Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

-1
votes
0answers
11 views

I am not able to log in to OpenShift CLI and getting a libcrypo.so.10 not found error

I am trying to log into OpenShift CLI via oc login. Seems like there is an error with the package libcrypo. I already have libcrypo installed. I have also tried creating links using command like sudo ...
1
vote
0answers
9 views

OpenSSL/Keytool Unable to find/load

I am reasonably unfamiliar with certificates, espeacially as they are used in XAMPP and Java. I have managed to take a publicly signed wildcard PEM file (*.companyname.eu) and get it loaded into XAMPP....
1
vote
1answer
37 views

How can I do asymmetric encryption on the command line, without relying on installed keyrings, etc.?

My home computer consists of a VMWare host running Linux Mint, and a number of VMWare clients. I run backups every night that compress my VHDs to a removable hard drive. I'd like to encrypt the ...
-1
votes
0answers
12 views

Rabbitmq Pika connection close issue

I tried to publish the message with ssl in rabbitmq but am not able to publish it because am getting pika connection close issue. When i tried publishing without using ssl . messages are published ...
1
vote
0answers
36 views

What determines what algorithms are available to OpenSSH?

Is the version of OpenSSH or the version of OpenSSL (or a combination of the two) that is installed on a given system what determines which Ciphers, KexAlgorithms, and MACs are available to be ...
0
votes
0answers
37 views

Different response between curl and openssl s_client

I'm having a headache with some results. Running the following command results in an HTTP 200 response: $ curl -v -L www.example.com >/dev/null while running this, and using the exact headers ...
0
votes
0answers
50 views

Unable to install any ruby versions using RVM in macOS Mojave 10.14.2

After upgrading to Mojave 10.14.2 I tried to install any ruby versions using RVM. I get the following error message related to OpenSSL. I have latest command line tools (Command_Line_Tools_macOS_10....
0
votes
1answer
27 views

Not accept key file video streaming

I want to stream video securely and I am using ubuntu console1 /home/ajithmsm/ffmpeg -stream_loop -1 -i out.mp4 -vcodec copy -f mpegts tls://127.0.0.1:2222?listen'&'cert=domain.crt'&'key=...
0
votes
0answers
8 views

Composer Self Update Error on Mac OS X

I tried to update Composer today on my Mac and got the following error: composer selfupdate [Composer\Downloader\TransportException] The "https://getcomposer.org/versions" file could not be ...
0
votes
1answer
54 views

Verify return code: 21 (unable to verify the first certificate)

I have a self-signed certification, I'm using it locally for my API. As you can see in the screenshot is working fine using Docker and Apache for the server side. The problem is when I tried to use ...
0
votes
1answer
38 views

Jira Server Rest API does not work Properly with SSL

I have a Jira instance running on a debian server which I want to access from a Cloud Application called HockeyApp. The Problem happens when HockeyApp tries to access the Project List of Jira (fails ...
2
votes
0answers
98 views

What is the best way to set up an OCSP responder (pkicreate, OpenSSL, other)?

I set up a root and intermediate CAs with OpenSSL and started issuing server certificates. For MS RDP (RemoteApp) it required OCSP, so I also set up an OCSP responder with OpenSSL. Testing with ...
1
vote
0answers
628 views

OpenSSLfails on signature verification with “Unknown Option” error

I have three files: test.json public.pem test.json.sign (Which is the signature of test.json with a private key) I need to verify this signature. I use the following command dgst -sha256 -sign pub....
0
votes
1answer
27 views

PKI certs hierarchy

I follow https://jamielinux.com/docs/openssl-certificate-authority/index.html and after create root and intermediate ca the chain file dosnt have hierarchy like other ca. Here's the sample of ...
0
votes
1answer
52 views

From PFX and CRT to Pub and Private key in DER format

So I read that this command openssl x509 -pubkey -outform der -in 1.crt > 1_pubkey.der Should give me the public key in der format, but it says than the > is an unknown parameter.. Then I tried ...
-1
votes
0answers
50 views

How to make sure the client supports tls version only >= 1.2?

Here is the the client hello message packet intercepted from the client side. It supports TLS version from 1.0 to 1.2. How to configure it correctly in client side to support TLS version >= 1.2 so ...
0
votes
2answers
44 views

File permissions for openssl created files for https web server (lighttpd)

I've created the following files for my lighttpd webserver for https connections: $ ls -al /etc/lighttpd/ssl drwxr-xr-x 2 root root 4096 Oct 21 12:51 . drwxr-xr-x 4 root root 4096 Oct 20 16:04 .. ...
1
vote
0answers
16 views

Do I need to push metadata after changing only a signing certificate?

Using shibboleth on Linux, I'm exposing a service that uses SAML to the public. Previously I have used a self-signed cert as all the SAML traffic has been internal. Using the same key, I made a CSR ...
2
votes
1answer
72 views

ASN1 Structure Procuration Syntax

I want to add the Procuration Extension to my Certificate. Therefor i use the Tool XCA, which uses OpenSSL conf to create the certificates. This is the ASN1 structure: ProcurationSyntax ::= SEQUENCE ...
0
votes
0answers
55 views

Smart card issue with OpenSC (pklogin_finder debug) only on CentOS

I'm trying to use a smart card on CentOS but I'm stuck. I'm using OpenSC, and I need to implement a special module to use my smart card (libgtop11dotnet). It doesn't work on CentOS, but I tested on ...
0
votes
1answer
64 views

Yum install dependencies on RHEL

Trying to install openssl-devel for keepalived-1.4.5 on RHEL7.4. after sudo yum install openssl-devel I'm getting ...<Processing Dependencies> Finished Dependency Resolution Error: Package ...
1
vote
0answers
244 views

How to compile and install openssh from source on Ubuntu 18.04? [closed]

Other than the openssh which I installed through the system package manager, I want to compile and install another openssh from source. I downloaded the most recent portable version of openssh(7.8p1). ...
1
vote
1answer
45 views

openssl s_client, GnuTLS, sslscan disagree on supported ciphers

OpenSSL says the cipher suit for a given webserver is ECDHE-RSA-AES128-SHA256: $ openssl s_client -connect 10.87.0.51:12656 </dev/null | grep Cipher depth=0 C = VE, ST = xxxx, L = xxxxx, O = xxxxx,...
0
votes
1answer
52 views

Can't sign with DSA

A DSA key is created with: openssl genpkey -genparam -algorithm DSA -out dsaparams.pem -pkeyopt dsa_paramgen_bits:1024 openssl genpkey -paramfile dsaparams.pem -out dsakey.pem When I try to sign, ...
1
vote
1answer
16 views

`openssl s_server` giving less information than it used to

on my old GNU/Linux installation (Debian Stretch), I used to start a dummy openssl server openssl s_server and get the SSL session parameters printed on stdout. The output was the following, and it ...
1
vote
1answer
280 views

How to decrypt with public key after encrypt with private key?

I encrypted a file with a symmetric key using the openssl command line, and then I encrypted that symmetric key with a RSA public key. I experimented a bit with the encryption and decryption, and then ...
0
votes
0answers
26 views

How to make my python program bypass Linux openssl and use my compiled one

I am running an experiment program in python using python3.6.5 and Openssl. I use Ubuntu 18 which comes shipped with OpenSSL 1.1.0g: openssl version -a OpenSSL 1.1.0g 2 Nov 2017 built on: ...
0
votes
0answers
68 views

Signing Apple Wallet Pass OpenSSL

I'm trying to create a pass signing server to dynamically create Apple Wallet passes using OpenSSL and standard pass templates provided by Apple but I can't seem to get the pass to show up using the ...
0
votes
1answer
104 views

curl and wget not working with https sites after upgrade to ubuntu 18.04.1

Seems to be a openssl related issue. Anyone have any ideas as to what this is? Note that the url works in a browser. With wget: # wget -d https://deb.nodesource.com/setup_8.x DEBUG output created ...
1
vote
1answer
28 views

OpenSSL signing with PEM and an ALIAS

I need to directly ask this here because after much Googling and searching on StackExchange, I haven't landed on anything relevant so far. So, say I am using OpenSSL (on a Windows platform, if that ...
0
votes
0answers
102 views

Decrypt CMS (former S/MIME) Mail with OpenSSL including the E-Mail Header

I encrypt mails via a Sophos UTM and on a Linux machine with OpenSSL I want to decrypt these mails. With the command openssl cms -decrypt -in mail.msg -recip mycert.pem -inkey key.pem mail_enc.msg ...
1
vote
0answers
96 views

how to manually verify PDF signature (contents field: rsaEncryption) [closed]

I would like to manually validate RSA signed PDF document but I'm failing receiving different signature than then one encoded inside PDF. Here are the steps I followed, any help/hints really ...
0
votes
0answers
24 views

Decrypt SSL traffic with the openssl command line tool 9

After it was pointed out the client was requesting the extended master secret and I was responding with that as well I was deciphering the master secret as if we where not using the extended master ...
0
votes
0answers
49 views

Decrypt SSL traffic with the openssl command line tool 8

For my final steps in my script I followed this to obtain the client encryption key to perform the decryption with. client.random xxd -p crnd.bin ...
0
votes
1answer
68 views

Can .pem certificates have an encrypted certificate and an encrypted RSA key?

Can .pem certificate file have an encrypted certificate and an encrypted private key? e.g. Bag Attributes -----BEGIN ENCRYPTED CERTIFICATE----- -----END ENCRYPTED CERTIFICATE----- -----BEGIN ...
0
votes
0answers
80 views

Decrypt SSL traffic with the openssl command line tool 6

For the first part in decrypting the server pre master secret I have been using: openssl rsautl -in cpre.key -inkey key.pem -decrypt -out spre.key where cpre.key is in binary when fed to this and ...
0
votes
0answers
42 views

apache 2.2.2.16 compile error with openssl-1.1.0h

Please help me out in resolving this issue with compiling apache2.2 on debian squeeze, Basically i am trying to compile mod_ssl because current mod_ssl does not support tls1.2 support. So i extracted ...
1
vote
1answer
158 views

Decrypt SSL traffic with the openssl command line tool - continued part 5

From my previous posts part 1, part 2, part 3 and part 4 I believe I have calculated/decrypted everything correctly and ready to attempt to decrypt the client encrypted handshake message. I'm stuck on ...
2
votes
1answer
288 views

How to link python to the manually compiled OpenSSL rather than the system's one

I need to manually compile OpenSSL from source. I use Ubuntu 18. The OpenSSL shipped with Ubuntu 18 does not support specific cipher I need. But it can be enabled if I compile OpenSSL manually. I ...
1
vote
1answer
149 views

OpenSSL CNF use variable

How do I use a variable from user input in an OpenSSL CNF file? I have the following CNF: [ req_distinguished_name ] emailAddress = Email Address # specify defaults emailAddress_default = John....
0
votes
0answers
127 views

Decrypt SSL traffic with the openssl command line tool - continued part 4

From my previous question(s)/thread starting part 1, part 2 and part 3 I think I may be getting somewhere with the advice/assistance I have been getting. My data is a little different this morning as ...
2
votes
1answer
89 views

How to download all advertised SSL certificates of a domain via openssl binary?

The Problem Lets say, I would like to download every ssl certificate for a specific website to be able to do certificate pinning later on. How can I query the webserver with openssl, to download all ...
0
votes
1answer
116 views

Decrypt SSL traffic with the openssl command line tool - continued part 3

From my previous questions/thread starting part 1 and follow up part 2 following my guided explanation since my files/data I am capturing is binary in nature I used the following openssl commands ...
1
vote
1answer
127 views

Decrypt SSL traffic with the openssl command line tool - continued

I got an answer to my original question here hopefully it is ok to ask a follow up question by posting another question. From my original question above I was able to decrypt the client pre master ...
2
votes
2answers
245 views

Decrypt SSL traffic with the openssl command line tool

I'm trying to do some manual data extraction/encryption/decryption with the openssl command line tool. I've been reviewing RFC5246 to work out what I need to do. It is not crystal clear to me if I am ...
0
votes
1answer
313 views

How to set OPENSSLDIR on Windows and what is its meaning?

I am using Windows 10 Pro x64, openssl-0.9.8k_X64 I run command openssl version -a I received result openssl version -a OpenSSL 0.9.8k 25 Mar 2009 built on: Thu Jul 23 09:35:27 2009 platform: VC-...
0
votes
1answer
35 views

Using SSH authorized keys to roll out privileged file update across a LAN?

I've got a server that from time to time automatically updates a set of privileged files (eg, certificate keys, configs etc). It needs to save those files on other systems on the LAN. I know roughly ...
2
votes
1answer
310 views

Tomcat SSL error after setting up certificate

After generating certificate and key pem file using openssl on ubuntu 16.04 I configured tomcat connector in server.xml file as given below but, when I start tomcat I get an error. In the browser ...
0
votes
1answer
551 views

JtR requires OpenSSL and OpenSSL-devel being installed

I'm on macos high sierra and trying to build john the ripper bleeding-jumbo. Being in the src folder and executing ./configure && make I get the following message configure: error: JtR ...
0
votes
0answers
671 views

error: OpenSSL library not found. When I do have openssl installed and libssl.so located in /usr/local/lib

I'm trying to compile ncrack on a ubuntu 16.04 to get all dependencies I installed opensll 1.1.0h from source, I keep getting this error when I run ./configure of ncrack checking OpenSSL header ...