Tag Info

Hot answers tagged

3

I believe your private key was modified, as i was able to duplicate the same error message by changing a single character in a sample pass phrase protected key i just created. You can reproduce this as follows - Create pass phrase protected private key Decrypt the private key to make sure it works. Change a single character inside the file containing the ...


2

yeah, i dont expect it to be same, just that why there is error in the second one, and how to fix it is the problem, i think my generation or assign to dovecot/posfix is wrong, becasue i dont knw how to use the CA into this installation, how do i use CA crts ? in postfix/dovecot ? To use chain ssl certificate in postfix, you can refer to this docs. ...


2

Most setups include the domain in the username. (At least most of mine.) Try: echo -ne '\0username@domain.com\0password!'|base64 You could also try the PERL approach: perl -MMIME::Base64 -e 'print encode_base64("\000user\@domain.com\000password")'


1

I figured it out. It was Apache-Tomcat connector: AJP 1.3 After I added packetSize it worked. <Connector port="8009" protocol="AJP/1.3" redirectPort="8443" packetSize="65536" />


1

The common name or CN is the domain name, which you enter into the URL-bar of your browser. It's the name, you use to refer to the server/website/service and the browser or any other client will compare these two values for verification. In your example, it will be myserver.ddns.net. If you wish to use owncloud-setup via the IP (which is not the case here), ...


1

Not sure what information exactly you are talking about. The Subject? You can get that from a browser or with openssl you can get it like so: openssl x509 -in localhost.crt -text -noout


1

You can check this page https://launchpad.net/ubuntu/trusty/+source/openssl It will show you the exact security updates that have been backported, even though the overall version date appears old. If you have installed the latest openssl via apt-get upgrade, you are current (on security updates) as of 2015-03-19, which happens to be 2 days after the ...


1

The awk snippet works for extracting the different parts, but you still need to know which section is the key / cert / chain. I needed to extract a specific section, and found this on the OpenSSL mailinglist: http://openssl.6102.n7.nabble.com/Convert-pem-to-crt-and-key-files-tp47681p47697.html # Extract key openssl pkey -in foo.pem -out foo-key.pem # ...


1

No update is needed to prevent the vulnerability.. Just refusing connections through SSLv3 is a quick fix. Put the following lines in your configuration file, or replace any existing line starting with ssl_protocols: ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_prefer_server_ciphers on; ssl_ciphers 'AES128+EECDH:AES128+EDH'; Then run: $ sudo service nginx ...


1

Do you also have SSL 2.0 enabled? According to http://support.microsoft.com/en-us/kb/2851628 "SSL 2.0 and TLS 1.2 are not compatible with each other in Windows 7 and later operating systems. To use client-side certificates to establish an HTTPS connection over TLS 1.2, you must disable SSL 2.0".


1

HaProxy dynamically links in the openssl libraries. You can find this by running # ldd `which haproxy` | grep ssl libssl.so.10 => /usr/lib64/libssl.so.10 (0x0000003ea3c00000) So when you upgrade openssl you just need to restart haproxy.


1

I have an outdated (1.8.X) installation of Git for Windows1 so this might be not up to date, but from what I see in my installation, ssh.exe (which is a build of OpenSSH) depends on msys-crypto-X.Y.Z.dll while openssl.exe depends on that library and msys-ssl-X.Y.Z.dll with these X.Y.Z parts matching ("0.9.8" in my case). These libraries are located in the ...



Only top voted, non community-wiki answers of a minimum length are eligible