Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

0
votes
1answer
12 views

Cannot recover backup made with `openssl smime`

My (only) database server went down and I am in the process of recovering everything. I created a new server and now I just want to restore the database backup. I have a nightly script that runs this ...
0
votes
2answers
35 views

Openssl error during rpm installation in redhat-7.6

Unable to resolve the error while I am trying to install kong rpm from repository. Error: Package: 1:openssl-1.0.2k-16.el7.x86_64 (rhel-7-server-rpms) Requires: openssl-libs(x86-64) = 1:1....
0
votes
0answers
10 views

Error Secure with ssl apache server

Can someone help me i tired several ways to secure my apache server with ssl but it seems that it doesnt work . I can't generate the crt and src and key files to move them and finish the installation ...
1
vote
1answer
13 views

openssl crypt/decrypt from ubuntu 16.04 to Centos 7.3 OK, but not from ubuntu 18.04 to Centos 7.3

I am encrypting a file to transfert it from an ubuntu 16.04 or 18.04 host to a Centos 7.3 host. I encrypt like that : openssl des3 -e -kfile MY_SYMETRIC_KEY_FILE -in FILE_TO_BE_CRYPTED -out ...
0
votes
1answer
27 views

openssl: Allow usage of insecure client certs

I have an application which has been distributed looooong ago. That application offers https interface to clients with client certificate authentication. By the time the application was released, ...
1
vote
0answers
123 views

Is there a way to create a PEM file using PowerShell and only PowerShell?

I'm looking for a way to create an AES-128 key in PEM format (Base64 encoded text file) using PowerShell. All the examples I can find assume the user has OpenSSL installed. The equivalent OpenSSL ...
0
votes
0answers
23 views

How can I balance http request in https for every website in Haproxy?

For example, in this config file, just first HTTP connect request is balanced by Haproxy. Is self-signed certificate work with this case? I don't know how to generate one self-signed certificate for ...
1
vote
1answer
29 views

Enabling only TLS1.2 on Ubuntu 16.04 w/ Apache 2.4

I am trying to enable ONLY TLS 1.2 on Ubuntu 16.04 with Apache 2.4. I have read other similar questions, but the implementations in them do not work here. Currently TLS 1, 1.1, and 1.2 are enabled. ...
-1
votes
0answers
34 views

Postfix - Untrusted TLS connection smtp_tls_CApath stops postfix@-.service

i have a problem at ubuntu 18.04 i have two machines with postfix. At the first i can use both lines: smtp_tls_CApath = /etc/ssl/certs smtpd_tls_CApath = /etc/ssl/certs and everthing looks fine ...
0
votes
0answers
13 views

Https request taking 60 seconds or more before my api method starts executing (using nginx, openssl in Windows)

I setup https for my api using nginx and openssl in Windows. Since I moved from http to https periodically some post requests would take up to 60 seconds before my api code started executing the ...
0
votes
1answer
34 views

SSL Certification with nginx and tomcat

I have an nginx server, which can forward request from subdomains of ropi.io. I want to secure the connection with SSL, so I generated a certificate, called ropi.pem and added it as both the ...
0
votes
0answers
48 views

SSL routines:ssl3_read_bytes:tlsv1 alert decrypt error on mutual authendication

I have configured JBOSS 5 with SSLVerifyClient="require" Client contains, server CA certs and there own certs(JDK 1.8). Server contains, client CA certs and there own certs(JDK 1.6). For ...
0
votes
0answers
55 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
1
vote
1answer
52 views

Openssl: generated cer and key from pfx don't match

I'm trying to convert a pfx to cer and key format to use them with Nginx. I'm using the following commands: openssl pkcs12 -in input.pfx -out mycerts.cer -nokeys -clcerts and openssl pkcs12 -in ...
1
vote
1answer
55 views

OpenSSL/HAProxy verify client certificates using a non-CA certificate

I am facing a problem while configuring a HAProxy instance (v1.8.13) with compiled OpenSSL support to only accept client certificates which have been signed by a non-CA certificate. In particular, I ...
0
votes
0answers
15 views

Digital signing certificate for SOAP

I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
0
votes
0answers
16 views

Unable to return certificate information once loaded from file - OpenSSL

I have wrapped OpenSSL so it can be used within an application I am writing to create and manage certificates. I am able to load a certificate (and private key) from file and store it in a class ...
0
votes
0answers
26 views

Tomcat Configuration with openssl Failed

I am trying to configure Tomcat with openssl (ssl ). I have generated Keystore by name serverde**.jks My config With server.xml Is: <Connector port="8443" protocol="HTTP/1.1" ...
0
votes
0answers
16 views

Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again

Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this: apt-get install certbot python-certbot-...
1
vote
0answers
27 views

AES-256-CBC with Sha512 and Encrypt-then-MAC Questions

I have to encrypt and decrypt csv-files with the following specifications: Cipher: AES-256-CBC MAC: SHA-512 Method: Encrypt-then-MAC I am working on an Ubuntu Bionic and I have root acceess. 1.) ...
0
votes
0answers
252 views

OpenVPN: Some users are having “TLS Error: TLS key negotiation failed to occur within 60 seconds”

I have an OpenVPN server (setup using Pritunl with its default settings), everything's working fine for all users except for some of them (could reproduce it with only one client) not being able to ...
1
vote
1answer
82 views

Openssl 1.0.2q - error at finished message: error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:

Connecting to a VIP/loadbalancer w/Tomcat behind it. (tcpdump appears clean so far..no RSTs) Using openssl version 1.2.q $openssl s_client -connect "blah:443" -msg CONNECTED(00000003) &...
0
votes
1answer
26 views

Messed the SSL certificate files of my VM

I am trying to create a new SSL certificate with openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt. I am ...
1
vote
1answer
207 views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
-1
votes
1answer
78 views

Convert text certificate to crt file

I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ? The code is OK, I have tested in: https://...
1
vote
0answers
39 views

Environment variable to change cipher for openssl

I want to use a particular cipher for a HTTPS connection. The client (phantomjs) statically links openssl. The only way to do it is using environment variables, as there are no command line arguments ...
1
vote
1answer
117 views

Installing OpenSSL from Debian testing on a Debian stable installation

I would like to install OpenSSL 1.1.1a on a Debian stable server, which currently has OpenSSL 1.1.0j installed. So, I created the necessary files according to this answer in the /etc/apt/preferences.d ...
0
votes
2answers
64 views

How can I use SSL3 to talk to a server?

I am trying to get a wireshark trace that I can decrypt for a request between a client and an ALB. In order to decrypt the transaction, I need to force the client/server to disable PFC (perfect ...
0
votes
2answers
31 views

How does HAProxy choose which certificate to serve?

I've got a HAProxy 1.5.9 server that will serve either a certificate signed by a self signed CA or a Let's Encrypt certificate depending on which 'servername' is provided. This is my configuration ...
1
vote
1answer
127 views

nginx 1.15.8 loses TLS 1.3 after gcc 8 installation

I run a centos 7.6 server with nginx. Centos repos do not have latest nginx, so I compiled manually using instructions from here. This left me a nginx binary: nginx version: nginx/1.15.8 built by ...
-1
votes
1answer
81 views

Generate SSL certificate files from text file

I have generated a free SSL from zerossl.com through their wizard, and finally I got a pure text file containing pure text with two BEGIN and END. I want to know how to generate .crt and key from ...
0
votes
1answer
45 views

Google Compute Engine Ubuntu - OpenSSL 1.1.1a

After performing apt-get upgrade on my Ubuntu 18.04.1 LTS server running on Google Compute Engine I was unable to connect to my server via the WEB SSH. The window is stuck with the following message: ...
0
votes
1answer
72 views

SELinux is preventing /usr/sbin/httpd from getattr access after switching to self signed cert

I recently created my own CA and issued my first root cert, then intermediate, then finally a server cert/key/chain for apache. When i switch from the letsencrypt certs added with certbot to the ...
1
vote
2answers
42 views

How do I install OpenSSL (Windows)

I must be missing something exceptionally simple here, but for the life of me I cannot figure out what I should download/install to allow me to use OpenSSL on Windows. I need to combine a SSL ...
0
votes
0answers
111 views

SSL Certificate Configuration Error on XAMPP server

I have been following this guide in order to configure SSL certificate on XAMPP server where I have enabled SSL on 4433 (as well as 443 after encoutering errors but no result, below config and error ...
1
vote
1answer
43 views

Sign a document and verify Date of signature (openssl)

First off: openssl's options make my head spin :) I have a file that I want to sign (foo.doc), and at some point in the future I want to prove the date/time the file was signed. How do I do this? I ...
0
votes
1answer
34 views

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
1
vote
1answer
48 views

How can I issue a certificate from a CA keypair and CSR?

Now I have these files: CA Keypair (RSA 4096): ca.pem, ca-key.pem Certificate Keypair (ECC 384): server.csr, server-key.pem How can I issue the server certificate "server.pem"? The certificate ...
0
votes
0answers
21 views

Turned off SSL's in JBOSS nmap thinks different

I set my JBOS server to use TLS only with the following line in the connector sslEnabledProtocols = "TLSv1.1,TLSv1.2" but when I check the server with NMAP it shows: ssl-enum-ciphers: | SSLv3: | ...
1
vote
1answer
205 views

SMTP Problems due to CN vs SNI on the Certificate?

I have a scenario where I'm using a shared mail server (cPanel) for SMTP on multiple domains for several clients. I hit an issue where Ruby's OpenSSL library complains that the hostname "smtp.domain2....
1
vote
1answer
99 views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
1
vote
1answer
145 views

TLS v1.3 active despite not being enabled in Nginx config

Relevant config: ssl_protocols TLSv1.2; When I test the server at SSL Labs, the test reports that TLS 1.3 is available and lists the default ciphers and other results as if TLSv1.3 were included in ...
-1
votes
1answer
399 views

File .pem Permission denied

I have received from my partner a pfx file that I converted to pem for API The idea is that I do not know where to put the ubuntu server and how to access the plug-in on the woocomerce my log it's ...
0
votes
1answer
267 views

PHP (7.1) issue with mail , openssl , certificate

In the php.ini I have: [openssl] openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext ...
0
votes
1answer
154 views

Openssl is not working for windows 2016

Even after setting the environment path , the openssl command is not working. Kindly help me for this.
0
votes
0answers
33 views

Comibne two different domain SSL certificates to single certificate

Suppose, I have two domain 1. example1.com 2. example2.com I have SSL certificates for this two domain. For example1.com example1.crt and example1.key and for example2.com example2.crt and example2....
1
vote
1answer
50 views

2 versions of openssl on one server [closed]

On a server running RedHat 6.7 with Apache 2.4.37 I proceeded to upgrade OpenSSL to 1.1.0i following the same steps as I've done on other servers with the same set up, but on this one, somehow, 2 ...
23
votes
2answers
4k views

ssh-keygen does not create RSA private key

I'm trying to create a private key and having an issue. When I use ssh-keygen -t rsa -b 4096 -C "your_email@example.com", I get a private key in the following format. -----BEGIN OPENSSH PRIVATE KEY--...
0
votes
0answers
527 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
1
vote
1answer
526 views

Curl SSL error certificate has expired

I'm doing with python for getting result from API URL. But it happened like this: Traceback (most recent call last): File "grafana-utils.py", line 95, in <module> grafana_backup_all() ...