Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Error importing cert and key to Java keystore: keytool error: java.io.IOException: keystore password was incorrect

I'm installing an application which requires Java (two supported versions - I've chosen the latest) and a cert signed by our internal CA. When I try to import the key/cert into a Java keystore, I get ...
user avatar
1 vote
0 answers
10 views

Using openssl to generate a CSR for an ECC key stored in an HSM - key encode error

I'm trying to generate a CSR using openssl 1.1.1l. This is an ECC key, not an RSA key. $>openssl req -engine pkcs11 -keyform engine -new -key id_464F4F -out ecc_csr.pem -sha256 engine "pkcs11&...
user avatar
  • 111
3 votes
2 answers
204 views

Openssl 3.0 error when booting Vagrantbox

I updated my local linux notebook from Ubuntu 20.04 to 22.04. I did a fresh installation for several reasons. Now I have a problem with my most important vagrantbox. This box encapsulates my ...
user avatar
0 votes
0 answers
24 views

OpenSSL Error while trying to log in JIOTV in KODI

I've installed JIOTV plugin in Kodi. When I try to login I get the following OpenSSL FATAL error: OPENSSL_Uplink(00007FFBDFB8A860,08): no OPENSSL_Applink What could be the problem? I already have ...
user avatar
  • 1
0 votes
0 answers
20 views

Check public key certificate

I have create public, private keys and self signed certificate with commands: openssl genrsa -out private-key.pem 3072 openssl rsa -in private-key.pem -pubout -out public-key.pem openssl req -new -...
user avatar
  • 2,049
1 vote
1 answer
21 views

Openssl Using openssl for DES/3DES giving odd results?

I'm working on implementing a support lib that includes DES and 3DES functionality. As a validation step I went to use openssl to check my results. For a simple test I did this: echo -n "AAAAAAAA&...
user avatar
0 votes
1 answer
38 views

Openssl asks for password and common name but I want to send them as parameter

I'm creating a certificate using this command: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout localhost.key -out localhost.crt -config localhost.conf with this config: [req] default_bits ...
user avatar
  • 161
0 votes
1 answer
25 views

openssl unable to pass -config and -signkey options in the same command

I am attempting to generate a self-signed certificate with my custom config file for openssl. However, the options -config and -signkey are generating errors as below when used in the same command. ...
user avatar
  • 131
0 votes
0 answers
190 views

SSL connection error to mysql

Since a couple days I cannot connect to several mysql instances when using SSL. I am quite sure it's a problem on my machine, since colleagues and production servers don't have this issue. In both my ...
user avatar
  • 101
0 votes
1 answer
27 views

Are RSA and ECC certificates interchangeable?

Can I use a ECC certificate if a service/software (according to documentation) requires an RSA certificate? Does the software need explicit ECC support?
user avatar
0 votes
1 answer
42 views

Openssl cannot interpret non-English Character

I am using windows openssl version 3.0.1 14. The issue is when the file name has non-English character, it failed to encrypt the file with below error: C:\Users\XXX\Desktop>openssl aes-256-cbc -e -...
user avatar
1 vote
1 answer
76 views

How is the IV embedded in an encrypted file when you do not indicate it?

Suppose I encrypt with a key "1234" a file containing "abcd" with: openssl enc -iv BABA -aes128 -in file.txt -out file.enc -p I get: salt=1B929D9049534D22 key=...
user avatar
0 votes
0 answers
47 views

Automating keystore with keytool and openssl

I have this script: PASSWORD=password123 openssl genrsa -out client2.key 2048 openssl req -new -key client2.key -out client2.csr -subj "/C=/ST=/L=/O=/OU=/CN=/emailAddress=" -passin pass:$...
user avatar
0 votes
0 answers
23 views

Merged certificate chain not recognized by OpennSSL

I created a certificate chain including : ROOT CA Intermediate CA Server certificate I also veryfied that chain with "openssl verify" and it works (here is the output) $ openssl verify -...
user avatar
0 votes
0 answers
23 views

Any openssl command to list all TLS connections in a system?

Is there any openssl or linux system commands or any scripts available to which list all the open/established TLS connections in a system. Similar to netstat , which can be used to display all the TCP/...
user avatar
  • 181
0 votes
0 answers
23 views

Trying to create a CSR with openssl, but openssl doesn't know what -config is

Following this guide, I am trying to generate a csr file: $ touch myserver.key $ chmod 600 myserver.key $ openssl req -new -config myserver.cnf -keyout myserver.key -out myserver.csr but it gives: ...
user avatar
3 votes
1 answer
867 views

extracting a public key from an Ed25519 private key with OpenSSL?

Ed25519 private keys can be generated by doing openssl genpkey -algorithm ed25519 -outform PEM -out private.pem. My question is... using OpenSSL is there a way to get the public key from the private ...
user avatar
  • 5,900
1 vote
0 answers
645 views

self signed certificate throwing "RSA_padding_check_PKCS1_type_1:invalid padding" error

My domain uses a self signed certificate created like this: $ ISSUER="/C=EN/L=City/O=ORG" $ SUBJECT="/C=EN/L=City/O=ORG/CN=myserver.com" $ SAN="DNS:myserver.com" $ ...
user avatar
  • 111
1 vote
0 answers
39 views

openssl connection issue to ldap server

I'm running following command in docker container(Ubuntu 20.04) : openssl s_client -debug -connect ldap-server-name:3269 < /dev/null most of the time, it returns : CONNECTED(00000003) write to ...
user avatar
  • 113
1 vote
0 answers
4k views

Why this error tryng to cURL an API? OpenSSL SSL_connect: Connection reset by peer in connection to

I am going crazy with the following problem. Some times ago I was able to retrieve data from some API using the following cURL command involving the use of an SSL certificate, but now I am obtaining ...
user avatar
  • 6,539
0 votes
0 answers
44 views

How to force trust SMTP Let's Enrypt cert on Linux?

There's an SMTP server running on ps.mydomain.com:587. When I try to establish SSL connection with it, it fails with certificate verification error. Here's an example openssl output (Debian 11.1, ...
user avatar
  • 1
0 votes
1 answer
129 views

openssl s_client allows connection while curl does not

grief@rocket:/$ curl https://wrong.host.badssl.com curl: (60) SSL: no alternative certificate subject name matches target host name 'wrong.host.badssl.com' More details here: https://curl.se/docs/...
user avatar
  • 443
0 votes
0 answers
26 views

openssl suppress progress display

When generating a private key, OpenSSL prints progress dots to the console as dots. In my automated build pipeline, this results in a single dot being printed on each line, which clutters up the ...
user avatar
  • 961
1 vote
1 answer
337 views

openssl s_client returns errono=54 to github.com

I'm trying to execute this commands: openssl s_client -connect github.com:443 openssl s_client -connect github.com:443 -servername github.com But I got in both: CONNECTED(00000005) write:errno=54 --- ...
user avatar
0 votes
0 answers
17 views

VPN 3rd party connectivity: IPsec or SSL VPN and why

I'm setting up a secure remote RDP connection for a 3rd party user to perform maintenance operations on their machine installed in our site. My frontend firewall is OPNSense and it gives me two built-...
user avatar
  • 211
0 votes
0 answers
66 views

Getting curl error 60: Certificate has expired on BeagleBone Black but not other linux distros

I am having an issue with certificates using curl on a BeagleBone Black. First off I must mention the BeagleBone Black is running Debian 9.5 and cannot be upgraded to a newer version due to some other ...
user avatar
0 votes
0 answers
76 views

How to get ISGR_Root_X1 working on Ubuntu 14.04 LTS ESM?

After the recent Let's Encrypt change that switched over their root certificate to ISGR Root X1, I needed to make a change to an old Ubuntu 14.04 server running an old django application on an apache2 ...
user avatar
0 votes
1 answer
209 views

LibreSSL aes encryption incompatible with OpenSSL?

Machine A has OpenSSL 1.0.2k and I encrypt a dummy file like this: openssl enc -aes-256-cbc -salt -in plain.txt -e -pass pass:abcd1234 -out cipher.enc Machine B has LibreSSL 3.3.3 and when I decrypt ...
user avatar
0 votes
1 answer
21 views

Share file between different local machine using scp cmd

I'm working on a cloud synced feature for my notes based on this article I try to share my git-crypt-key between my devices (my PC and my laptop) in order to decrypt my remote GitHub repo where my ...
user avatar
0 votes
1 answer
5k views

For valid PEM I get unable to load private key by openssh

I have created a public/private key pair with this command: ssh-keygen -t rsa -b 4096 -f my-trusted-key -C "Just a public/private key" I can open the private key file and I see: $ cat my-...
user avatar
  • 103
0 votes
0 answers
396 views

Unable to load CA private key when creating the intermediate pair

Following the tutorial at LINK to create the root pair and intermediate pair. Creating the root pair works fine, but when I try to create the intermediate pair using: openssl ca -config openssl.cnf -...
user avatar
  • 1
0 votes
1 answer
46 views

`openssl digest | head -c 10` gives strange results

I'm using salted hashes of some memorable words as login/pass for anonymous accounts and just now I've noticed that sometimes I get no result for my method and then I've discovered that it was not ...
user avatar
  • 23
0 votes
0 answers
90 views

How to build FFMPEG with a certain OpenSSL path [duplicate]

I want to build FFMPEG 4.4 on my Mac with OpenSSL 3.0. This is because I have a program that needs to be built with FFMPEG, which needs to have symbols from OpenSSL 3.0, such as _BN_Copy. When I build ...
user avatar
  • 13
2 votes
1 answer
826 views

openssl's d2i_X509 complains with "wrong tag"

Tried to parse a DER key from a minecraft server auth protocol. openssl asn1parse -inform DER correctly parses the key, but when I try to use d2i_X509 function from within C to parse this data, I ...
user avatar
  • 123
0 votes
0 answers
73 views

Will Squid fix SSL errors on old Mac OS system (Snow Leopard)?

I am trying to keep a Mac OS 10.6.8/Snow Leopard system functionally useful, but for years have been unable to overcome browsers (Chrome, Firefox, Safari) that refuse to connect to certain HTTPS ...
user avatar
0 votes
0 answers
164 views

When sending email to Gmail address from netcat or openssl s_client, why do I get "Username and Password not accepted", despite correct credentials

My goal was to send an email to a gmail address, like beta@gmail.com from a commandline tool such as netcat or telnet etc. WHAT I TRIED: I first tried netcat. nc -C smtp.gmail.com 587 220 smtp.gmail....
user avatar
  • 163
0 votes
1 answer
26 views

Generated SSL certificate doesn't work in Personal > Certificates, only if it's also in Trusted Root Certificate Authorities > Certificates

I'm trying to install an SSL certificate automatically with certutil, and I've done this successfully with the following command: certutil -addstore -user -f "My" "$CERT_FILE_CERT" ...
user avatar
0 votes
1 answer
69 views

Decrypt AES 256 bit ciphertext with key

Exercise 3.8 Familiarize yourself with a cryptographic software development package for your computer. A popular open source package is OpenSSL, though there are numerous other alternatives. Using an ...
user avatar
1 vote
0 answers
33 views

CURL/Mac: error while downloading. Protocol "https" not supported (error 1)

I experience issues with both Composer and Wordpress (npm doesn't seem to be affected 🤔) The error message from Composer is exactly https://repo.packagist.org could not be fully loaded (curl error 1 ...
user avatar
  • 951
1 vote
0 answers
37 views

How to enable CA_CERTIFICATES on manjaro so that openssl works (xanmod installation error) (solved)

I'm trying to install the XanMod kernel on a Manjaro machine, but receive errors: $pamac build linux-manjaro-xanmod ... scripts/sign-file.c:25:10: fatal error: openssl/opensslv.h: No such file or ...
user avatar
1 vote
1 answer
493 views

Are private keys generated by OpenSSL when FIPS mode is disabled usable when FIPS mode is enabled?

I am running into an incompatibility between keys generated by OpenSSL while running with FIPS mode disabled, and trying to use those keys with FIPS mode enabled. OpenSSL version = OpenSSL 1.0.1e-fips ...
user avatar
1 vote
1 answer
217 views

client bases authentication via certificate signed by ROOT CA

I have generated a ROOT CA and can successfully use it for client based authentication: openssl req -x509 -sha256 -newkey rsa:4096 -subj "$SUBJECT" -days 3650 -keyout root_ca.key -out ...
user avatar
  • 43
1 vote
0 answers
4k views

Extract RSA Public Key from public Certificate

I have public certificate with 2048 bit RSA public key for encrypt data. I need use openssl to extract this public key. Certyficate is PEM .cer file, and extracted key should be PEM too. I use command ...
user avatar
1 vote
1 answer
130 views

Can I recover RSA-keypair by generating them at the same time and date?

I would like to generate a rsa keypair with openssl. For security reasons - for example loss - I would like to ask, if it is possible to regenerate these using openssl and executing the same genrsa ...
user avatar
  • 13
0 votes
1 answer
179 views

How to generate HTTP ca .cert?

If I use to generate a certificate + private key pair, with the following command on Linux: openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 This will generate two files (...
user avatar
  • 145
0 votes
0 answers
21 views

OpenSSH Library not found (Issues with Conda perhaps?)

I am trying to install a package on my Mac. The installation always fails with the following error line : OpenSSL library was not found in your system. Now, if I type openssl version -a This is the ...
user avatar
0 votes
0 answers
49 views

pamac SSL error when retrieving AUR packages

whenever I try to update AUR packages I get this error in the log: curl: (56) OpenSSL SSL_read: error:1408F119:SSL routines:ssl3_get_record:decryption failed or bad record mac, errno 0 ==> ERROR: ...
user avatar
  • 1
0 votes
2 answers
104 views

Why is OpenSSL 1.1.1 (Linux client) sending application data before Change Cipher Spec?

We use an in-house compiled OpenSSL 1.1.1i for Windows and Linux. Our client in Windows connects succesfully with an Nginx server (which I don't know the version). The Linux client fails with the &...
user avatar
  • 215
0 votes
0 answers
80 views

Why does OpenSSL error with this cipherlist that consists of ciphers it knows?

I’m carefully choosing ciphers for my NGINX. And I’ve just encountered this: 1001@e60e88819788:/app$ openssl ciphers 'ALL:!eNULL:!aNULL' | sed -e 's/:/\n/g' | grep TLS TLS_AES_256_GCM_SHA384 ...
user avatar
0 votes
1 answer
157 views

Getting an error when I try to run an OpenSSL command to export an RSA public key from a complete PEM Certificate

I am trying to export (in RSA format) my public key using OpenSSL (this is under Git for Windows, v2.31.1). When I do this, I get the following error (all examples have been slightly modified for ...
user avatar
  • 29

1
2 3 4 5
14