OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

4
votes
0answers
365 views

get x and y components of ec public key using openssl

I am generating a KeyPair for ECC from curve 'secp128r1' using openssl Steps I followed : first I generated a private key using the command openssl ecparam -genkey -name secp128r1 -noout -out ...
2
votes
0answers
62 views

Can I get a fingerprint of an ec key, using openssl?

Can I get a fingerprint of an ec key, using openssl? Running openssl ec -in keys/secp256k1.pub.pem -fingerprint gives an error telling me that -fingerprint is not an option.
2
votes
0answers
522 views

SSL issue: The private key did not match the public key provided

I followed the instructions outlined here by amazon. A quick summary: Created a private key openssl genrsa -out my-private-key.pem 2048 Created a CSRopenssl req -sha256 -new -key ...
2
votes
0answers
33 views

3DES_CMAC encryption using online tools or OpenSSL

I have a smart card that claims that its mutual authentication is based on 3DES_CMAC algorithm. In the first step, the user sends a random number to the card and the card calculate the encrypted ...
2
votes
0answers
816 views

SSH Public Key Auth doesn't work under clean reinstall of OS X Yosemite

After a clean reinstallation of my MacBook Pro with current Yosemite, the SSH login to all my servers using Public Key auth stopped working. Generating a new Public Key out of my Private Key and ...
2
votes
0answers
430 views

How can OpenSSL Secret Keys be imported into GnuPG?

I want to import the secret key from a OpenSSL x509 (Client) Certificate into GnuPG (NOT gpgsm for S/MIME!) I have seen there are utilities to convert GPG Keys into SSH Format [1] and even create ...
2
votes
0answers
2k views

Establish https on nonstandard port

I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this: server { server_name example.org; listen 55434 ssl; ssl ...
2
votes
0answers
813 views

Problem Verifying S/MIME Messages with Mutt

I'm having problems verifying some S/MIME messages in Mutt. First some background $ mutt -v Mutt 1.5.21 (2010-09-15) Copyright (C) 1996-2009 Michael R. Elkins and others. Mutt comes with ABSOLUTELY ...
1
vote
0answers
12 views

How to speed up SSL connection establishment?

I have an OpenSSL setup on my Linux PC using Apache2. NO, I haven't enabled DNS resolving. I have the certificate on the machine, LOCALLY. Still, Chrome devtools tell me that Initial Connection took ...
1
vote
0answers
38 views

Screwed up /etc/pki somehow (I think)

I can no longer access certain secure sites with any browser on one of my machines: > curl -vvv https://order.subway.com/ > /dev/null * About to connect() to order.subway.com port 443 (#0) * ...
1
vote
0answers
86 views

How to transcode AES encrypted files with AWS Elastic Transcoder

I want to upload my encrypted videos to S3 and use Elastic Transcoder to transcode them. This is what I'm currently doing and isn't working at all. I'm using openssl to encrypt my video files. The ...
1
vote
0answers
41 views

Python 2.7 don't have HTTPSHandler and _ssl modules on Centos4.4

I build Python 2.7 from source code on Centos4.4, but there aren't HTTPSHandler and _ssl modules in Python2.7.10. I have already installed and upgrade openssl and openssl-devel before building ...
1
vote
0answers
29 views

Using OpenSSL and nmichaels.org/rsa.py respectively get the different encrypted results

First, I used OpenSSL to create a public key(modulus, e), then a text file is encrypted with the public key. Second, I inputed modulus and e(from 'First') at http://nmichaels.org/rsa.py, then using ...
1
vote
0answers
35 views

OpenSSL listen and decrypt automatically

I want to design an application to connect my server using OpenSSL and send encrypted data (encrypted with server public key) to specified port on server like 4433. All client using server public key ...
1
vote
0answers
60 views

How to extract the Subject Alternative Name from a CSR by just using the openssl command?

I would need to extract the Subject Alternative Name from a CSR. Is there any way I can extract this other than using the "-text" in openssl req -in test.csr -text -noout? (Maybe similar with the ...
1
vote
0answers
144 views

Client not connecting to port running openssl s_server

Question Context: I want to test a TLS handshake and see all the output (for learning/work related purposes) between my local computer (running OSX Yosemite) and a remote work server (running amazon ...
1
vote
0answers
59 views

openSSL upgrade in apache webserver

we are using apache webserver ver 2.2.3 with open SSL version 0.9.8e-fips-rhel5 (linux environment). We are required to upgrade the openSSL to the latest version for security reasons. I have following ...
1
vote
0answers
414 views

Convert whole .pem Certificate to hexadecimal

I want to convert a whole pem-Certificate in hexadecimal. I tried it with: openssl x509 -modulus -noout < cert.pem| sed s/Modulus=/0x/ I'n not sure about it, if this is the right way to do. Am I? ...
1
vote
0answers
481 views

XCOFF32 object files are not allowed in 64-bit mode while installing Crypt-SSLeay-0.65_02

I am installing a Perl package Crypt-SSLeay-0.65_02 in an AIX 6.1 system but while performing perl Makefile.PL getting the following error. The test suite can attempt to connect to public servers to ...
1
vote
0answers
141 views

How to determine if a website is using openssl?

I have a few web application deploy on server. (no access to internet) How can I check if they are using openSSL Library? Is there a way to test it?
1
vote
0answers
217 views

GnuTLS test 'chat' equivalent of OpenSSL s_client s_server

How can I set up a test encrypted "chat" with GnuTLS, equivalent to the OpenSSL s_client and s_server using GPG credentials? I would like to tell GnuTLS-serv and -cli to use keys generated with GPG ...
1
vote
0answers
2k views

SSL input filter read failed

Am using apache-httpd-2.4.3 in Red Hat Enterprise Linux Server release 5.5 (Tikanga). when am trying to hit browser using URL, getting this messages in webserver's ssl_error_log. [Tue Feb 25 ...
1
vote
0answers
373 views

Compile with openssl-1.0.1e but linked against old glibc

Desirable result: compile a binary with statically linked openssl 1.0.1e but dynamically linked glibc, stdc++, etc. Binary should run on most servers, for example Ubuntu 11.04 or RHEL 6, CentOS 6.4. ...
1
vote
0answers
102 views

how to simulate a file under linux?

I'm basically trying to do this using openssh: I have a private key, however it isn't in file (it's in memory). Now, I want to create the public key in openssh format. For that I would generally run ...
1
vote
0answers
774 views

utserver error while loading shared libraries libssl.so.0.9.8

I have problem in running utorrent server. When i run the command ~$ utserver -settingspath /opt/utorrent-server-v3_0/ It says utserver: error while loading shared libraries: libssl.so.0.9.8: ...
1
vote
0answers
367 views

How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?

I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
0answers
91 views

keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion

I have a directory in a Snow Leopard box that looks something like: MyDir/ file1 SubDir1/ file2 SubDir2/ file3 I created an encrypted archive of it (still in Snow ...
1
vote
0answers
887 views

Passwordless ssh failed when login using username

I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost. I am getting a password prompt when trying to connect using ssh username@hostname format. But there is no problem ...
1
vote
0answers
138 views

tomcat6 with crl doesn't load

I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl: ...
1
vote
0answers
296 views

unable to get local issuer certificate - Ubuntu 11.04

I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command. openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
881 views

Decoding a crypted file by openssl not working since change of OS (linux to windows)

I am working on a little script that crypts a file to be sent to one of our suppliers. The workflow is as follows: We created a key, which we asymetric crypt using the public key they have provided ...
0
votes
0answers
10 views

nginx ssl_write returns SSL_ERROR_WANT_WRITE and retry after many seconds

I'm using nginx-1.7.3 + openssl1.0.1j to do a https web proxy in front of my real server. I found there are always some requests' $request_time is much bigger than $upstream_response_time. I ...
0
votes
0answers
13 views

Extract and Trust certificate via command line in windows

I am trying to setup a printer via command line in windows. So far I everything is working well except I don't know of any way to extract .cer from .cat via command line. I could extract it via ...
0
votes
0answers
35 views

SSL Decode Error 50 : Alert 21

I have been getting an SSL decode error while connecting to the server. This is in a lab environment and I am using openssl s_client utility. It throws an decode error as 50 and alert no as 21. On the ...
0
votes
0answers
34 views

Trying to understtand Homebrew OpenSSL on OS X

When I download OpenSSL through Homebrew this is what I get: openssl-1.0.2g accordingly to home brew cmd line interface placed in /usr/local/Cellar/openssl/1.0.2/lib/ lib files in above directory ...
0
votes
0answers
49 views

Creating a certificate chain via Openssl tool

I've been trying to create a certificate chain, something of the sort CA -> Intermediate CA -> Client certificates. I used the following to generate CA cert :- openssl genrsa -out ca.key 2048 -des3 ...
0
votes
0answers
17 views

Openssl-command to extract one of multiple keys out of .pfx

I have a keystore in .pfx-Format with multiple keys. Is there any openssl-Command to extract one certain key, identified by alias name??
0
votes
0answers
57 views

How to save SSL certificate in terminal without openssl?

I've got the following scenario: A service runs on server-1, calling server-2 via SSL over proxy-1 Server-2 is external and out of our scope Server-2 can only be reached from server-1 over proxy ...
0
votes
0answers
10 views

LDAPS with openssl

I have generated ssl certificated on my Linux machine with openssl, how can I enable Secure LDAP on Windows AD with that certificates? I do not want to use Microsoft's tools to generate new ...
0
votes
0answers
23 views

Degrade in performance with SSL_OP_SINGLE_ECDH_USE?

Using SSL_OP_SINGLE_ECDH_USE when setting up our SSL_CTX . This seems to be causing a degrade in performance. I'm not able to find proper documentation for it except that it generates new ECDH ...
0
votes
0answers
16 views

gitlab pem keychain validates but won't get used

I've got a certificate (cert.crt), intermediate certificate (int.crt) and a root certificate (root.crt). Root is trusted. I've made a file (both.pem) like so: cat cert.crt int.crt > both.pem. With ...
0
votes
0answers
16 views

Is there anyway to parse an OBJECT type from a certificate with opeanssl asn1parse?

let's see this sample code: $ openssl asn1parse -in mysterious_file.pem ... 78:d=5 hl=2 l= 3 prim: OBJECT :organizationalUnitName 83:d=5 hl=2 l= 8 prim: PRINTABLESTRING ...
0
votes
0answers
63 views

SSL Connection using Windows Certificate Store

I am creating an SSL connection using OpenSSL API. As we know in a SSL handshake, series of Certificate Authentication occurs for Server or Client. Now for client certificate authentication, the ...
0
votes
0answers
66 views

How to Create X.509 certificate compatible to AWS IoT?

I am trying to create a self signed X.509 certificate to use in AWS IoT. If I am correct, it is not different from a normal OpenSSL certificate, but the PEM file which AWS creates for me is something ...
0
votes
0answers
31 views

Importing/Deleting certificate in pkcs12 keystore using openssl

I have a pkcs12 keystore (keystore.p12). I am about to update an expired public key in it. So I have to delete the expired key first and import new certificate. But I could not find a proper way to ...
0
votes
0answers
14 views

free https with openSSL and noip domain

I am trying to use https on my website using startSSL, I already registered myself and received emails saying that the certificate was accepted and issued, and now what I have to do? I am reading a ...
0
votes
0answers
32 views

Ubuntu 14.04 LTS: what to do so that Python and NGINX use a secure ssl (ie 1.0.1p) library?

I'm going nuts over this issue. I'm totally unable to get a working system where Python 2.7 (Python 2.7.6 (default, Jun 22 2015, 17:58:13) and NGINX (nginx/1.4.6 (Ubuntu)) use a openssl which has been ...
0
votes
0answers
116 views

sign keytool generated cert/key pairs using easy-rsa openvpn intermediate CA

I am creating root and intermediate CA with easy-rsa using ./build-ca & ./build-inter commands consecutively. Now, I want my root ca as offline and I want my certs/keys signed by intermediate CA. ...
0
votes
0answers
207 views

AES encryption with plain text key using bash openssl

I am trying to encrypt a string using AES CBC. The output of the online tool (http://aes.online-domain-tools.com/) and the bash openssl command do not match. Can anyone help me with what I am doing ...
0
votes
0answers
20 views

Making Cassandra work with certs/keys generated by OpenSSL instead of keytool

I saw this in the Cassandra documentation: http://docs.datastax.com/en/cassandra/2.1/cassandra/security/secureSSLCertificates_t.html I found this line "SSL certificates must be generated using ...