Skip to main content
New
Stack Overflow Jobs powered by Indeed: A job site that puts thousands of tech jobs at your fingertips (U.S. only). Search jobs

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

Filter by
Sorted by
Tagged with
0 votes
1 answer
55 views

The Windows trusted the self-signed certificate but Google Chrome returned the NET::ERR_CERT_AUTHORITY_INVALID error

I created a self-signed Root CA certificate, then created an IA certificate signed with Root CA, and finally created a server certificate signed with IA certificate. These are the commands that I use: ...
Tần Quảng's user avatar
0 votes
0 answers
21 views

How to use ed25519 in OpenVpn?

I want to use ed25519, so at first, in my server configuration file, I use this setting: ecdh-curve ed25519 But in the log, it gives me this message: WARNING: OpenSSL 3.0+ builds do not support ...
Álvaro García's user avatar
0 votes
2 answers
73 views

Decryption a token which is encrypted in lower OpenSSL version

We are currently using OpenSSL 1.0.1 to encrypt a token as below: Encryption: echo $TOKEN | openssl enc -aes-256-cbc -e -kfile <path of kfile> -md sha256 | base64 -w 0 Decryption: echo $TOKEN ...
Ram's user avatar
  • 101
0 votes
1 answer
60 views

Which ed25519 PEM keys does openssh >9.6 support?

According to the release notes of OpenSSH 9.6 it now supports ED25519 keys in PEM format ssh(1), sshd(8), ssh-add(1), ssh-keygen(1): add support for reading ED25519 private keys in PEM PKCS8 ...
till's user avatar
  • 244
0 votes
0 answers
36 views

How to use openssl ro decrypt AES-256-CBC file that was created with a binary passphrase

# decrypt binary file.enc openssl enc -d -aes-256-cbc -in file.enc -out file.txt I generated a encrypted file using AES-256-CBC using a PHP library. The library generates and stores the file in ...
Mathew Paret's user avatar
1 vote
0 answers
76 views

Unable to cURL on some platforms, in particular DigitalOcean VPS

I am on Ubuntu 23.10 (GNU/Linux 6.5.0-27-generic x86_64) is not working, curl is 8.2.1 suspect is there is something on the machine. I have two Virtual Private Servers (VPS) based on Digital Ocean ...
S. W. G.'s user avatar
  • 185
1 vote
1 answer
87 views

Convert puttygen Ed25519 private key to JKS

I am trying to convert a putty generated Ed25519 private key to a JKS keystore, I tried looking into lots of documentations but I am a bit lost First I generate my key using puttygen (It is a key I am ...
Maxime's user avatar
  • 125
0 votes
0 answers
46 views

Where to put a new certificate .cer file so that ddev composer will use it instead of the default one?

I am using WSL2 with Ubuntu following the instructions here: https://ddev.readthedocs.io/en/stable/users/quickstart/#drupal ➜ my-drupal10-site2 ddev composer create drupal/recommended-project ...
MrSnrub's user avatar
  • 97
1 vote
1 answer
90 views

Why does the kernel reject my self signed module on a secure boot system?

I have a secure boot enabled linux on an Intel NUC. It uses a special distribution (Balena IoT) that doesn't use shim and has only this distribution's keys enrolled (no Microsoft keys). For a test, I ...
Markus Grunwald's user avatar
0 votes
2 answers
135 views

Self signed certificate using own CA not working on intranet

I have made a CA and generated a self-signed certificate signed using that CA after that I bind it with my local website on IIS server works fine on my PC, but when I access it on other PC on the same ...
Suman jha's user avatar
4 votes
2 answers
237 views

How to get the type of encoding used in a X509 Subject field?

In RFC 5280 is written that for example the X520OrganizationName can use one of the following encodings: X520OrganizationName ::= CHOICE { teletexString TeletexString ...
FireEmerald's user avatar
1 vote
1 answer
37 views

OpenSSL CSR adds prefix in custom attribute value

I am creating an OpenSSL configuration that should assist in generating Certificate Signing Requests for Hyperledger Fabric Identity and TLS certificates (we cannot use Fabric CA in our organisation). ...
JeanMarc's user avatar
  • 113
1 vote
0 answers
25 views

What are OpenSSL 3's "auto" DH parameters?

The Postfix documentation says the following: With Postfix ≥ 3.7, built with OpenSSL version is 3.0.0 or later, if the parameter value is either empty or "auto", then the DH parameter ...
Grant Gryczan's user avatar
-4 votes
1 answer
495 views

Issue Decrypting File with OpenSSL: "hex string is too short, padding with zero bytes to length"

I'm encountering an issue while trying to decrypt a file using Open SSL. I have a file named fc382Crypto.bin provided by my instructor, and I need to decrypt it using the blowfish algorithm with CBC ...
BariBx's user avatar
  • 1
0 votes
1 answer
486 views

openssl s_client -connect errorno=111

Hi I got problem with openssl connection. I have java application which connects from server1 to server2 I made clone of server2 and upgraded it from Debian 9.7 to Debian11. The connection to ...
Yawa86's user avatar
  • 1
0 votes
0 answers
28 views

Result is different between Phoronix test suite and openssl speed

I have the result from phoronix test suite openssl 3.1.0 and openssl 3.1.0 from phoronix folder. The result is different between phoronix and openssl. I don't understand how the value is calculated. ...
Oleg's user avatar
  • 1
0 votes
0 answers
80 views

OpenSSL ECDSA Signature Issue

I tried the following command to sign a binary file using two different ways to sign. The results are different. I am not sure why or Does it matter? Installed openssl tool under windows environment. ...
Jason Z's user avatar
2 votes
0 answers
494 views

openssl -aes-256-cbc can no longer decrypt my secrets from early 2022

In about March 2022 I encrypted some secrets and saved them in text file: echo mysecret | openssl enc -aes-256-cbc -a -A -e -k $mypassword and saved the result. That worked at the time but now I find ...
Chris F Carroll's user avatar
0 votes
1 answer
81 views

How to use the `ssh-add` session on `openssl pkeyutl -decrypt`

I converted my id_rsa private key to the RSA format using ssh-keygen -p -m PEM -f ~/.ssh/id_rsa explained in this answer. I then added some handy aliases that will allow me to encrypt and decrypt ...
Martin Braun's user avatar
2 votes
1 answer
742 views

Command Line decryption of aes-256-gcm no-longer working after OpenSSL updated

Late last year (2022) I encrypted a file using OpenSSL using terminal on my Mac with a very simple openssl enc command and was able to decrypt using this command: openssl enc -d -aes-256-gcm -in ...
bakslaash's user avatar
0 votes
0 answers
58 views

Migrate from mcrypt command line tool to openssl (or other)

I am currently in the process of migrating away from the "mcrypt" command line tool. The main reason for this is, that mcrypt is not available for alpine docker images. Also it seems that ...
Matthias Fetzer 's user avatar
1 vote
0 answers
3k views

In OpenSSL, if I decrypt using a wrong password it just tells "bad decrypt" without showing the output. Is there a way to show it anyway? [closed]

I encrypted a sample test file using: openssl enc -aes-128-cbc -in test -nosalt -out encprova.aes128 Then, to decrypt: openssl enc -aes-128-cbc -d -in encprova.aes128 -nosalt and if I write the ...
Allexj's user avatar
  • 244
0 votes
1 answer
2k views

get certificate expiry date in unix time (or any other numeric) format

This is needed to compare to current time and see how much is left. I investigated the matters and it seems people are inventing scripts getting date/time in text from the openssl output, converting ...
Anonymous's user avatar
  • 161
0 votes
1 answer
2k views

How to set up client certificate for EAP-TLS so that Windows finds it?

I am attempting to connect a Windows 10 Home machine to a WLAN secured with EAP-TLS. At the point I've reached I always get a "The user certificate required for the network can't be found on this ...
Seg Fault's user avatar
  • 138
3 votes
1 answer
879 views

P12 Certificate Authentication - what is the correct method

I've been able to successfully set up an IKEv2/IPSec VPN Server using certificate authentication. However, I have a general issue regarding the correct method of creating P12 user certificates. I've ...
Tom Thorp's user avatar
1 vote
0 answers
380 views

How to set length of certificate serial number explicitly?

I am newbie to openssl and I am trying to create a end-device certificate (from command-line options). I want to set the length of the serial number (16 bytes) of the certificate. I read that -...
Preeti 's user avatar
  • 131
0 votes
1 answer
105 views

offlineimap: get certificate of email server

I would like to use offlineimap as a backup for my emails. How do I obtain the certificate of the email server? Moreover, what do I have to do if I need the whole certificate chain? I suspect the ...
Manuel Schmidt's user avatar
1 vote
0 answers
4k views

Exporting non-exportable private key for .cer from Windows Certificate Manager

Problem Like many others, I am trying to export the private key associated with my .cer file to convert to .pfx. There are a number of hacked solutions e.g. https://stackoverflow.com/questions/...
Sterling Butters's user avatar
0 votes
0 answers
396 views

Update openssl to 3.1.1 from 1.0.2n in Nodejs

I am working on an old node.js project which is using the Openssl version 1.0.2n. I found only a dll (libeay32.dll) using in this project and in that that dll openssl version is 1.0.2n. Since Openssl ...
mhhabib's user avatar
  • 101
1 vote
1 answer
1k views

Generate certificate without Basic constraints

A business partner requires a client certificate, to be able to access some of their API's. I generated a cert with OpenSSL, using the command: openssl req -x509 -newkey rsa:4096 -keyout mykey.pem -...
Lars Kristensen's user avatar
0 votes
0 answers
992 views

kex_exchange_identification: Connection closed by remote host when connecting to sftp over https/ssl proxy

I am trying to connext to sftp server over https proxy, using the following command: sftp -v -o ProxyCommand="nc -X connect -x proxyIp:3128 %h %p" user@sftpIP 22. When I am running the ...
abhishek bhardwaj's user avatar
0 votes
1 answer
108 views

opendkim still not working - opendkim-genkey: openssl exited with status %d

opendkim not working - opendkim-genkey: openssl exited with status %d offers no solutions. The problem: sudo opendkim-genkey -b 2048 -d example.com -D /etc/opendkim/keys/example.com -s mail -v ...
STEVE J's user avatar
1 vote
0 answers
8k views

Which Ubuntu package to install to get libssl.so.3 and libcrypto.so.3 libraries?

I am trying to get AWS localproxy to run on Ubuntu, which requires libssl.so.3 and libcrypto.so.3 to be available on the system. I was expecting to have libssl.so.3 and libcrypto.so.3 be available ...
Alex Berger's user avatar
2 votes
1 answer
4k views

Is openssl is an alias for libressl on macOS?

I have no idea why despite having (seemingly) openssl, when I run: openssl version it outputs: LibreSSL 3.3.6 And when I run which openssl and type openssl to check whether or not openssl is just an ...
FP34024's user avatar
  • 23
0 votes
0 answers
114 views

Links browser "SSL error"

I have macos 10.10 Yosemite on my laptop and i configured links with this command: ./configure --x-includes=/usr/X11/include --x-libraries=/usr/X11/lib/ --with-ssl --enable-graphics Output was: ...
jan_Seleka's user avatar
0 votes
1 answer
563 views

encrypt files with larger size using openssl FIPS complaint

I want to encrypt files rather big size like 10MB-20MB. Ideally this is working fine if i encrypt files individually like. openssl enc -aes-256-cbc -salt -in file.txt -out RAW.gpg Now i wanted to ...
rahuls_'s user avatar
0 votes
0 answers
917 views

Generate private and public key from openssl with fips mode enabled

I am using openssl (V3). I want to encrypt and decrypt files using fips mode. For that i want to generate private and public key. How ever i am facing difficulty in generating. Command i tried to use ...
rahuls_'s user avatar
1 vote
1 answer
494 views

The authorityKeyIdentifier does not get accepted

I am trying to generate CSR for the last hours with the following openssl statement: openssl req -new \ -sha256 \ -subj "/C=YY/ST=Anywhere/L=downtown/O=test/OU=Test Inc./...
user1743843's user avatar
2 votes
1 answer
1k views

Verifying the certificate chain with OpenSSL

I require the OpenSSL command to verify the certificate chain. In the certificate, the signature hash is signed by the signer's private key.
user avatar
0 votes
0 answers
51 views

Is it possible to connect to remote 465 via own 443 port?

I have asked this question and am opening a new question as per SE policy. The remote SMTP server can be connected to via its own 465 port. However, I want to reach that server via a cloud server. ...
Sean's user avatar
  • 127
0 votes
1 answer
756 views

How do I detect if my firewall is blocking certain ports

On my laptop i do: openssl s_client -connect w00d8dd4.kasserver.com:465 I can see that the connection works. I can also do : telnet w00d8dd4.kasserver.com 465 Also no problem. Now, if I log in to ...
Sean's user avatar
  • 127
1 vote
1 answer
167 views

Piping commands to smtp server doesn't work

So I was trying to write a bash script to send a mail to someone using smtp.gmail.com server by using openssl. Everything upto this is working fine: printf "helo gmail.com\nauth plain $auth\n&...
Cardinal's user avatar
1 vote
0 answers
145 views

OpenSSL connection to an imap server over explicit port works, but fails on implicit port

I have a mail server to which I'm connecting from a ruby application using protocol IMAP. But I get an error in rails console: Loading dev environment (Rails 7.0.4) irb(main):001:0> @connection = ...
AnjK's user avatar
  • 111
2 votes
1 answer
11k views

How to associate a private key (.key) file to a ssl certificate (from GoDaddy) to install on IIS

I have ssl certificate file downloaded from GoDaddy which contains .pem file .crt file and .p7b file. I have a private key generated in .key extension. I need to assign the same to the certificate i ...
Nidal K I's user avatar
1 vote
1 answer
1k views

File encrypted with OpenSSL cannot be decrypted with LibreSSL

I've used OpenSSL on an Amazon Linux 2 VM to encrypt a file like so: openssl aes-256-cbc -salt -out ~/my_file.txt.enc -pass pass:[redacted] However when decrypting the file on OSX using the command ...
MorayM's user avatar
  • 123
1 vote
0 answers
198 views

How to convert PKCS12 keys in a way that MD5 isn't used?

I received a PFX file from a company in order to use their VPN. For openfortivpn I needed two PEM files to pass with --user-cert=cert.pem --user-key=key.pem, so I used openssl pkcs12 -in REDACTED.pfx -...
ByteEater's user avatar
  • 213
1 vote
0 answers
825 views

Using OpenSSH config file with -addext and -subj parameters

I'm trying to create a bash script to manage a PKI. I want to use OpenSSL conf file to specify some parameters for the generated and signed certs using my CA. I specified default parameters as below: ...
Tratosca's user avatar
3 votes
0 answers
2k views

What is the difference between libssl.so.3 and libssl3.so?

I've been playing with uprobes to attach to SSL sym, checked the libraries available in my OS (Manjaro kernel v5.15.89) and found both of these library files: ❯ ls -l /lib64/libssl3.so -rwxr-xr-x 1 ...
nav's user avatar
  • 163
0 votes
0 answers
89 views

Encrypt using certificate

I have certificate in DER format that according to my understanding contains public key. I need to encrypt symmetric key with certificates public key according to standard at least RSAES-PKCS1-v1_5. ...
vico's user avatar
  • 2,583
1 vote
1 answer
2k views

Generate symmetric key in openssl

I need to generate 128 bit symmetric key according to AES standard in openSSL. Unfortunately I can't find one in openssl. How to generate symmetric key?
vico's user avatar
  • 2,583

1
2 3 4 5
15