. Second, I inputed modulus and e(from 'First') at http://nmichaels.org/rsa.py, then using ...
1
vote
0answers
39 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
77 views

How to extract the Subject Alternative Name from a CSR by just using the openssl command?

I would need to extract the Subject Alternative Name from a CSR. Is there any way I can extract this other than using the "-text" in openssl req -in test.csr -text -noout? (Maybe similar with the -...
1
vote
0answers
189 views

Client not connecting to port running openssl s_server

Question Context: I want to test a TLS handshake and see all the output (for learning/work related purposes) between my local computer (running OSX Yosemite) and a remote work server (running amazon ...
1
vote
0answers
62 views

openSSL upgrade in apache webserver

we are using apache webserver ver 2.2.3 with open SSL version 0.9.8e-fips-rhel5 (linux environment). We are required to upgrade the openSSL to the latest version for security reasons. I have following ...
1
vote
0answers
500 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I?
1
vote
0answers
511 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
0answers
155 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
0answers
221 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 16:26:...
1
vote
0answers
395 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
0answers
105 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
831 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
376 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
0answers
91 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
900 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
145 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
301 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
921 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
0
votes
0answers
10 views

Apache 2.4 with OpenSSL service failing with “specific error Incorrect function”

I downloaded Apache 2.4 from Apache Lounge and installed it on Windows 7, as a development server, and it worked fine. Now I'm try to use SSL with a self-signed certificate but restarting the service ...
0
votes
0answers
24 views

Vanity RSA Public Key?

I am looking to have a vanity public key, similar to the bitcoin-based vanitygen. An example of vanitygen: Difficulty: 77178 Pattern: 1BTC ...
0
votes
0answers
8 views

OpenSSL: pkcs7 to pem - email field not set

The question is probably stupid, so please accept my apologies for it: After converting p7b file that received from my CA to pem, the emailAdress field is just appended and doesn't look like a "real" ...
0
votes
0answers
35 views

Openssl cross compiling for ARM and host: windows machine + gcc

I am trying to build openssl library for one of my project. but all the online data I am getting is regarding linux environment. so my environment is... host: windows 7/ x86 target: ARM M4/kinetis k61 ...
0
votes
0answers
85 views

OpenLDAP TLS negotiation failure ldap_start_tls: Connect error (-11) additional info: A TLS packet with unexpected length was received

I have tried to configure Openldap with TLS. I have an TLS certificates and configured with .ldif file and changed necessary configuration in ldap.conf file. I am using ubuntu 14.04 LTS operating ...
0
votes
0answers
20 views

Converting unix cli command to windows

I am using gethttpsforfree.com to get my cert. I am stuck on step 3. They want me to run a command but it's a unix command and I am on windows. The command is PRIV_KEY=./account.key; echo -n "...
0
votes
0answers
19 views

Google OpenSSL's Security Vulnerabilities

I have received a Google warning related to OpenSSL version update which suggested Linux based command $ unzip -p YourApp.apk | strings | grep "OpenSSL" to check OpenSSL version. I have tried Cygwin ...
0
votes
0answers
34 views

OpenSSL OCSP responder generates OCSP response of unknown status

I created two certificates "rootCA.pem" and "dummy.pem". "Dummy.pem" is signed by "rootCA.pem". Now I want to generate OCSP response. I created index.txt and index.txt.attr files because OpenSSL ...
0
votes
0answers
15 views

nginx ssl_write returns SSL_ERROR_WANT_WRITE and retry after many seconds

I'm using nginx-1.7.3 + openssl1.0.1j to do a https web proxy in front of my real server. I found there are always some requests' $request_time is much bigger than $upstream_response_time. I ...
0
votes
0answers
65 views

Trying to understtand Homebrew OpenSSL on OS X

When I download OpenSSL through Homebrew this is what I get: openssl-1.0.2g accordingly to home brew cmd line interface placed in /usr/local/Cellar/openssl/1.0.2/lib/ lib files in above directory ...
0
votes
0answers
77 views

Creating a certificate chain via Openssl tool

I've been trying to create a certificate chain, something of the sort CA -> Intermediate CA -> Client certificates. I used the following to generate CA cert :- openssl genrsa -out ca.key 2048 -des3 ...
0
votes
0answers
22 views

Openssl-command to extract one of multiple keys out of .pfx

I have a keystore in .pfx-Format with multiple keys. Is there any openssl-Command to extract one certain key, identified by alias name??
0
votes
0answers
94 views

How to save SSL certificate in terminal without openssl?

I've got the following scenario: A service runs on server-1, calling server-2 via SSL over proxy-1 Server-2 is external and out of our scope Server-2 can only be reached from server-1 over proxy ...
0
votes
0answers
22 views

LDAPS with openssl

I have generated ssl certificated on my Linux machine with openssl, how can I enable Secure LDAP on Windows AD with that certificates? I do not want to use Microsoft's tools to generate new ...
0
votes
0answers
35 views

Degrade in performance with SSL_OP_SINGLE_ECDH_USE?

Using SSL_OP_SINGLE_ECDH_USE when setting up our SSL_CTX . This seems to be causing a degrade in performance. I'm not able to find proper documentation for it except that it generates new ECDH ...