OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
2answers
534 views

Which Apache/OpenSSL version required for EV SAN SSL certificate?

Which version of Apache and OpenSSL (mod_ssl?) is required to use a EV SAN SSL certificate? As far as I have been able to find out Apache version 2.2.15+ should be fine, but what about OpenSSL? Can ...
0
votes
3answers
825 views

SSH ./config or ./Configure gives error

I am trying to install some packes on my machine running CentOS 5.5 but when i run ./config or ./Configure, I am returned: -bash: ./config: /bin/sh: bad interpreter: Permission denied -bash: ...
1
vote
1answer
430 views

How to compile zip/tar file using SSH

I am trying to run through the following instructions: install ssh when I get to the line "make" in the installation for zlib (first box), the following error is returned: make: * No targets ...
2
votes
2answers
6k views

How to update OpenSSL using Putty and yum command

I am so new to updating server technologies it is unbelievable but we are trying to become PCI Compliant and have to update some of our server technologies. One in particular is OpenSSL. We are ...
2
votes
1answer
3k views

Gmail POP3 with openssl command line: hangs while RETR-ing

I want to use openssl s_client for accessing Gmail POP3S server. I am doing the following: $ openssl s_client -connect pop.gmail.com:995 +OK Gpop ready for requests from <removed: ip> ...
1
vote
2answers
713 views

Connecting to Exchange Server 2003 over POP using openssl s_client

I'm trying to fetch emails programmatically from Exchange 2003 over POP. As a proof of concept I'm trying to connect using openssl s_client. I've started the POP service on my Exchange server. ...
96
votes
5answers
115k views

how to download the ssl certificate from a website?

I want to download the ssl certificate from, say https://www.google.com, using wget or any other commands. Any unix command line? wget or openssl?
2
votes
1answer
3k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
5
votes
3answers
6k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
1
vote
1answer
6k views

Watchguard SSL Certificate problems

We recently purchased a Watchguard XTM 510. The hope is to replace our ISA 2006 proxy with this UTM product. We are having some issues with secured sites in our test setup. Currently We are still ...
6
votes
0answers
6k views

OpenSSL: how to setup an OCSP server for checking third-party certificates?

I am testing the Certificate Revocation functionality of a CMTS device. This requires me to setup a OCSP responder. Since it will only be used for testing I assume that the minimal implementation ...
0
votes
1answer
1k views

Redhat | Openssl installation error

make -f objs/Makefile make[1]: Entering directory `/root/fuse-ssh/nginx-0.7.65' cd /usr/bin/openssl \ && make clean \ && ./config --prefix=/usr/bin/openssl/.openssl ...
0
votes
1answer
588 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
3
votes
3answers
8k views

OpenSSL 0.9.8k or higher on CentOS 5?

I need to upgrade OpenSSL on my CentOS server to 0.9.8k or higher, however the latest version in the official CentOS repositories is 0.9.8e, much too old. Is there a 3rd party repository I can use ...
1
vote
1answer
5k views

verifying a file signature with openssl dgst

I am trying to verify a signature for a file: openssl dgst -verify cert.pem -signature file.sha1 file.data all it says is "unable to load key file" The certificate says: openssl verify cert.pem ...
2
votes
1answer
4k views

OpenSSL support for Ruby: “Cipher is not a module (TypeError)”

The Problem Our systems admin needed to upgrade the packages on our CentOS 5.4 dev server to match the packages on our production server. The upgrade affected ruby and/or openssl. We run a Ruby on ...
4
votes
6answers
5k views

OpenSSL x509 Purpose flag “Any Purpose” What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various ...
1
vote
2answers
533 views

SSL for PHP on Windows Server 2003

I have Windows Server 2003 R2 with Apache 2.2.4 and PHP 5.2.6. I want to access pages over https (SSL). And i get this error (Zend Framework GData): Unable to find the socket transport "ssl" - ...
0
votes
1answer
108 views

OpenSSL 1.0.0 Beta 4 for win32?

Are there binaries available for this? I can't find any, only messages on newsgroups that it doesn't compile on win32 from back in November 2009. (I can't even find binaries for 0.9.8l, only 0.9.8k, ...
12
votes
4answers
20k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
1
vote
2answers
2k views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...
3
votes
2answers
4k views

How to properly verify SSL cert? (Having a problem)

I completed the following steps to generate my SSL cert request: openssl genrsa -out key 2048 openssl req -new -key key -out csr Then I submitted my csr to my signing authority, and got my cert ...
1
vote
2answers
1k views

Compiling Apache mod_ssl for different target hardware (hardware capability unsupported SSE2 error)

I am building and packaging the following on one machine (the "build" machine) and attempting to install and use on other machines ("target" machines) some of which have different processors. ...
1
vote
1answer
253 views

Is it possible to run Mercurial without ssl installed?

I have a Solaris 5.8 machine without OpenSSL. This platform is a real pain to get OpenSSL compiled for, and getting Mordac, our unix admin, to install the Solaris package isn't an option. I'd like ...
5
votes
5answers
60k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
2answers
3k views

Can I be an intermediate certificate authority?

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL ...
1
vote
1answer
1k views

Connecting to PostgreSQL with SSL using OpenSSL s_client

I am trying to connect to my PostgreSQL server on AWS using SSL from the OpenSSL s_client on XP. I can connect to a third party using this s_client. On both the server and XP, I am using openssl ...
0
votes
1answer
701 views

How do I create a SSL cert so my apache server can connect to my LDAP/AD server?

This is related to the question I asked last week. The issue is that suddenly, my apache server was unable to connect to my LDAP (Active Directory) server for sites that require authentication. ...
0
votes
3answers
5k views

OpenSSL: certificate signature failure error

I'm trying to wget La Banque Postale's website. $ wget https://www.labanquepostale.fr/ --2009-10-08 17:25:03-- https://www.labanquepostale.fr/ Resolving www.labanquepostale.fr... 81.252.54.6 ...
3
votes
3answers
8k views

Upgrading OpenSSL in CentOS 5.3

I want to use one IP to host many domains with individual SSL certificates (requires SNI). In CentOS 5.3, the latest version of OpenSSL I can find an RPM for is 0.9.8e, which does not support SNI. I ...
2
votes
2answers
3k views

OpenLDAP SSL error

I did setup an OpenLDAP server with PAM authentication against it. In clear text, it works very well but when I try to add SSL it always faill. I'm following that guide to get it working : ...
0
votes
2answers
7k views

ssl_error_bad_mac_alert error in Firefox

I've installed an SSL cert onto an Apache2 server which serves intranet content. Internet Explorer 6/7 and Safari 4 can connect to the site just fine. However, when I attempt to access the site with ...
0
votes
1answer
2k views

Resolving “ssl handshake failure” error in PostgresQL

I would like to connect to my Postgres 8.3 database using SSL from my XP client using OpenSSL. This works fine without SSL. When I try it with SSL (no client certificate), I get the error: ...
0
votes
2answers
569 views

What do CAs (Certificate Authority) deliver from CSR?

I need an SSL certificate for an HTTPS server. I'd like to offer the choice between self-signed and CA-signed certificates. I can generate a self-signed SSL certificate with the following OpenSSL ...
0
votes
2answers
573 views

Apache will not start using mod_ssl.so

Using centos 4.4/apache 2.2.13 with openssl 0.9.8k Built from source. Getting message below, on startup. Everything seems to build fine mod_ssl.so: undefined sysmbol: SSL_CTX_set_info_callback
0
votes
3answers
2k views

RHEL/Apache ssl.conf configuration issue

We've got multiple subdomains, each with it's own virtualhost entry in httpd.conf and (for those supporting https) in ssl.conf as well. Our main www subdomain has a GoDaddy cert associated with it. ...
2
votes
1answer
1k views

How to install a replacement SSL certificate on a Mac OS X server?

We have a Mac OS X server with an expiring certificate. We have renewed the certificate with the CA, generated a new CSR (using openssl on the command line) and have imported the new certificate ...
1
vote
3answers
418 views

Upgrading individual libraries within LAMPP (specifically, openssl)

(originally posted on stackoverflow -- someone suggested I drop the question over here) Does anyone have any experience in upgrading individual chunks of the XAMPP LAMP stack without installing an ...
2
votes
4answers
11k views

ssl_error_handshake_failure_alert with Commercial CA-based client certificate

Attempting to implement client authentication with an SSL cert. http://www.modssl.org/docs/2.8/ssl_howto.html#auth-selective Receive the following errors. Apache: Re-negotiation handshake failed: ...
10
votes
5answers
2k views

Can I use the same wildcard certification for *.domain.com and domain.com

You can make an SSL certificate by using *.domain.com as the name. But unfortunately, this doesn't cover https://domain.com Is there any fix for this?
9
votes
3answers
7k views

Generate self signed SSL certificate for apache

I want to create self signed certificate for the website. The old certificate expired few days ago. There are more than one NameVirtualHosts hosted on systems. The commands I am using to create ...