Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

Filter by
Sorted by
Tagged with
0
votes
1answer
109 views

Openssl signed with openssl pkeyutl verified with openssl dgst

I want to sign hash with openssl pkeyutl and verify with openssl dgst -verify. Down below are my testing private and public keys (EC keys): private.pem: -----BEGIN EC PARAMETERS----- BggqhkjOPQMBBw=...
0
votes
1answer
26 views

Private keys extracted from .pfx and from separate encoded key file look different but both do work

I have a CertAndKey.pfx file and corresponding EncryptedKey.pem - both provided from CA. The following commands result with 2 different decrypted key files key1.pem and key2.pem: openssl rsa -in ...
0
votes
1answer
52 views

give certificate(not the file) as input to openssl command in bash script

is there any way to give certificate(not the file) as input to openssl command in bash script ? I placed ascii form of certicate in script as a variable . when I want to read it by openssl I got error ...
0
votes
0answers
24 views

What format/encoding is the Dovecot Diffie-Helman params file?

I'm stuck on Dovecot 2.2.x because 2.3 package isn't available yet for CentOS 8.x, and I don't want to custom build in this use case. Further, I'm bootstrapping this machine in order to snapshot it ...
-4
votes
0answers
20 views

Having a serious trouble with Unable to establish SSL connection (On Metasploitable 2)

Any Help ? Please, the error is in VirtualBox that I am running Metasploitable 2 in... So I am not able to copy the code...
0
votes
0answers
16 views

Enable TLSv1 with Apache 2.4.41 and OpenSSL 1.1.1f

I have a piece of legacy software that only support TLS 1.0. It's only served internally so I'm trying to get that configured. Mozilla suggests this config: SSLProtocol all -SSLv3 ...
0
votes
1answer
23 views

Self signed certificate ERR_CERT_COMMON_NAME_INVALID for CN==URL

I have generated the self signed certificate with subject alternate names for alias server and IP address. I have imported the certificate into Windows Trusted certificate authorities. Chrome accepts ...
0
votes
0answers
15 views

Dovecot 2.2 - can diffie-hellman params file be symlinked to pre-existing one?

I'm installing Dovecot 2.2 (limited to 2.2 in CentOS 8), on a VERY lightweight server (1GB RAM, 1 core). The problem I'm facing is that Dovecot insists on generating its own Diffie-Hellman parameters ...
0
votes
1answer
32 views

What is the OpenSSL equivalent of this given C# hashing code?

I've got C# server code which verifies a hash using the following logic. I have no control over the server code and cannot change it. string key = "xZBn34L4myg[...]cebvr7A=="; var hmacSha256 = new ...
0
votes
0answers
8 views

How to avoid use of medium strength ciphers in WAS liberty server with openJDK 1.8 [migrated]

Good day, I have a IBM WAS liberty server, which is place under OS redhat linux, with openjdk version 1.8.0_242. I receive a pentest report that complain about this server is using medium strength ...
0
votes
0answers
35 views

DATA connection terminated without SSL shutdown. Buggy client! Integrity of upload cannot be asserted VSFTPD + Ubuntu 18.04

enabled SSL/TLS in VSFTPD and its getting the below error as per vsftpd.log, while uploading a file. OK LOGIN: Client "::ffff:xx.xx.xx.xx" DEBUG: Client "::ffff:xx.xx.xxx.xx", "DATA connection ...
0
votes
0answers
352 views

Is there a command in OpenSSL that allows me to compute Diffie-Hellman secrets?

For example, I already have g, a, b, p, but I want to compute g^a mod(p) and g^b mod(p), is there a command I can use in OpenSSL? I couldn't find one after looking for an hour.
1
vote
1answer
35 views

Encrypt to PGP from OpenSSL

I have a tool that takes an RSA public key (e.g. OpenSSL PEM format key), encrypts a message to that public key, then returns the encrypted message. I'm going to be sent a PGP public key and need to ...
0
votes
1answer
191 views

How to un-encrypt a single encrypted field from a file in Linux (openssl, rsa key)

I have a csv file that I receive every day on Linux. The file itself is NOT encrypted as a whole, but one of the fields is, so it looks something like this: data, data, data, encrypted_data, data, ...
0
votes
1answer
97 views

nginx data corruption when kTLS is enabled. Any ideas why?

I am using a 5.6 kernel with kTLS feature enabled (shown below): CONFIG_TLS=y CONFIG_TLS_DEVICE=y While installing nginx with OpenSSL support, I have enabled extra feature 'enable-ktls' for OpenSSL ...
0
votes
0answers
30 views

Openssl decrypt works differently on different computers

I'm running a single openssl enc -d command on two computers. One succeeds, but the other results in "bad decrypt." What could be the explanation? echo -n CIPHERTEXT | openssl enc -d -pass pass:...
1
vote
1answer
46 views

Generating private+public keypair for SSH: difference between ssh-keygen and openssl?

I want to create private and public key pairs to be used for SSH authentication. I can't figure out the difference between this: openssl genrsa -out MyPrivateKey 4096 openssl rsa -in MyPrivateKey -...
1
vote
1answer
118 views

Installing Python 3.7 from source: test_ssl failed

To be able to install Python from source without root permission on a Ubuntu server, I had to install openssl, which I did using the following commands: wget https://www.openssl.org/source/openssl-1....
0
votes
0answers
85 views

Convert private SSL certificate to PKCS12 format for JKS Keystore

I got the following files from company certificate provider. jenkins.int.XX.com.key XX_Inc_Private_Root_CA.base64.cer XX_Inc_Private_Root_CA.crt XX_Inc_Private_SSL_CA.509.cer XX_Inc_Private_SSL_CA....
0
votes
1answer
44 views

Have I understood how OpenSSH and X509 works?

We want to test a connection with OpenSSH using X509 certificates using pkixssh fork from Roumen Petrov. I don't understand really how the full authentication works and specially how to create the ...
0
votes
0answers
43 views

Openssl-1.1.1d failure in BIO_new

openssl currently I am upgrading openssl to 1.1.1d for my project. After upgrading to 1.1.1d I am observing failures in BIO_new(), X509_new(), HMAC_Final() etc. I have digged more into BIO_new() and ...
0
votes
0answers
43 views

Error opening CA private key when Create the intermediate pair

I follow this tutorial to Create the root pair and Create the intermediate pair. Create the root pair is fine, but when i try to Create the intermediate pair it's error at this line: openssl ca -...
0
votes
0answers
220 views

export private key from pfx-file (Warning unsupported bag type: secretBag)

I'm trying to export a private key from a pfx-file using OpenSSL: openssl pkcs12 -in C:\tmp\pfxfile.pfx -nocerts -nodes -out C:\tmp\prvkey.pem I get the prompt to enter the password: Enter Import ...
0
votes
1answer
88 views

Error message when trying to convert private key from a pem-file to a pvk-file

I'm trying to convert a private key from a pem file/format to a pvk file/format using OpenSSL with the following command: openssl rsa -in C:\tmp\key.pem -outform PVK -pvk-strong -out C:\tmp\key.pvk ...
0
votes
0answers
376 views

OpenSSL no crypto directory

I followed this tutorial to setup self certified SSL on my server. but I face a problem when I sign the certificate as follows: openssl ca -in tempreq.pem -out server_crt.pem tutorial said you ...
0
votes
0answers
21 views

Seems like OpenSSL ignores `OPENSSL_CONF_INCLUDE` value — what did I wrong?

I have my config file for openssl commands which works fine. But I wanted to put some common fragments into separate files and include them, instead of repeat them. That's what .include directive is ...
0
votes
0answers
17 views

openssl/asn1_locl.h' file not found

I am trying to compile SSL to generate the static libraries for macOS, iOS, and tvOS. I am using this script, found on the web and slightly adapted for the new versions. #!/bin/bash # This script ...
0
votes
1answer
114 views

openssl how to generate CSR with S/MIME Capabilities

what req_extensions should I pass to openssl to include "S/MIME Capabilities" into my CSR? Please see example openssl s_client outpout below from installed certificate. I aware of "X509v3 ...
0
votes
0answers
19 views

Ssh from outside the network keep timing out

So I am trying to connect to my Kali VM that run on a windows host. I am using Virtualbox in bridge network. my home router forward ssh to my kali VM when I try to connect from outside the network, ...
0
votes
0answers
35 views

OpenSSL timestamp from Greek TSA fails

We are forced to use the gov's TSA server timestamp.ermis.gov.gr, suppossedly RFC 3161. Their certificates are here. I'm trying to timestamp and verify with curl and openssl. I can't even verify the ...
0
votes
1answer
112 views

How can I globally restrict OpenSSL from SSL and TLS < 1.2, on Linux?

I've been asked to disable the use of all SSL, and TLS < TLS 1.2, globally on one of my Centos boxes. Its been suggested that I should be able to do this in the openssl library. I'm reasonably ...
0
votes
1answer
861 views

Self signed SSL CERT in chrome not working, 2020

I have ubuntu apache2 virtual server on 192.168.75.129 ip and i'm using windows 7 I've created certificate with sudo openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/...
0
votes
0answers
198 views

Play m3u8 file via mplayer having encrypted m4s contents

I have init.mp4, playlist.m3u8 and multiple .m4s files which are encrypted. When I try playing the video via MPlayer playlist.m3u8, it gives error like: MPlayer 1.3.0 (Debian), built with gcc-7 (C) ...
1
vote
0answers
85 views

Where does packer store the private key?

From ubuntu shell I ran below command, to talk to AWS platform: $ packer build -debug template.packer Debug mode enabled. Builds will not be parallelized. amazon-ebs output will be in this color. ==...
0
votes
0answers
14 views

Renewed RootCA doesn't verify child certs

So i have a self signed rootCA which is expiring soon, so i created a new csr with updated info about the cert and company but im still using the same private key. I create the new rootCA and install ...
1
vote
1answer
158 views

OpenSSL encrypts public key after conversion to pfx

I'm exporting a certificate and private key into .pfx file with: openssl pkcs12 -export -out export.pfx -in public.crt -inkey private.key -nodes However despite encrypting private key with provided ...
0
votes
1answer
48 views

How to feed OpenSSL HMAC function with the counter via CLI for rfc4226?

I have problems feeding the counter needed to compute a one-time password with OpenSSL HMAC via cli. I believe my problem is with encoding of the counter.I cannot reproduce the test vectors in RFC: ...
0
votes
1answer
845 views

How to install openSSL in Windows 10?

I followed the steps installing openSSL after I have problem in generating the certificate. https://tecadmin.net/install-openssl-on-windows/ Unfortunately, the site didn't allow me to submit my ...
0
votes
0answers
19 views

Microsoft Active directory - OpenSSL - SCEP

I am trying to create certificate from openSSL and then using SCEP endpoints push it to the Active directory. Create users and groups inside AD Forest Generate Certificate from user's public key ...
0
votes
0answers
18 views

OpenSSL compile with selected ciphers

I have a custom application and I need to compile a version of openssl that only supports a certain list of ciphers. If I use the out of the box precompiled version I get cipher mismatch errors. I ...
0
votes
1answer
747 views

Decrypting .p7m file

I have a .p7m file that I want to decrypt. It is encrypted with with my ca.pem file. I have my ca.crt, ca.pem and ca.key I tried several methods to decrypt it, for example: openssl smime -verify -...
0
votes
1answer
43 views

Can I Use My OpenSSL CA to Sign My OpenVPN Certificates?

I'm not sure if it sounds like a stupid question but all the guides I've looked at when it comes to making certificates for OpenVPN all use Easy-RSA. Some of my servers such as my NAS, and ...
1
vote
1answer
255 views

OAEP padding for OpenSSL

I'm trying to decrypt a file using a private RSA key using OpenSSL. It keeps giving me the same 3 errors that I believe can be solved by adding oaep padding to it. What is the syntax for adding the ...
-1
votes
1answer
393 views

OpenSSL performance test on a specific file

I m new in this world of Cryptography. I`m trying to check the performance of the various algorithms on with OpenSSL. Looking on the internet I find this command : openssl speed aes-128-cbc des ...
0
votes
0answers
17 views

openssl not responding to typed input

I'm trying to send low-level HTTP commands to our server via TLS, but when I hit the final [enter] to send the payload, I get no response. And I'm stumped as to why. what doesn't work Typed from a ...
1
vote
0answers
229 views

Windows 10 ssh works, WSL Ubuntu 18.04 ssh complains “invalid format”

The scenario here is that I received a private key generated by AWS - an ED25519 key - and tried it using Windows 10/1809's built-in ssh (OpenSSH_for_Windows_7.7p1, LibreSSL 2.6.5), and it works fine. ...
1
vote
0answers
363 views

OpenSSL Digital Signature with ES256

I am trying to reproduce a valid signature for the JSON Web Token. I make the privat key with: openssl ecparam -genkey -name prime256v1 -noout -out private.pem also convert this from Pem to P8 with: ...
0
votes
0answers
73 views

tshark decryption fails on old OS but succeeds on new OS

I have a pcap tracefile and private RSA key that should allow me to decrypt the HTTPS data in the pcap file. With the exact same pcap file, private key and tshark command, I find that decryption ...
1
vote
0answers
226 views

Installing ipmitool for Windows

I am trying to install ipmitool on Windows 10. I just installed Cygwin and have been trying to follow the steps for building ipmitool 1.8.12 (https://stackoverflow.com/questions/12907005/ipmitool-for-...
0
votes
0answers
135 views

How to use SHA-512 in terminal?

I do not understand this problem. I tried my code down below. It says,"can only sign or verify one file." Instructions: Using the hash function SHA‐512 and the key generated in Step 5, sign the ...

1
2 3 4 5
12