Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

Filter by
Sorted by
Tagged with
0
votes
0answers
26 views

NET::ERR_CERT_COMMON_NAME_INVALID for trusted self signed CA cert

I am trying to create a CA certificate (test.local) which can be trusted internally and from that generate multiple server certificates (***.test.local). However, when serving with these certificates ...
0
votes
1answer
30 views

How is the certificate encrypted?

I want to get an Apple CA certificate from the link https://setup.icloud.com/setup/qualify/cert?ver=P1.10.1 but I get an unclear file. How is it encrypted? Or how can you open it? i tried to save it ...
0
votes
0answers
12 views

Adding custom engine in OpenSSL returns an error

I have installed OpenSSL 1.1.1d and added the following library gost.so under /opt/openssl-1.1.1d/lib/engines-1.1/ I also modified the openssl.cnf file located at /usr/lib/ssl/openssl.cnf as follows: ...
0
votes
0answers
16 views

Encrypt big database files in tar.gz format with openssl command ubuntu 20.04

I need help with encrypting large files. At the moment my file is over 5GB and I would like to encrypt it. To create a private and public key I use the command: openssl req -x509 -nodes -newkey rsa:...
2
votes
1answer
14 views

Should I use the same values for database, serial and crlnumber in the config for a Root-CA and its Sub-CA?

Should I use the same files for database, serial and crlnumber in the ca_default-section of my config file for both the Root CA and the subordinate CA? Or is it better to use different sets of files? ...
0
votes
0answers
14 views

Get hash after decrypt (code) signature with the public key

I am new to code signing. After signing my message I get a public key and pkcs7 certificate. I am trying to manually compare the hash of my massage with the hash I get after decrypting the signature ...
1
vote
1answer
64 views

why am I getting an error when trying to generate rsa 128

For Educational purpose, I'm trying to create RSA 128 key pair using Openssl. when trying the following command I get an error with "key size too small" $ openssl genrsa 128 Generating RSA ...
1
vote
1answer
46 views

How to encrypt a text file in a portable manner based solely on a password? [duplicate]

I used to use openssl aes-256-cbc, but the problem I have with this is when I try to decrypt in a different version of the distro it fails, as if it depends also on some internal key or something, ...
0
votes
1answer
41 views

Debug CA certificates issue - DigiCert GlobalRoot CA

There is something wrong, with the way, my Linux machine checks the certificate chain, and I'm unable to debug it Two hosts, that are currently affected, where i've tested the issue repo.fortinet.com ...
0
votes
0answers
12 views

Lynx for Windows with OpenSSL and New Color style

I download lynx from invisible-island But the only version that supports OpenSSL (which works great) is the old color styled one which I am not used to and is wierd, as I am more used to the new 2006 ...
0
votes
0answers
10 views

What's a quick way to check if a TLS handshake is possible with twitter.com?

I need a performant way to test if I have my VPN enabled or not; To do this, I need to check if I can accomplish a TLS handshake with a blocked website such as twitter.com. I used to rely on ! ping -q ...
1
vote
1answer
43 views

How to get CA certificate bundle to single file using script?

I believe I can get a bundle certificate export doing the following manual steps: Run certmgr.msc Select all wanted certificates and go right-click and select all tasks -> export: then: then: ...
0
votes
1answer
179 views

OpenSSL using -passin or -passout when there is no password

I'm exporting a key from a pkcs12 pfx file using OpenSSL openssl pkcs12 -in my.pfx -nocerts -out my.key -passout pass: -passin pass: But it generates an error: Error outputting keys and certificates ...
0
votes
1answer
25 views

Unexpected behaviour with openssl dgst

I'm working with HMAC codes. I use two different methods and I obtain two different results :( Use command line: echo "text" > auxFile openssl dgst -hmac key auxFile Output: HMAC-SHA256(...
0
votes
1answer
148 views

MD5 Hex to Base64 String

When I generate an MD5 hash with a plain-text (password), I get: $echo -n "password" | openssl dgst -md5 -binary | openssl enc -base64 X03MO1qnZdYdgyfeuILPmQ== This works fine if I knew ...
0
votes
1answer
329 views

How should I generate a self signed SSL for an intranet server, following these specific requisites?

My knowledge about SSL is very basic and I need to generate self-signed SSL certificates for a local server [server.local] so I can use it in a mobile app for SSL pinning. How do I create a self-...
0
votes
1answer
51 views

OpenSSL 1.1.1f measure the speed of SHA3 series

In my Ubuntu OpenSSL 1.1.1f 31 Mar 2020 is installed. I can measure the SHA256 speed by $ openssl speed sha256 Help list the following as message digest commands Message Digest commands (see the `...
0
votes
0answers
4 views

no 0-RTT on nginx 1.19.6

I use a compiled version of nginx (standard, current mainline version 1.19.6) on Fedora 33. Everything works fine, i have Qualys A+ with all 100%. But I can't get 0-RTT to work. Everything is ...
0
votes
1answer
39 views

customize output of command “openssl dgst -hmac”

I want to compute the HMAC of file A.txt and put it into file A_hmac.txt. I use openss library, now I have: openssl dgst -hmac "myHmacKey" -out A_hmac.txt A.txt The output, inside A_hmac....
3
votes
1answer
45 views

I have a ppk key file open in Notepad, but I do not remember it's passphrase. Can I retrieve the passphrase?

Basically the heading, I created a private key file using PuTTY a few days back and forgot the passphrase. Luckily, the file is still open in Notepad. I can see it's contents, but I cannot open it in ...
1
vote
0answers
50 views

scripting openvpn client certificate creation without '-config' in windows console

Have set of windows batch scripts as an automatized environment. Trying to include openvpn client certificates generating into this environment. Got inspiration in EasyRSA 2.x which includes set of ...
0
votes
2answers
27 views

Can a X.509 Certificate be signed by two CAs with the same key?

I have set up a private CA to sign local certificates. In the CA certificate is a, let's say, typo that I want to fix in future versions of the CA but I want to keep the already issued certificates ...
0
votes
0answers
372 views

How to create certificate signed with RSAPSS using openssl command?

I tried https://gist.github.com/superseb/788a234647324b49ee5a56e07e3a91ac for commands, but getting following error in first command itself: sh-4.2$ openssl genpkey -algorithm rsa-pss -pkeyopt ...
0
votes
0answers
39 views

Signing HTTP Request with OpenSSL and RSA-SHA256

I'm trying to create a digital signature for a http request, based on this: https://rapidlink.piraeusbank.gr/node/1938 signature: The signing string, signed with the private QSeal key, and the result ...
0
votes
1answer
220 views

openssl command to verify the cipher of the ssl cert

Is it possible to use an openssl command in order to check the cipher of an SSL Certificate on a live website? For example to use something like: openssl s_client -connect example.com:443 -crlf The ...
0
votes
1answer
17 views

Setting up FTP over SSL for multiple domains

I'm in the process of setting up a FTP access over SSL on CentOS using VSFTPD and I'm having some issues. I'm using an Apache with several Virtual servers, one for each domain. Following some guides I'...
0
votes
1answer
36 views

Microsoft mystery MIB or Who has MSFT.MIB

Does anyone have the ASN.1 source for the Microsoft MIB? I'm not interested in network management but they use their enterprise number to define several object ID's that they include in CSR's ...
1
vote
1answer
190 views

How to use existing CA and Server key with EasyRsa?

i have an existing ca key and cert. how do i tell easyrsa to use that to generate server and client certs, instead of generating its own? All the docs seem to mention to do an init-pki to initialize a ...
0
votes
1answer
55 views

Is it possible to remove SAN from a certificate?

I've bought a certificate from an online provider. The CSR only contains a single SN (mysubdomain.example.com). The certificate issued, contains the SN i provided in my CSR, but for some reason the ...
0
votes
0answers
12 views

How to make .pem files corresponding to keys human readale?

I have some .pem files containing public and private keys for rsa and dh, generated with genpkey (NOT certificates). How do I make them human readable, as if they were generated with the -text option ...
0
votes
2answers
675 views

view all certs in a PEM cert file (full cert chain) with openssl or another command

often cert files (in PEM) format contain multiple certs like: -----BEGIN CERTIFICATE----- ... -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- ..... -----END CERTIFICATE----- with the command: ...
0
votes
0answers
23 views

apt-get does not recognize correct installation of openssl

I'm trying to instal mysql using the command: sudo apt-get install -y mssql-server I get an error, mssql-server: Depends openssl (>= 1.0.1g) but 1.0.1f-1ubuntu2.27 is to be installed I installed ...
0
votes
1answer
214 views

How to install an older version of LibreSSL or OpenSSL on Mac OSX

I have these files that I encrypted with the following command in Oct 2016 : tar cz folder_to_encrypt | openssl enc -aes-256-cbc -e > out.tar.gz.enc I am often late with updates so at the time I ...
1
vote
1answer
264 views

Pass the password to the openssl command that generates the keystore

have the following command that transform the certificate and private key from PEM to pkcs12 format and store them in a keystore openssl pkcs12 -export -chain -in mycert.pem -inkey mykey.pem -out ...
0
votes
0answers
286 views

Can I perform ECC encryption (like ECIES) with openssl?

I would like to use Elliptic Curve Cryptography to asymmetrically encrypt data. That is encrypt data using a public ECC key, so that only someone with the corresponding private key can decrypt it. I'm ...
0
votes
1answer
563 views

Putty Private/Public Key Pair - Generate Certificate

I have generated a private/public key pair using Putty. I have a private key file with extension .pem and public key file with extension .pub. Now I want to create a certificate from that and import ...
0
votes
1answer
784 views

OpenSSL installed with Homebrew on macOS 10.15.6 appears to be stuck at version @1.1, getting the latest instead?

I'm using macOS 10.15.6 Catalina and Homebrew (latest version, 2.5.1). When I do brew list I notice there is openssl@1.1 in my list of installed formulae. I can't recall if I ever installed openssl ...
0
votes
1answer
186 views

Calculate KDF (just like a hash digest) such as PBKDF2 on command line? using openssl or otherwise

OpenSSL can be used to calculate a hash of a file or given input from the shell, like this: echo -n "abc" | openssl dgst -sha256 or openssl dgst -sha256 myfile.txt Can I also calculate a KDF ...
0
votes
2answers
47 views

how can i install and use openssl on mac?

the task says: Use OpenSSL to calculate the following user names and passwords (4 pts): • Anaga:happy666 • Maria:12345678 • Joseph:q1w2e3r4 • Stephan:1234asdf i am not sure how to install and use ...
0
votes
2answers
39 views

Can I install redhat rpm on centos?

Can I install the Red Hat 6 version of the Openssl.rpm on the Centos6? I am trying to backup and install an old version that can no longer be found in current repository. I found the centos package ...
1
vote
1answer
30 views

When using openssl enc -camellia256, what block mode does it use?

When encrypting a file with openssl using the Camellia 256-bit cipher, you can explicitly specify the block mode (e.g. camellia-256-cfb or camellia-256-ofb etc). However if you only use the -...
0
votes
0answers
21 views

How can I change openssl version used by Apache Httpd?

I have done a vulnerability scan and I get 'OpenSSL Multiple Vulnerabilities' and the result is RESULTS: Vulnerable OpenSSL version detected on port 443 over TCP - Date: Tue, 15 Sep 2020 11:03:46 GMT ...
0
votes
0answers
52 views

How To: Create A .p12 / smime file

I am trying to deploy a certificate. I need to create a PKCS#12 file with smime encryption using openssl. I have deployed the CA certificate to Thunderbird already. Leaves two files left: www....
1
vote
1answer
28 views

How to use b2sum in keyed mode?

Considering using Blake2 (perhaps b2sum) in conjunction to openssl dgst -sha512 -hmac $key but I don’t see an option to enable keyed mode.
0
votes
0answers
7 views

What's the difference in PKCS- types?

If I run openssl pkcs12 -in xxx.pfx -out xxx.pfx.pem -nodes I thought it was just a PKCS12 file without security but after dealing with vSphere Integrate Containers and Apple's security utility I don'...
0
votes
1answer
241 views

How to export an EC private key from p12

I have a p12 store. I have read about export like this openssl pkcs12 -in path.p12 -out newfile.key.pem -nocerts -nodes but it doesn't export in EC format. How do I do I use openssl to export the ...
0
votes
1answer
46 views

Having existing pair of crt/private key how can I generate new private key and new CSR for renewing the SSL certificate?

I need to renew SSL certificate for the first time. I do not have original CSR, but I do have certificate.crt/private.key pair. The system told me I need to specify the same data in CSR to be accepted....
0
votes
2answers
2k views

Creating fullchain.pem and privkey.pem with Easyrsa and ODK Central

The docs of my Docker-based server getokd.org require: Generate appropriate fullchain.pem (-out) and privkey.pem (-keyout) files. Using easyrsa, I can generate the files for Entity sg ca.crt ca.key ...
3
votes
0answers
44 views

File/Dir/Tar encryption pipeline - what md/cipher/mode?

I'm piping the results of a tar operation into openssl. File size is typically less than 10GiB. I've been doing some reading and come up with what I think would be considered secure and fast enough in ...
1
vote
1answer
82 views

Access IMAP via OpenSSL

I'm having trouble with (Gmail) IMAP Access via OpenSSL (1.1.1g) I connect to the server using the following (see here): openssl s_client -crlf -connect imap.gmail.com:993 Login works fine with the ...

1
2 3 4 5
13