OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
2answers
669 views

How do I create certificates for both ends of an stunnel connection?

I am using stunnel to authenticate RDP (Remote Desktop) and I need to verify that a client possesses the proper credentials. So people cannot brute force into the machine. I am also using a bad ...
1
vote
1answer
197 views

What do I need for SSL?

just a quick question, I'm kind of confused. I've had set-up my own certification authority and I can create requests and signed them. But, I'm not sure, what I need to give to Apache, currently I've ...
0
votes
2answers
2k views

Installing Plone on Centos fails: Unable to find libssl or openssl/ssl.h

My dedicated Server has CentOS 5.5. I tried to install Plone, so I basically did: wget launchpad.net/plone/4.0/4.0.2/+download/Plone-4.0.2-UnifiedInstaller.tgz tar xzf ...
2
votes
2answers
968 views

Generating a CSR to a specific cipher suite

I am having to generate a CSR for a private RPC interface that is secured using certificates. As part of the requirements, it is specified that the only compatiable suite is: ...
0
votes
1answer
1k views

How do I replicate a sha256 hash with salt using OpenSSL command line?

Using PHP's crypt function as follows, I can do a sha256 hash with salt and multiple rounds. php -r "echo crypt('foo','\$5\$rounds=5000\$saltsaltsaltsalt');" produces: ...
1
vote
1answer
321 views

Can't get self-signed SSL certificate to work

I am getting a "Unable to connect" error message when I try to load the https version of a website in Firefox. There is no error message in the log file, only: [Thu Dec 09 16:55:24 2010] [warn] ...
1
vote
1answer
101 views

What's the most compact way to store a password-protected RSA key?

I've tried converting a PEM-encoded key to DER format, and it appears the password is stripped regardless of the -passout argument. Example: openssl rsa -in tmp.pem -outform DER -out tmp.der -passin ...
0
votes
4answers
2k views

Installing OpenSSL (or Node.JS) on RHEL 5

I have to install Node.JS on a customer’s server which runs RedHat Enterprise Linux 5 (5.3, afaik). I’m an experienced Debian and Gentoo admin, but have not worked with RedHat systems for about 10 ...
0
votes
1answer
367 views

Generating OpenVPN static keys in memory?

I know I can generate an OpenVPN static key by 'openvpn --genkey --secret myfile.key'. In python, I am currently using a shell call to generate a key, open the 'myfile.key' and read it back in. It ...
0
votes
1answer
409 views

OpenSSL issue: requesting by IP - fails

I have ubuntu 8.04lts with apache2+svn+openSSL there. For last few months used locally only via local server name. Fine. Now tried to access from internet - getting SSL handshake error. If I'm ...
1
vote
2answers
385 views

Apache 2.2 Open SSL wildcard

I've installed multiple SSL's on our server and we've never add any problems. But for the first time I have to create a wildcard SSL and when I add it to the virtual hosts, apache crashes ( php ...
1
vote
1answer
70 views

Establishing which version(s) of SSL a webserver supports

I run several web servers and would like to establish which of my web servers support different types of SSL. e.g TLS/SSL, SSL v2, SSLv3 etc. Does anyone know of a tool (whether web based or ...
2
votes
1answer
718 views

IIS FTP 7.5 Data Channel Problem (SSL)

Hey there I wonder if anyone can get me in the right direction. I am setting up both a FTPS Client and Server, FTPS Server using Microsoft’s iis FTP 7.5. On the client side it will be running on ...
1
vote
2answers
6k views

Globe SSL with NGINX SSL certificate problem, please help

I have a big problem with installing a certificat for nginx (same happends with apache though) I have 3 files __domain_com.crt __domain_com.ca-bundle and ssl.key. I tried to append cat ...
-1
votes
3answers
1k views

Adding HTTPS capability to WAMPSERVER 2 [closed]

I have WampServer 2 installed on my WinXP Pro SP3 box, Apache 2.2.11 with ssl module enabled, which runs the comnpanies intranet website. http://www.akadia.com/services/ssh_test_certificate.html ...
4
votes
2answers
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
3
votes
5answers
8k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
0
votes
3answers
497 views

GMAIL SMTP with openssl : cursor just blinks after the <CRLF>.<CRLF> , not getting the 250 OK queued for delivery

I am trying to send mail from the command line using the openssl. I am able to connect to the smtp server of gmail on port 465 and also the authentication is successful . The MAIL FROM and rcpt to ...
15
votes
2answers
4k views

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, ...
0
votes
1answer
245 views

Updating OpenSSL for Apache 1.3.41

I need to upgrade a Mac OS X Server (10.4.11) box's openssl to 0.9.8o and was wondering about the process. Will I need to rebuild Apache with the new version of OpenSSL or will I be able to just ...
-1
votes
3answers
1k views

how to secure MySQL server?

looking for a security to secure MySQL server. i am trying SSL using OpenSSL but I have no idea on how to do it for Windows without the shell command line. are they any more direct or easier security ...
4
votes
4answers
9k views

How to trust my own self-signed SSL cert?

I have a domain that I want to have webmail on, and I want it to be secure. I'm the only one who uses this site, yet I still want it to be secure. I can't afford, and I don't think it makes sense to ...
28
votes
3answers
40k views

stop apache from asking for SSL password each restart [duplicate]

Using instructions from this site but varying them just a little i created a CA using -newca, i copied cacert.pem to my comp and imported as trusted issuer in IE. I then did -newreq and -sign (note: i ...
12
votes
3answers
14k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
1
vote
1answer
1k views

How do I point PHP to OpenSSL directory within script?

I have a PHP script which needs to point to my server openssl directory but am lost. I know the directory resides at /usr/bin/openssl while my site pages rest at ...
1
vote
1answer
1k views

Reconfiguring PHP with OpenSSL Extension on CentOS

Long time browser, first time poster! I have a CentOS Dedicated server running just fine. I'm trying to reconfigure PHP to include the OpenSSL extensions so I can use some of the Youtube API's. I ...
1
vote
1answer
152 views

Coldfusion: RMI Channel with SSL

For my Flex <--> ColdFusion-App, I want to switch to SSL. Within the ColdFusion Administrator, I have the following option: Lets you use Secure Socket Layer (SSL) encryption for the RMI ...
0
votes
2answers
169 views

Qmail says “PRNG not seeded” when sending mail to certain servers

We recently moved a web server running Fedora 2 and Plesk 8.2.1 to a virtual machine. Since then, qmail has been refusing to send messages to certain servers, complaining in the mail log that ...
0
votes
1answer
7k views

How to install cURL with openssl on ubuntu server?

I am having a problem with cURL here. My localhost has curl with openssl enabled, and thus my php code works fine. On running phpinfo() I get the following -- curl cURL support enabled ...
0
votes
2answers
541 views

Which Apache/OpenSSL version required for EV SAN SSL certificate?

Which version of Apache and OpenSSL (mod_ssl?) is required to use a EV SAN SSL certificate? As far as I have been able to find out Apache version 2.2.15+ should be fine, but what about OpenSSL? Can ...
0
votes
3answers
863 views

SSH ./config or ./Configure gives error

I am trying to install some packes on my machine running CentOS 5.5 but when i run ./config or ./Configure, I am returned: -bash: ./config: /bin/sh: bad interpreter: Permission denied -bash: ...
1
vote
1answer
430 views

How to compile zip/tar file using SSH

I am trying to run through the following instructions: install ssh when I get to the line "make" in the installation for zlib (first box), the following error is returned: make: * No targets ...
2
votes
2answers
6k views

How to update OpenSSL using Putty and yum command

I am so new to updating server technologies it is unbelievable but we are trying to become PCI Compliant and have to update some of our server technologies. One in particular is OpenSSL. We are ...
3
votes
1answer
4k views

Gmail POP3 with openssl command line: hangs while RETR-ing

I want to use openssl s_client for accessing Gmail POP3S server. I am doing the following: $ openssl s_client -connect pop.gmail.com:995 +OK Gpop ready for requests from <removed: ip> ...
1
vote
2answers
719 views

Connecting to Exchange Server 2003 over POP using openssl s_client

I'm trying to fetch emails programmatically from Exchange 2003 over POP. As a proof of concept I'm trying to connect using openssl s_client. I've started the POP service on my Exchange server. ...
101
votes
5answers
125k views

how to download the ssl certificate from a website?

I want to download the ssl certificate from, say https://www.google.com, using wget or any other commands. Any unix command line? wget or openssl?
2
votes
1answer
3k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace ...
5
votes
3answers
6k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
1
vote
1answer
6k views

Watchguard SSL Certificate problems

We recently purchased a Watchguard XTM 510. The hope is to replace our ISA 2006 proxy with this UTM product. We are having some issues with secured sites in our test setup. Currently We are still ...
9
votes
0answers
6k views

OpenSSL: how to setup an OCSP server for checking third-party certificates?

I am testing the Certificate Revocation functionality of a CMTS device. This requires me to setup a OCSP responder. Since it will only be used for testing I assume that the minimal implementation ...
0
votes
1answer
1k views

Redhat | Openssl installation error

make -f objs/Makefile make[1]: Entering directory `/root/fuse-ssh/nginx-0.7.65' cd /usr/bin/openssl \ && make clean \ && ./config --prefix=/usr/bin/openssl/.openssl ...
0
votes
1answer
594 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
3
votes
3answers
8k views

OpenSSL 0.9.8k or higher on CentOS 5?

I need to upgrade OpenSSL on my CentOS server to 0.9.8k or higher, however the latest version in the official CentOS repositories is 0.9.8e, much too old. Is there a 3rd party repository I can use ...
1
vote
1answer
5k views

verifying a file signature with openssl dgst

I am trying to verify a signature for a file: openssl dgst -verify cert.pem -signature file.sha1 file.data all it says is "unable to load key file" The certificate says: openssl verify cert.pem ...
2
votes
1answer
4k views

OpenSSL support for Ruby: “Cipher is not a module (TypeError)”

The Problem Our systems admin needed to upgrade the packages on our CentOS 5.4 dev server to match the packages on our production server. The upgrade affected ruby and/or openssl. We run a Ruby on ...
4
votes
6answers
5k views

OpenSSL x509 Purpose flag “Any Purpose” What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various ...
1
vote
2answers
548 views

SSL for PHP on Windows Server 2003

I have Windows Server 2003 R2 with Apache 2.2.4 and PHP 5.2.6. I want to access pages over https (SSL). And i get this error (Zend Framework GData): Unable to find the socket transport "ssl" - ...
0
votes
1answer
108 views

OpenSSL 1.0.0 Beta 4 for win32?

Are there binaries available for this? I can't find any, only messages on newsgroups that it doesn't compile on win32 from back in November 2009. (I can't even find binaries for 0.9.8l, only 0.9.8k, ...
12
votes
4answers
22k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
1
vote
2answers
2k views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...