OpenSSL: The Open Source Toolkit for SSL and TLS
12
votes
2answers
5k views
OpenSSL without prompt
I am using following code to generate keys:
apt-get -qq -y install openssl;
mkdir -p /etc/apache2/ssl;
openssl genrsa -des3 -out server.key 1024;
openssl req -new -key server.key -out ...
8
votes
2answers
2k views
openssl certificate generation commands
I am making a self signed certificate using OpenSSL. I want to make the certificate in one go, means that it will not ask me for the input for Company Name, Common Name etc etc. Is there anyway to do ...
5
votes
1answer
360 views
How to use ssh-rsa public key to encrypt a text?
So, the scenario is: Given I'm Bob, I want to encrypt some message for Alice. The only public key I have is her ssh-rsa id_rsa.pub like this:
ssh-rsa ...
3
votes
2answers
6k views
OpenSSL missing during ./configure. How to fix?
I was trying to install node.js and found OpenSSL support missing during ./configure.
How can I fix it?
Is it a mandatory step?
# ./configure
Checking for gcc : ok
...
3
votes
3answers
818 views
OpenSSL hash function for generating AES key
What hash function does OpenSSL use to generate a key for AES-256? I can't find it anywhere in their documentation.
$ touch file
$ openssl aes-256-cbc -nosalt -P -in file
enter aes-256-cbc ...
3
votes
1answer
1k views
OpenSSL CA and non CA certificate
I am able to generate a self-signed CA certificate and generate intermediate CA cert.
Now I tried to generate a end-user certificate that should not be able to sign other certificates. So I opened ...
3
votes
1answer
4k views
Confusion with Pem Pass Phrase and Challenge Password
When creating a CSR with openSSL it asks me:
Enter PEM pass phrase:
After that it asks:
Please enter the following 'extra' attributes
to be sent with your certificate request
A challenge password ...
3
votes
1answer
268 views
How to create private security certificates that behave like official ones?
I'm trying to get a valid secured environment for HTTP communication to behave like normal ones. I'm doing this for a restricted group of users.
There is a hardware server running a web service ...
2
votes
1answer
2k views
Checking ssh keys have passphrases
I have a bunch of users, who with SSH keys have access to accounts on other servers. Currently I have a script which collects up the ssh public keys and distributes them to the correct account on the ...
2
votes
2answers
8k views
SVN over HTTPS and SSL handshake fails
I am trying to checkout from my team's svn server. It requires client side authentication. I'm running Ubuntu 10.04.
Here's what I get:
$ svn checkout https://myproject.myserver.org/svn/project/
...
2
votes
1answer
364 views
OpenSSL CSR generation with subject key from stdin
Is it possible to pass in the subject's key from stdin when creating CSRs with OpenSSL?
Like in the following (non-working)
openssl req -new -key stdin -subj ...
2
votes
2answers
2k views
Decode file encoded on one system using openssl on another system
I am encrypting a file on Ubuntu machine with openSSL using following command:
openssl enc -aes-256-cbc -in mydbBackup.tar -out mydbBackup.enc.tar
-pass pass:scecret
I transfer it to ftp ...
2
votes
1answer
713 views
Using openssl command line tool to encrypt/decrypt data, DES ECB
How can I create a random 64 bit key for DEC ECB encryption/decryption, and then use the same key for encryption/decryption many times? All this must be done using openssl command line tool.
In all ...
2
votes
1answer
29 views
updating openssl on Debian
I compiled OpenSSL-1.0.1e on Debian Lenny (armv4 architecture) from the [source code][1]. I followed the instruction on http://www.linuxfromscratch.org/blfs/view/svn/postlfs/openssl.html to compile ...
2
votes
1answer
48 views
Permissions for SSL key?
I'm trying to set up a secure connection (https) in nginx.
But I'm a bit worried about the private key's permissions, which aren't mentioned in any tutorial.
Should I change them? To what?
2
votes
1answer
490 views
How to Import CA cert to pkcs12
I am wondering if it is possible to import CA certificate in .p12 file.
I google it and found that maybe it is possible, but how?
Thanks
2
votes
1answer
1k views
How to install self signed certificate on Apache in Linux?
Where certificate files being created while using openssl? How to install custom generated certificate on Apache https?
root@ubuntu:/# openssl req \
> -x509 -nodes -days 365 \
> -newkey ...
2
votes
1answer
6k views
Does openssl errno 104 mean that SSLv2 is disabled?
I want to check if my server has SSLv2 disabled. I am doing this by attempting to connect remotely with openssl with the following shell command.
openssl s_client -connect HOSTNAME:443 -ssl2
Most ...
2
votes
1answer
313 views
Elliptic curve crypto: Using same ECC parameters results in different keys in each pass. Why?
I've been using OpenSSL as the library of choice. I created ONE set of ECC parameters via
openssl ecparam -out ecparams.pem -name secp521r1 -genkey
I then created two certificate requests, with ...
2
votes
2answers
182 views
Problems building a PKI with openssl
I've set up a small PKI using the openssl ca, by following a guide which explains the procedure and some of the concepts in good detail. I want to accomplish pretty much that three-tiered setup that ...
2
votes
0answers
111 views
DSA private key format
So I used puttygen to generate a DSA private key and then exported that to the OpenSSH format and here's what I got when I ran OpenSSL's asn1parse on it:
0:d=0 hl=4 l= 443 cons: SEQUENCE
...
2
votes
0answers
244 views
OpenSSL force client to use specific protocol
When subversion attempts to connect to an https URL, the underlying
protocol library (openssl) attempts to start the secure protocol
negotiation at the most basic level, plain SSL.
Unfortunately, I ...
1
vote
2answers
216 views
Trying to install libcurl on a Linux RHEL, unable to install openssl
I am a programmer, and I am trying to give a clear sure fire way for the engineering team to install libcurl on a Linux RHEL machine.
The machine already has the following installed by default:
...
1
vote
1answer
219 views
OpenSSL: How to create a certificate with an empty subject DN?
Is it possible to create a PKCS#10 certificate request / X.509 certificate with the identifying information only in the subject alternate name attribute/extension? According to X.509 4.1.2.6 Subject, ...
1
vote
2answers
44 views
Certificates signed by multiple CAs
Is it possible to have a OpenSSL Certificate signed by multiple CAs?
Background: We have a CA to issue certificates mainly for our machine-to-machine communications. Now we need to make some services ...
1
vote
1answer
137 views
Convergence notary server error
Trying to run a convergence notary to learn some stuff and I get an error when starting the service. I am running Ubuntu server 11.04 fully updated. I followed the directions that are here.
When I ...
1
vote
1answer
832 views
Trying convert webserver certificate to PEM file for wireshark to monitor ssl traffic in HTTP format
I am trying to monitor https traffic as readable HTML.
I have downloaded the certificate from the server.
"In Internet Explorer, I selected the certificate and copy to file, DER encoded binary X.509 ...
1
vote
1answer
28 views
Why does Openssl 0.9.8g suddenly changes to 0.9.8b?
I have a weird problem in which I try to use cryptodev in Openssl version 0.9.8g, but then if an error occurs or the system logs out, the version for Openssl rolls back to 0.9.8b.I have also tried ...
1
vote
1answer
531 views
What are the correct set of DLLs and placement for SSL support in mIRC on 64 bit Windows?
I am using mIRC 6.35 on a fresh install of Windows 7 64-bit. No matter what versions of the OpenSSL DLLs I use, nor where I place them, I cannot get mIRC to work with SSL; I get the "ssl not ...
1
vote
0answers
21 views
How do I create a self-signed S/MIME signing certificate with OpenSSL and then sign a file?
I would like to create a certificate with OpenSSL and then use it to create an S/MIME format detached signature of a file. Is this something that makes sense in the context of S/MIME? How do I get ...
1
vote
1answer
40 views
Openssl decrypt from encrypted text from command issue
I am using following command to decrypt an base64 string.
openssl enc -in ciphertext -out binarytext -d -a
openssl rsautl -decrypt -in binarytext -out plaintext -inkey private.pem
I am facing an ...
1
vote
0answers
71 views
How can I export public key in PEM format with GnuPG?
I'm writing SW that uses opessl library for verifying DSA signatures. I have public keys from senders in gpg format. How can I convert those into .pem so that openssl can read them?
I found this from ...
1
vote
1answer
95 views
openvpn 2.2.1 error from SSL_CTX_load_verify_locations
I am trying to use OpenVPN 2.2.1 on Linux (Ubuntu 12.04) to connect to a VPN server maintained by a colleague. He uses TunnelBlick (on a Mac) successfully. I am trying to use his client configuration ...
1
vote
0answers
50 views
keeping Snow Leopard's directory timestamps when extracting a tar in Mountain Lion
I have a directory in a Snow Leopard box that looks something like:
MyDir/
file1
SubDir1/
file2
SubDir2/
file3
I created an encrypted archive of it (still in Snow ...
1
vote
0answers
178 views
Establish https on nonstandard port
I'm trying to estamblish https on port 55434 (different than standard 443). My nginx configuration looks like this:
server {
server_name example.org;
listen 55434 ssl;
ssl ...
1
vote
0answers
368 views
Passwordless ssh failed when login using username
I was trying to setup Hadoop and was stumbled on passwordless ssh to localhost.
I am getting a password prompt when trying to connect using ssh username@hostname format.
But there is no problem ...
1
vote
0answers
56 views
tomcat6 with crl doesn't load
I have a new tomcat6.0.34 setup I'm configuring on my CentOS 6.3 (64 bit). I've downloaded a series of CRLs for the certificate authorities I am using, converted them from DER to PEM with openssl:
...
1
vote
0answers
172 views
unable to get local issuer certificate - Ubuntu 11.04
I'm facing a strange issue. My vps from Linode has no issue connecting to apple push server with following command.
openssl s_client -connect gateway.sandbox.push.apple.com:2195 -cert ...
1
vote
0answers
248 views
Decoding a crypted file by openssl not working since change of OS (linux to windows)
I am working on a little script that crypts a file to be sent to one of our suppliers.
The workflow is as follows:
We created a key, which we asymetric crypt using the public key
they have provided
...
1
vote
0answers
289 views
Problem Verifying S/MIME Messages with Mutt
I'm having problems verifying some S/MIME messages in Mutt.
First some background
$ mutt -v
Mutt 1.5.21 (2010-09-15)
Copyright (C) 1996-2009 Michael R. Elkins and others.
Mutt comes with ABSOLUTELY ...
1
vote
1answer
323 views
Encrypting using DES 64-bit with openssl
I'm trying to do a very simple thing, namely using a 64-bit password and a 64-bit plaintext (both in hex) and encrypt it with simple old DES.
my script looks like this:
plaintext=`echo -n "$2" | sed ...
1
vote
1answer
165 views
Failure to build ACE
I gunzipped and tarred ace_tao5.6.3.tar.gz. After creating the "ACE_wrappers" directory I successfuly ran configure. When I tried to make, I got an "Open SSL" missing dependency.
After installing ...
1
vote
2answers
81 views
Which cipher to use for very small file
I would like to encrypt a file containing 15-16 password, so a really small file, which encryption offer the best security for little file?
0
votes
4answers
2k views
Can you use OpenSSL to generate an md5 or sha hash on a directory of files?
I'm interested in storing an indicator of file / directory integrity between two archived copies of directories. It's around 1TB of data stored recursively on hard drives. Is there a way using ...
0
votes
4answers
262 views
Text editors with encryption plugins?
I am looking for a text editor which supports openssl encryption as a plugin. So, instead of manually:
decrypt a file in shell
edit it in the text editor
encrypt the file in shell
Hopefully, the ...
0
votes
1answer
602 views
Why openssl insist on requiring a passphrase on genrsa command?
Issue command:
openssl genrsa -out rsaprivatekey-nake.pem -des3 1024
If not providing a passphrase(just press enter when requested), it keeps saying:
Enter pass phrase for rsaprivatekey-nake.pem:
...
0
votes
1answer
37 views
Openssl pkcs8 default format gives RSA PRIVATE KEY
I'm running this command on my pc (Openssl version: 1.0.1) :
openssl pkcs8 -inform DER -in file.key -passin pass:12345678a -outform PEM -out key.pem
and i got this key.pem:
-----BEGIN PRIVATE ...
0
votes
1answer
113 views
Why my SSL doesn't work? [closed]
I've tried for several days to make a HTTPS server but I cannot make it happen, I've followed this and this tutorial, where I make the server signed with the certificate, but when I probe the ...
0
votes
2answers
105 views
Server unresponsive after successful OpenSSL connection
I'm testing server connections using OpenSSL, with varying results
Server A: connection is successful, as are user login and the other commands I expected to work
Server B: connection is successful, ...
0
votes
1answer
353 views
Extract server certificate from PCKS12
I have a p12 file which apparently contains the server certificate. I need to extract the x509 server certificate from the p12 file so that I can add it to my java trust store, the problem is that I'm ...
