OpenSSL: The Open Source Toolkit for SSL and TLS

learn more… | top users | synonyms

0
votes
1answer
415 views

OpenSSL issue: requesting by IP - fails

I have ubuntu 8.04lts with apache2+svn+openSSL there. For last few months used locally only via local server name. Fine. Now tried to access from internet - getting SSL handshake error. If I'm ...
1
vote
2answers
387 views

Apache 2.2 Open SSL wildcard

I've installed multiple SSL's on our server and we've never add any problems. But for the first time I have to create a wildcard SSL and when I add it to the virtual hosts, apache crashes ( php doesn'...
1
vote
1answer
73 views

Establishing which version(s) of SSL a webserver supports

I run several web servers and would like to establish which of my web servers support different types of SSL. e.g TLS/SSL, SSL v2, SSLv3 etc. Does anyone know of a tool (whether web based or ...
2
votes
1answer
721 views

IIS FTP 7.5 Data Channel Problem (SSL)

Hey there I wonder if anyone can get me in the right direction. I am setting up both a FTPS Client and Server, FTPS Server using Microsoft’s iis FTP 7.5. On the client side it will be running on ...
1
vote
2answers
6k views

Globe SSL with NGINX SSL certificate problem, please help

I have a big problem with installing a certificat for nginx (same happends with apache though) I have 3 files __domain_com.crt __domain_com.ca-bundle and ssl.key. I tried to append cat __domain_com....
-1
votes
3answers
1k views

Adding HTTPS capability to WAMPSERVER 2 [closed]

I have WampServer 2 installed on my WinXP Pro SP3 box, Apache 2.2.11 with ssl module enabled, which runs the comnpanies intranet website. http://www.akadia.com/services/ssh_test_certificate.html ...
4
votes
2answers
2k views

OpenVPN OpenSSL entry 22: invalid expiry date

I attempted to generate some OpenVPN keys for a new employee the other day. Same procedure as normal. Nothing has changed in this area for months. During the certificate generation I get the ...
3
votes
5answers
8k views

Recover an SSH private key?

I have an RSA key (generated by PuTTYgen) that's set up for logging in to a bunch of machines via SSH. Or rather, i HAD such a key. (The computer it was on crashed, to the point that a reinstall of ...
0
votes
3answers
500 views

GMAIL SMTP with openssl : cursor just blinks after the <CRLF>.<CRLF> , not getting the 250 OK queued for delivery

I am trying to send mail from the command line using the openssl. I am able to connect to the smtp server of gmail on port 465 and also the authentication is successful . The MAIL FROM and rcpt to ...
15
votes
2answers
4k views

Can MS Certificate Services be a Subordinate to CA created with OpenSSL

I want to setup a enterprise certification authority for my domain. So I can issue certificates for various purposes. I would like to follow the best practice of having an offline CA as the root, ...
0
votes
1answer
247 views

Updating OpenSSL for Apache 1.3.41

I need to upgrade a Mac OS X Server (10.4.11) box's openssl to 0.9.8o and was wondering about the process. Will I need to rebuild Apache with the new version of OpenSSL or will I be able to just ...
-1
votes
3answers
1k views

how to secure MySQL server?

looking for a security to secure MySQL server. i am trying SSL using OpenSSL but I have no idea on how to do it for Windows without the shell command line. are they any more direct or easier security ...
4
votes
4answers
10k views

How to trust my own self-signed SSL cert?

I have a domain that I want to have webmail on, and I want it to be secure. I'm the only one who uses this site, yet I still want it to be secure. I can't afford, and I don't think it makes sense to ...
29
votes
3answers
45k views

stop apache from asking for SSL password each restart [duplicate]

Using instructions from this site but varying them just a little i created a CA using -newca, i copied cacert.pem to my comp and imported as trusted issuer in IE. I then did -newreq and -sign (note: i ...
12
votes
3answers
15k views

How to set up my own full-featured certificate authority?

I'd like to set up a certificate authority, which I can then import to all the company's browsers and systems to get rid of all those nasty client warnings when using HTTPS or SSL.
1
vote
1answer
1k views

How do I point PHP to OpenSSL directory within script?

I have a PHP script which needs to point to my server openssl directory but am lost. I know the directory resides at /usr/bin/openssl while my site pages rest at /var/www/vhosts/domain/httpdocs/test....
1
vote
1answer
2k views

Reconfiguring PHP with OpenSSL Extension on CentOS

Long time browser, first time poster! I have a CentOS Dedicated server running just fine. I'm trying to reconfigure PHP to include the OpenSSL extensions so I can use some of the Youtube API's. I ...
1
vote
1answer
152 views

Coldfusion: RMI Channel with SSL

For my Flex <--> ColdFusion-App, I want to switch to SSL. Within the ColdFusion Administrator, I have the following option: Lets you use Secure Socket Layer (SSL) encryption for the RMI ...
0
votes
2answers
171 views

Qmail says “PRNG not seeded” when sending mail to certain servers

We recently moved a web server running Fedora 2 and Plesk 8.2.1 to a virtual machine. Since then, qmail has been refusing to send messages to certain servers, complaining in the mail log that "...
0
votes
1answer
7k views

How to install cURL with openssl on ubuntu server?

I am having a problem with cURL here. My localhost has curl with openssl enabled, and thus my php code works fine. On running phpinfo() I get the following -- curl cURL support enabled ...
0
votes
2answers
542 views

Which Apache/OpenSSL version required for EV SAN SSL certificate?

Which version of Apache and OpenSSL (mod_ssl?) is required to use a EV SAN SSL certificate? As far as I have been able to find out Apache version 2.2.15+ should be fine, but what about OpenSSL? Can ...
0
votes
3answers
887 views

SSH ./config or ./Configure gives error

I am trying to install some packes on my machine running CentOS 5.5 but when i run ./config or ./Configure, I am returned: -bash: ./config: /bin/sh: bad interpreter: Permission denied -bash: ....
1
vote
1answer
430 views

How to compile zip/tar file using SSH

I am trying to run through the following instructions: install ssh when I get to the line "make" in the installation for zlib (first box), the following error is returned: make: * No targets ...
2
votes
2answers
7k views

How to update OpenSSL using Putty and yum command

I am so new to updating server technologies it is unbelievable but we are trying to become PCI Compliant and have to update some of our server technologies. One in particular is OpenSSL. We are ...
3
votes
1answer
4k views

Gmail POP3 with openssl command line: hangs while RETR-ing

I want to use openssl s_client for accessing Gmail POP3S server. I am doing the following: $ openssl s_client -connect pop.gmail.com:995 +OK Gpop ready for requests from <removed: ip> ...
1
vote
2answers
732 views

Connecting to Exchange Server 2003 over POP using openssl s_client

I'm trying to fetch emails programmatically from Exchange 2003 over POP. As a proof of concept I'm trying to connect using openssl s_client. I've started the POP service on my Exchange server. ...
104
votes
5answers
135k views

how to download the ssl certificate from a website?

I want to download the ssl certificate from, say https://www.google.com, using wget or any other commands. Any unix command line? wget or openssl?
2
votes
1answer
3k views

Configuring OpenLDAP and SSL

I am having trouble trying to connect to a secure OpenLDAP server which I have set up. On running my LDAP client code java -Djavax.net.debug=ssl LDAPConnector I get the following exception trace (...
5
votes
3answers
7k views

SSL setup: UCC or wildcard certificates?

I've scoured the web for a clear and concise answer to my SSL question, but to no avail. So here goes: I have a web-service requiring SSL support for authentication pages. The root-level domain ...
1
vote
1answer
6k views

Watchguard SSL Certificate problems

We recently purchased a Watchguard XTM 510. The hope is to replace our ISA 2006 proxy with this UTM product. We are having some issues with secured sites in our test setup. Currently We are still ...
13
votes
0answers
7k views

OpenSSL: how to setup an OCSP server for checking third-party certificates?

I am testing the Certificate Revocation functionality of a CMTS device. This requires me to setup a OCSP responder. Since it will only be used for testing I assume that the minimal implementation ...
0
votes
1answer
1k views

Redhat | Openssl installation error

make -f objs/Makefile make[1]: Entering directory `/root/fuse-ssh/nginx-0.7.65' cd /usr/bin/openssl \ && make clean \ && ./config --prefix=/usr/bin/openssl/.openssl no-...
0
votes
1answer
599 views

SSL certificates work fine from command line but fails in script

I'm trying to setup email notifications for my continuous integration server. I have a script which uses nail to send the email when the build works: #!/bin/bash echo "Build Worked!" | nail -A myisp ...
4
votes
3answers
9k views

OpenSSL 0.9.8k or higher on CentOS 5?

I need to upgrade OpenSSL on my CentOS server to 0.9.8k or higher, however the latest version in the official CentOS repositories is 0.9.8e, much too old. Is there a 3rd party repository I can use ...
1
vote
1answer
5k views

verifying a file signature with openssl dgst

I am trying to verify a signature for a file: openssl dgst -verify cert.pem -signature file.sha1 file.data all it says is "unable to load key file" The certificate says: openssl verify cert.pem ...
2
votes
1answer
4k views

OpenSSL support for Ruby: “Cipher is not a module (TypeError)”

The Problem Our systems admin needed to upgrade the packages on our CentOS 5.4 dev server to match the packages on our production server. The upgrade affected ruby and/or openssl. We run a Ruby on ...
4
votes
6answers
6k views

OpenSSL x509 Purpose flag “Any Purpose” What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various ...
1
vote
2answers
565 views

SSL for PHP on Windows Server 2003

I have Windows Server 2003 R2 with Apache 2.2.4 and PHP 5.2.6. I want to access pages over https (SSL). And i get this error (Zend Framework GData): Unable to find the socket transport "ssl" - ...
0
votes
1answer
108 views

OpenSSL 1.0.0 Beta 4 for win32?

Are there binaries available for this? I can't find any, only messages on newsgroups that it doesn't compile on win32 from back in November 2009. (I can't even find binaries for 0.9.8l, only 0.9.8k, ...
13
votes
4answers
24k views

Connecting to HTTPS with netcat (nc) [closed]

I'm working on homework assignment for my college. Task is to fetch web page on HTTPS using nc (netcat). To fetch a page over HTTP, I do this: cat request.txt | nc -w 5 <someserver> 80 In ...
1
vote
2answers
2k views

Unable to verify SSL certificate issuer for LDAP server

I have just setup SSL on my LDAP server by following this guide - http://www.linux.com/archive/feature/114087 I have made a self signed certificate using openSSL and set it up. When something tries ...
3
votes
2answers
4k views

How to properly verify SSL cert? (Having a problem)

I completed the following steps to generate my SSL cert request: openssl genrsa -out key 2048 openssl req -new -key key -out csr Then I submitted my csr to my signing authority, and got my cert ...
1
vote
2answers
2k views

Compiling Apache mod_ssl for different target hardware (hardware capability unsupported SSE2 error)

I am building and packaging the following on one machine (the "build" machine) and attempting to install and use on other machines ("target" machines) some of which have different processors. ...
1
vote
1answer
257 views

Is it possible to run Mercurial without ssl installed?

I have a Solaris 5.8 machine without OpenSSL. This platform is a real pain to get OpenSSL compiled for, and getting Mordac, our unix admin, to install the Solaris package isn't an option. I'd like ...
7
votes
5answers
67k views

convert .p7b key to a .pfx

I have an SSL certificate in .p7b format that I need to convert to .pfx. If I try this through the windows certificate managment the option to expert as a .pfx is disabled. Trying with openssl I ...
3
votes
2answers
3k views

Can I be an intermediate certificate authority?

My company has grown to the point where we're interested in being an intermediate CA for our customers, and would like to issue certificates to customers. Among other uses, we wish to issue SSL ...
1
vote
1answer
1k views

Connecting to PostgreSQL with SSL using OpenSSL s_client

I am trying to connect to my PostgreSQL server on AWS using SSL from the OpenSSL s_client on XP. I can connect to a third party using this s_client. On both the server and XP, I am using openssl ...
0
votes
1answer
711 views

How do I create a SSL cert so my apache server can connect to my LDAP/AD server?

This is related to the question I asked last week. The issue is that suddenly, my apache server was unable to connect to my LDAP (Active Directory) server for sites that require authentication. ...
0
votes
3answers
5k views

OpenSSL: certificate signature failure error

I'm trying to wget La Banque Postale's website. $ wget https://www.labanquepostale.fr/ --2009-10-08 17:25:03-- https://www.labanquepostale.fr/ Resolving www.labanquepostale.fr... 81.252.54.6 ...
3
votes
3answers
8k views

Upgrading OpenSSL in CentOS 5.3

I want to use one IP to host many domains with individual SSL certificates (requires SNI). In CentOS 5.3, the latest version of OpenSSL I can find an RPM for is 0.9.8e, which does not support SNI. I ...