Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

0
votes
0answers
14 views

MySQL SSL error: wrong version number

I'm having difficulty with MySQL and OpenSSL. I'm running MySQL 5.7 and OpenSSL 1.1.0g on Ubuntu 16.04 Regardless of what certificates I load, MySQL starts up but does not establish a connection over ...
-1
votes
0answers
10 views

Can I download the latest curl and openssl library on debian etch? [on hold]

How can I install the latest openssl and libcurl on Debian Etch the version that I can currently install is Openssl 0.98 and libcurl 7.15
0
votes
0answers
9 views

Openssl: generated cer and key from pfx don't match

I'm trying to convert a pfx to cer and key format to use them with Nginx. I'm using the following commands: openssl pkcs12 -in input.pfx -out mycerts.cer -nokeys -clcerts and openssl pkcs12 -in ...
1
vote
0answers
20 views

OpenSSL/HAProxy verify client certificates using a non-CA certificate

I am facing a problem while configuring a HAProxy instance (v1.8.13) with compiled OpenSSL support to only accept client certificates which have been signed by a non-CA certificate. In particular, I ...
0
votes
0answers
11 views

Digital signing certificate for SOAP

I'm calling a third-party Web Service with SOAP requests. This service requires me to to sign my SOAP requests digitally. Regarding to How to buy a X.509 certificate for signing digital payloads ...
0
votes
0answers
15 views

Unable to return certificate information once loaded from file - OpenSSL

I have wrapped OpenSSL so it can be used within an application I am writing to create and manage certificates. I am able to load a certificate (and private key) from file and store it in a class ...
0
votes
0answers
19 views

Tomcat Configuration with openssl Failed

I am trying to configure Tomcat with openssl (ssl ). I have generated Keystore by name serverde**.jks My config With server.xml Is: <Connector port="8443" protocol="HTTP/1.1" ...
0
votes
0answers
15 views

Internal Server Error after installing LetsEncrypt SSL certificate and uninstalling it again

Following the directions given here, I tried to install a LetsEncrypt certificate on my Ubuntu 14.04 apache virtual private server with SSH (root) like this: apt-get install certbot python-certbot-...
1
vote
0answers
14 views

AES-256-CBC with Sha512 and Encrypt-then-MAC Questions

I have to encrypt and decrypt csv-files with the following specifications: Cipher: AES-256-CBC MAC: SHA-512 Method: Encrypt-then-MAC I am working on an Ubuntu Bionic and I have root acceess. 1.) ...
0
votes
0answers
79 views

OpenVPN: Some users are having “TLS Error: TLS key negotiation failed to occur within 60 seconds”

I have an OpenVPN server (setup using Pritunl with its default settings), everything's working fine for all users except for some of them (could reproduce it with only one client) not being able to ...
1
vote
1answer
34 views

Openssl 1.0.2q - error at finished message: error:140790E5:SSL routines:ssl23_write:ssl handshake failure:s23_lib.c:177:

Connecting to a VIP/loadbalancer w/Tomcat behind it. (tcpdump appears clean so far..no RSTs) Using openssl version 1.2.q $openssl s_client -connect "blah:443" -msg CONNECTED(00000003) &...
0
votes
1answer
20 views

Messed the SSL certificate files of my VM

I am trying to create a new SSL certificate with openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/ssl/private/apache-selfsigned.key -out /etc/ssl/certs/apache-selfsigned.crt. I am ...
1
vote
1answer
88 views

openssl verify error 2 at 1 depth lookup:unable to get issuer certificate

Openssl is telling me it can't verify my concatenated cert. I downloaded the intermediate cert from the issuer (AlphaSSL) and concatenated that with my domain cert I purchased (domain cert first, then ...
-1
votes
1answer
33 views

Convert text certificate to crt file

I sent the .CSR file to my client, and they send me the final certificate in text code (copy paste into the mail). Can I convert this code into file .CRT ? The code is OK, I have tested in: https://...
1
vote
0answers
35 views

Environment variable to change cipher for openssl

I want to use a particular cipher for a HTTPS connection. The client (phantomjs) statically links openssl. The only way to do it is using environment variables, as there are no command line arguments ...
1
vote
1answer
79 views

Installing OpenSSL from Debian testing on a Debian stable installation

I would like to install OpenSSL 1.1.1a on a Debian stable server, which currently has OpenSSL 1.1.0j installed. So, I created the necessary files according to this answer in the /etc/apt/preferences.d ...
0
votes
2answers
58 views

How can I use SSL3 to talk to a server?

I am trying to get a wireshark trace that I can decrypt for a request between a client and an ALB. In order to decrypt the transaction, I need to force the client/server to disable PFC (perfect ...
0
votes
2answers
26 views

How does HAProxy choose which certificate to serve?

I've got a HAProxy 1.5.9 server that will serve either a certificate signed by a self signed CA or a Let's Encrypt certificate depending on which 'servername' is provided. This is my configuration ...
1
vote
1answer
95 views

nginx 1.15.8 loses TLS 1.3 after gcc 8 installation

I run a centos 7.6 server with nginx. Centos repos do not have latest nginx, so I compiled manually using instructions from here. This left me a nginx binary: nginx version: nginx/1.15.8 built by ...
-1
votes
1answer
53 views

Generate SSL certificate files from text file

I have generated a free SSL from zerossl.com through their wizard, and finally I got a pure text file containing pure text with two BEGIN and END. I want to know how to generate .crt and key from ...
0
votes
1answer
40 views

Google Compute Engine Ubuntu - OpenSSL 1.1.1a

After performing apt-get upgrade on my Ubuntu 18.04.1 LTS server running on Google Compute Engine I was unable to connect to my server via the WEB SSH. The window is stuck with the following message: ...
0
votes
1answer
47 views

SELinux is preventing /usr/sbin/httpd from getattr access after switching to self signed cert

I recently created my own CA and issued my first root cert, then intermediate, then finally a server cert/key/chain for apache. When i switch from the letsencrypt certs added with certbot to the ...
1
vote
2answers
36 views

How do I install OpenSSL (Windows)

I must be missing something exceptionally simple here, but for the life of me I cannot figure out what I should download/install to allow me to use OpenSSL on Windows. I need to combine a SSL ...
0
votes
0answers
78 views

SSL Certificate Configuration Error on XAMPP server

I have been following this guide in order to configure SSL certificate on XAMPP server where I have enabled SSL on 4433 (as well as 443 after encoutering errors but no result, below config and error ...
1
vote
1answer
35 views

Sign a document and verify Date of signature (openssl)

First off: openssl's options make my head spin :) I have a file that I want to sign (foo.doc), and at some point in the future I want to prove the date/time the file was signed. How do I do this? I ...
0
votes
1answer
33 views

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
1
vote
1answer
43 views

How can I issue a certificate from a CA keypair and CSR?

Now I have these files: CA Keypair (RSA 4096): ca.pem, ca-key.pem Certificate Keypair (ECC 384): server.csr, server-key.pem How can I issue the server certificate "server.pem"? The certificate ...
0
votes
0answers
21 views

Turned off SSL's in JBOSS nmap thinks different

I set my JBOS server to use TLS only with the following line in the connector sslEnabledProtocols = "TLSv1.1,TLSv1.2" but when I check the server with NMAP it shows: ssl-enum-ciphers: | SSLv3: | ...
1
vote
1answer
155 views

SMTP Problems due to CN vs SNI on the Certificate?

I have a scenario where I'm using a shared mail server (cPanel) for SMTP on multiple domains for several clients. I hit an issue where Ruby's OpenSSL library complains that the hostname "smtp.domain2....
1
vote
1answer
60 views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
1
vote
1answer
96 views

TLS v1.3 active despite not being enabled in Nginx config

Relevant config: ssl_protocols TLSv1.2; When I test the server at SSL Labs, the test reports that TLS 1.3 is available and lists the default ciphers and other results as if TLSv1.3 were included in ...
-1
votes
1answer
233 views

File .pem Permission denied

I have received from my partner a pfx file that I converted to pem for API The idea is that I do not know where to put the ubuntu server and how to access the plug-in on the woocomerce my log it's ...
0
votes
1answer
151 views

PHP (7.1) issue with mail , openssl , certificate

In the php.ini I have: [openssl] openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext ...
0
votes
1answer
94 views

Openssl is not working for windows 2016

Even after setting the environment path , the openssl command is not working. Kindly help me for this.
0
votes
0answers
31 views

Comibne two different domain SSL certificates to single certificate

Suppose, I have two domain 1. example1.com 2. example2.com I have SSL certificates for this two domain. For example1.com example1.crt and example1.key and for example2.com example2.crt and example2....
1
vote
1answer
46 views

2 versions of openssl on one server [closed]

On a server running RedHat 6.7 with Apache 2.4.37 I proceeded to upgrade OpenSSL to 1.1.0i following the same steps as I've done on other servers with the same set up, but on this one, somehow, 2 ...
12
votes
2answers
2k views

ssh-keygen does not create RSA private key

I'm trying to create a private key and having an issue. When I use ssh-keygen -t rsa -b 4096 -C "your_email@example.com", I get a private key in the following format. -----BEGIN OPENSSH PRIVATE KEY--...
0
votes
0answers
326 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
1
vote
1answer
344 views

Curl SSL error certificate has expired

I'm doing with python for getting result from API URL. But it happened like this: Traceback (most recent call last): File "grafana-utils.py", line 95, in <module> grafana_backup_all() ...
0
votes
0answers
113 views

Node js: Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

I have searched the website and found some answers but it didn't solve my problem, And I don't know what's I am doing is correct or not. My website is php based, for chat I am using nodejs, and ...
0
votes
0answers
171 views

nginx and mTLS and curl, oh my

I am trying to configure client certificate verification (mTLS) in nginx and test it with curl. Important part of my nginx config: server { listen 443 ssl default_server; listen ...
1
vote
0answers
30 views

Nginx Positive SSL Wildcard not working

I purchased COMODO Positive SSL Wildcard two days ago and have been working really hard to make it works with my Nginx. But I don't know why it doesn't work. Here is what I do. 1. Creating a private ...
0
votes
0answers
97 views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
3
votes
1answer
826 views

How to configure nginx + ssl with an encrypted key in .pem format

I would like to set up ssl for an existing nginx server. I got handed both a certificate and the corresponding (encrypted) private key. Both are in .pem format (each in its own file). About all ...
0
votes
1answer
214 views

Manually completing certificate chain for server

I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says X509v3 CRL Distribution Points: ...
2
votes
1answer
181 views

OpenVPN - trying to validate CRL on client certificate

I'm running OpenVPN on a hardware router running OpenWRT. Every time a client connects I get the following error in the logs: VERIFY WARNING: depth=0, unable to get certificate CRL I've got a 2 ...
1
vote
0answers
121 views

ECDSA certificates fail validation with curl and Firefox

I've been stuck on a problem for 2 days regarding certificates where some clients connect and some other fails the certificate validation. I'm working on CentOS 7.3 and Nginx 1.15.4. I have 3 levels ...
0
votes
0answers
32 views

Having issue to convert crt to pfx because of private key mismatch

Using openssl I created a key and with that key a CSR. The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes. I want to sign msi files and therefor I ...
0
votes
1answer
414 views

Not able to disable tls 1.1 for nginx

Spent many hours, but can't fix it. I'm not able to disable TLS 1.1. That's required to use Stripe or any other CC gateway for my Wordpress Woocommerce based shop. Domain name: russianphilately.com ...
0
votes
0answers
68 views

cipher suite returned from TLS ServerHello is not shown in openssl ciphers

ServerHello of a TLS handshake returned the following ciphersuite: Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) But when I used openssl to list the ciphers on the server, it seemed a ...