Questions tagged [openssl]
OpenSSL: The Open Source Toolkit for SSL and TLS
702
questions
0
votes
0
answers
98
views
Which Ubuntu package to install to get libssl.so.3 and libcrypto.so.3 libraries?
I am trying to get AWS localproxy to run on Ubuntu, which requires libssl.so.3 and libcrypto.so.3 to be available on the system. I was expecting to have libssl.so.3 and libcrypto.so.3 be available ...
0
votes
1
answer
36
views
Is openssl is an alias for libressl on macOS?
I have no idea why despite having (seemingly) openssl, when I run:
openssl version
it outputs:
LibreSSL 3.3.6
And when I run which openssl and type openssl to check whether or not openssl is just an ...
- 3
0
votes
0
answers
28
views
Links browser "SSL error"
I have macos 10.10 Yosemite on my laptop and i configured links with this command:
./configure --x-includes=/usr/X11/include --x-libraries=/usr/X11/lib/ --with-ssl --enable-graphics
Output was:
...
0
votes
1
answer
61
views
encrypt files with larger size using openssl FIPS complaint
I want to encrypt files rather big size like 10MB-20MB. Ideally this is working fine if i encrypt files individually like.
openssl enc -aes-256-cbc -salt -in file.txt -out RAW.gpg
Now i wanted to ...
- 1
0
votes
0
answers
42
views
Amazon Linux 1 yum repo updates beyond 2018.03
In the unfortunate position where ideally, we'd like to update a handful of packages on a legacy deployment of Amazon linux ami 1 with yum configuration set to releasever=2018.03. I did try modifying ...
- 101
0
votes
0
answers
102
views
Generate private and public key from openssl with fips mode enabled
I am using openssl (V3). I want to encrypt and decrypt files using fips mode. For that i want to generate private and public key. How ever i am facing difficulty in generating. Command i tried to use ...
- 1
1
vote
1
answer
44
views
The authorityKeyIdentifier does not get accepted
I am trying to generate CSR for the last hours with the following openssl statement:
openssl req -new \
-sha256 \
-subj "/C=YY/ST=Anywhere/L=downtown/O=test/OU=Test Inc./...
- 165
2
votes
1
answer
79
views
Verifying the certificate chain with OpenSSL
I require the OpenSSL command to verify the certificate chain. In the certificate, the signature hash is signed by the signer's private key.
Samyak Vora
0
votes
0
answers
32
views
Is it possible to create one certificate with a CN based on A DNS and two CNAME records?
I'd like to create one certificate to allow users to connect on the same serveur using 2 different CNAMEs, nginx then, reroutes the stream on different localhost ports according to the FQDN typed in ...
- 1,477
0
votes
0
answers
26
views
Is it possible to connect to remote 465 via own 443 port?
I have asked this question and am opening a new question as per SE policy.
The remote SMTP server can be connected to via its own 465 port.
However, I want to reach that server via a cloud server. ...
- 127
0
votes
1
answer
107
views
How do I detect if my firewall is blocking certain ports
On my laptop i do:
openssl s_client -connect w00d8dd4.kasserver.com:465
I can see that the connection works. I can also do :
telnet w00d8dd4.kasserver.com 465
Also no problem.
Now, if I log in to ...
- 127
1
vote
1
answer
54
views
Piping commands to smtp server doesn't work
So I was trying to write a bash script to send a mail to someone using smtp.gmail.com server by using openssl.
Everything upto this is working fine:
printf "helo gmail.com\nauth plain $auth\n&...
- 11
1
vote
0
answers
58
views
OpenSSL connection to an imap server over explicit port works, but fails on implicit port
I have a mail server to which I'm connecting from a ruby application using protocol IMAP.
But I get an error in rails console:
Loading dev environment (Rails 7.0.4)
irb(main):001:0> @connection = ...
- 111
2
votes
1
answer
774
views
How to associate a private key (.key) file to a ssl certificate (from GoDaddy) to install on IIS
I have ssl certificate file downloaded from GoDaddy which contains .pem file .crt file and .p7b file. I have a private key generated in .key extension. I need to assign the same to the certificate i ...
- 23
1
vote
1
answer
344
views
File encrypted with OpenSSL cannot be decrypted with LibreSSL
I've used OpenSSL on an Amazon Linux 2 VM to encrypt a file like so:
openssl aes-256-cbc -salt -out ~/my_file.txt.enc -pass pass:[redacted]
However when decrypting the file on OSX using the command ...
- 123
0
votes
0
answers
23
views
Creating trusted certificate chain
I have 4 certificatesin chain rootCA.crt->A.crt->partner.crt->sm.crt created with commands:
openssl req -x509 -sha256 -days 356 -nodes -newkey rsa:2048 -subj "/CN=www.aaa.com /C=US/L=San ...
- 2,319
1
vote
0
answers
86
views
How to convert PKCS12 keys in a way that MD5 isn't used?
I received a PFX file from a company in order to use their VPN. For openfortivpn I needed two PEM files to pass with --user-cert=cert.pem --user-key=key.pem, so I used openssl pkcs12 -in REDACTED.pfx -...
- 145
1
vote
0
answers
64
views
Using OpenSSH config file with -addext and -subj parameters
I'm trying to create a bash script to manage a PKI. I want to use OpenSSL conf file to specify some parameters for the generated and signed certs using my CA.
I specified default parameters as below:
...
- 11
2
votes
0
answers
446
views
What is the difference between libssl.so.3 and libssl3.so?
I've been playing with uprobes to attach to SSL sym, checked the libraries available in my OS (Manjaro kernel v5.15.89) and found both of these library files:
❯ ls -l /lib64/libssl3.so
-rwxr-xr-x 1 ...
- 153
0
votes
0
answers
30
views
Encrypt using certificate
I have certificate in DER format that according to my understanding contains public key. I need to encrypt symmetric key with certificates public key according to standard at least RSAES-PKCS1-v1_5.
...
- 2,319
0
votes
1
answer
510
views
Generate symmetric key in openssl
I need to generate 128 bit symmetric key according to AES standard in openSSL. Unfortunately I can't find one in openssl. How to generate symmetric key?
- 2,319
4
votes
1
answer
579
views
How to create ECDSA keypair based on OpenSSL config file?
When generating CSRs based on RSA key-pairs I'm using the OpenSSL req command for convenience:
openssl req -new -noenc -config 'server.cert.conf' -keyout 'private/server.key.pem' -out 'server.csr.pem'
...
- 55
0
votes
0
answers
432
views
React complains "error:25078067:DSO support routines:win32_load:could not load the shared library," no OpenSSL binaries have this library. How to fix?
I installed a Windows-compatible OpenSSL binary from Shining Light Productions and then used that binary in the Win64 OpenSSL Command Prompt to generate a certificate and key like so:
openssl req -...
user421241
0
votes
1
answer
165
views
VirtualBox Won't Start (VBoxManage: error while loading shared libraries)
VirtualBox in Ubuntu is failing to start because of a kernel module problem. At least this is the impression I am getting from reading the journal logs. If I try to run terminal commands I am ...
0
votes
2
answers
227
views
My OpenSSL certificates fail with Mosquitto
I am trying to automate the creation of certificates, using the steps from a StackOverflow answer here.
These are the commands I'm trying:
openssl genrsa -des3 -out ca.key 2048
openssl req -new -key ...
- 103
1
vote
0
answers
175
views
Convert Tor keypair to hex or base64 format
I just generated a Tor key with mkp224o, and I ended up with this (example) output file:
== ed25519v1-secret: type0 ==∏ —
¯£«•
UJ’Î˙Ù¬
§π¯_˚ÑÆE Œ«ß˝†òyflsk¸¬ì–Ôâm
ù≤Ü(~”ö}Ù
I want to get a ...
- 141
0
votes
1
answer
96
views
How to add a root certificate to the truststore used by openssl?
Not sure why, but the system truststore of Ubuntu and the truststore used by openssl are not the same (not mentioning Java truststores here).
I managed to add our root certificate to the system ...
- 511
0
votes
0
answers
77
views
Missing folder '/etc/pki/trust/anchors'?
I am trying to create an ssl certificate via openssl, through my virtual machine at google cloud. But one of the last steps is to copy my ca.crt from my root, to the'/etc/pki/trust/anchors' folder.
...
0
votes
0
answers
19
views
Add ID field in CSR
I need to generate certificate signature request in order to get certificate. But I need to include device_id field. Where and how I can include this field in CSR?
Generate CSR comand:
openssl req -...
- 2,319
3
votes
2
answers
4k
views
Since I updated to Ventura, I cannot SSH to my server (Ubuntu 20.04) from my macOS
I cannot SSH specific servers like micro/small instances of AWS, DigitalOcean, and so on after upgrading to macOS Ventura & OpenSSH_9.0p1, LibreSSL 3.3.6
client_1 logs
ssh -vvv user@server -p port
...
- 51
0
votes
1
answer
254
views
How to check which ciphers are included in "HIGH" ciphers constant
From the documentation I found
HIGH
"High" encryption cipher suites. This currently means those with key lengths larger than 128 bits, and some cipher suites with 128-bit keys.
The ...
- 111
0
votes
0
answers
21
views
OpenSSL - Encrypting list of files stored in .txt file
I gathered the full path of all the files that I wanna encrypt and stored them in files.txt something like:
../Desktop/Testdir/Images.zip
../Desktop/Testdir/Passwords.txt
Can OpenSSl Read the paths ...
0
votes
0
answers
313
views
ubuntu 18.04.6 LTS openssl Verification error: unable to verify the first certificate
I am trying to download from internal web server (self signed certificate) with wget.
Other clients can download successfully, but on one client I got ssl error.
I already used
wget --no-check-...
0
votes
0
answers
27
views
Save HTTPS response together with SSL signature
I'm building an app that should download file from a given url and store it locally, like a cache.
Now, I would like to be able to prove that the content was indeed downloaded from this url, and not ...
- 101
0
votes
0
answers
337
views
Can openssl be used to encrypt/decrpyt files using RSA OAEP as the mechanism, if so how?
I'm trying to use openssl to decrypt a file encrypted using RSA OAEP with md=sha256, mgf1=sha256.
So far, I have not had any success. To test my understanding of the openssl command and rule out ...
- 1
0
votes
1
answer
329
views
Get public key from CSR or CRT
I have certificate request that contains RSA Public-Key. Looks like Modulus part is public key by itself. But according to my understanding it must contain 256 bytes while modulus part contains 257 ...
- 2,319
0
votes
0
answers
726
views
Extracted Private Key from PFX file is rejected by SFTP Tools like Winscp or Filezilla
Long story short - I'm trying to extract the private key file from a PFX file which is used for SFTP authentication. I'm able to generate the private key file but it is not acceptable by the SFTP ...
2
votes
0
answers
5k
views
Error with SSL routines:: unsafe legacy renegotiation disabled
I have been trying to do a webscraping from this site.
When I use the browser to acess, the website opens normal.
But when I try to use R or Python, I have a few errors like: Error in open.connection(...
- 121
0
votes
2
answers
196
views
How to get SHA1 of first 4096 bytes of an mp4 file or stream?
I am trying to use command line tools to match the hash value that Plex.app computes for movie files (apparently, it's an SHA1 hash of the first block (4k) of a movie instead of the entire movie).
I ...
- 377
0
votes
0
answers
87
views
Renew a self-signed certificate
Let's say I have a self-signed X.509 certificate:
file some.bin
some.bin: Certificate, Version=3, Serial=00ea5db390c4cc0de3, Issuer=Some Certificate, not-valid-before=2022-08-02 06:51:44 GMT, not-...
- 4,838
0
votes
0
answers
2k
views
How do I deal with NET:ERR_CERT_AUTHORITY_INVALID in Edge?
I'm working on a legacy application with invalid ssl certificat. I want to run the application on Edge, I get the error NET::ERR_CERT_AUTHORITY_INVALID, but I can run it on google chrome.
I know I ...
1
vote
0
answers
4k
views
"failed to receive handshake, SSL/TLS connection failed" only when trying to access T-Mobile.com
I have 2 phones, 2 tablets, and 2 laptops can log into my account at T-Mobile with no issues.
My main PC, (Alienware R11 running Win11) cannot access my T-Mobile account. It gets an error when trying ...
- 11
0
votes
0
answers
122
views
OpenSSL version is different in the binary and environment
The executable is compiled with OpenSSL 1.1 version but the environment where I am executing the binary has OpenSSL 3.0. How can I execute the binary without changing the OpenSSL version?
ldd client -...
- 21
0
votes
0
answers
427
views
Apache Server 2.4.53 with Custom Built OpenSSL
I am trying to launch an Apache server on Ubuntu 20.04 running a custom built OpenSSL, but I don't want to install it on my machine, instead, I want to show the server where it can find all libraries ...
- 101
0
votes
1
answer
2k
views
How to incorporate multiple .pem certification files to a single .pfx file?
I'm working on IIS on Windows 2019. I have given certificate files; cert.pem, chain.pem, fullchain.pem and privkey.pem. I believe that I have to convert this to .pfx to incorporate it to the IIS. How ...
- 103
0
votes
1
answer
3k
views
Error importing cert and key to Java keystore: keytool error: java.io.IOException: keystore password was incorrect
I'm installing an application which requires Java (two supported versions - I've chosen the latest) and a cert signed by our internal CA. When I try to import the key/cert into a Java keystore, I get ...
- 146
1
vote
0
answers
421
views
Using openssl to generate a CSR for an ECC key stored in an HSM - key encode error
I'm trying to generate a CSR using openssl 1.1.1l. This is an ECC key, not an RSA key.
$>openssl req -engine pkcs11 -keyform engine -new -key id_464F4F -out ecc_csr.pem -sha256
engine "pkcs11&...
- 111
3
votes
2
answers
613
views
Openssl 3.0 error when booting Vagrantbox
I updated my local linux notebook from Ubuntu 20.04 to 22.04. I did a fresh installation for several reasons.
Now I have a problem with my most important vagrantbox. This box encapsulates my ...
0
votes
0
answers
945
views
OpenSSL Error while trying to log in JIOTV in KODI
I've installed JIOTV plugin in Kodi. When I try to login I get the following OpenSSL FATAL error:
OPENSSL_Uplink(00007FFBDFB8A860,08): no OPENSSL_Applink
What could be the problem? I already have ...
- 1
0
votes
0
answers
725
views
Check public key certificate
I have create public, private keys and self signed certificate with commands:
openssl genrsa -out private-key.pem 3072
openssl rsa -in private-key.pem -pubout -out public-key.pem
openssl req -new -...
- 2,319