Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

1
vote
1answer
25 views

Sign a document and verify Date of signature (openssl)

First off: openssl's options make my head spin :) I have a file that I want to sign (foo.doc), and at some point in the future I want to prove the date/time the file was signed. How do I do this? I ...
0
votes
1answer
21 views

Is it possible to make OpenSSL work with gnutls?

I have libvirt, one client and one server. Libvirt uses gnutls implementation of tls. I want to use mitmproxy and put in the middle between client and remote server. But mitmproxy uses different ...
0
votes
0answers
11 views

Local WAMP server not accepting self signed SSL cert [closed]

This is the error: AH02577: Init: SSLPassPhraseDialog builtin is not supported on Win32 (key file C:/wamp/bin/apache/apache2.4.33/conf/key/certificate.crt) AH02564: Failed to configure encrypted (?) ...
1
vote
1answer
36 views

How can I issue a certificate from a CA keypair and CSR?

Now I have these files: CA Keypair (RSA 4096): ca.pem, ca-key.pem Certificate Keypair (ECC 384): server.csr, server-key.pem How can I issue the server certificate "server.pem"? The certificate ...
0
votes
0answers
16 views

Turned off SSL's in JBOSS nmap thinks different

I set my JBOS server to use TLS only with the following line in the connector sslEnabledProtocols = "TLSv1.1,TLSv1.2" but when I check the server with NMAP it shows: ssl-enum-ciphers: | SSLv3: | ...
1
vote
1answer
56 views

SMTP Problems due to CN vs SNI on the Certificate?

I have a scenario where I'm using a shared mail server (cPanel) for SMTP on multiple domains for several clients. I hit an issue where Ruby's OpenSSL library complains that the hostname "smtp.domain2....
0
votes
1answer
30 views

OpenSSL generate certificate with endianess,encoding and charset

I'm having some trouble creating a certificate with the openssl commandline tool. The specs for the private key are: "A digital signature using an RSA 1024 bit key with a SHA-1 hash function (...
1
vote
1answer
49 views

TLS v1.3 active despite not being enabled in Nginx config

Relevant config: ssl_protocols TLSv1.2; When I test the server at SSL Labs, the test reports that TLS 1.3 is available and lists the default ciphers and other results as if TLSv1.3 were included in ...
0
votes
1answer
42 views

File .pem Permission denied

I have received from my partner a pfx file that I converted to pem for API The idea is that I do not know where to put the ubuntu server and how to access the plug-in on the woocomerce my log it's ...
0
votes
1answer
41 views

PHP (7.1) issue with mail , openssl , certificate

In the php.ini I have: [openssl] openssl.cafile= /etc/ssl/cert/mydomaincabundle.crt this line allow email from PHP with SMTP to be sent from PHP es Wordpress or PHP application as i use mydomain.ext ...
-1
votes
1answer
57 views

Openssl is not working for windows 2016

Even after setting the environment path , the openssl command is not working. Kindly help me for this.
0
votes
0answers
27 views

Comibne two different domain SSL certificates to single certificate

Suppose, I have two domain 1. example1.com 2. example2.com I have SSL certificates for this two domain. For example1.com example1.crt and example1.key and for example2.com example2.crt and example2....
1
vote
1answer
28 views

2 versions of openssl on one server [closed]

On a server running RedHat 6.7 with Apache 2.4.37 I proceeded to upgrade OpenSSL to 1.1.0i following the same steps as I've done on other servers with the same set up, but on this one, somehow, 2 ...
4
votes
1answer
173 views

ssh-keygen does not create RSA private key

I'm trying to create a private key and having an issue. When I use ssh-keygen -t rsa -b 4096 -C "your_email@example.com", I get a private key in the following format. -----BEGIN OPENSSH PRIVATE KEY--...
0
votes
0answers
50 views

x509 certificate not valid for any names when added IP address to openssl.cnf

A self-signed certificate works well while the command used to generate it on a ubuntu machine is: openssl req -x509 -newkey rsa:4096 -keyout private.key -out cert.crt -days 365 -nodes If the ...
1
vote
1answer
85 views

Curl SSL error certificate has expired

I'm doing with python for getting result from API URL. But it happened like this: Traceback (most recent call last): File "grafana-utils.py", line 95, in <module> grafana_backup_all() ...
0
votes
0answers
45 views

Node js: Error: error:0B080074:x509 certificate routines:X509_check_private_key:key values mismatch

I have searched the website and found some answers but it didn't solve my problem, And I don't know what's I am doing is correct or not. My website is php based, for chat I am using nodejs, and ...
0
votes
0answers
54 views

nginx and mTLS and curl, oh my

I am trying to configure client certificate verification (mTLS) in nginx and test it with curl. Important part of my nginx config: server { listen 443 ssl default_server; listen ...
1
vote
0answers
25 views

Nginx Positive SSL Wildcard not working

I purchased COMODO Positive SSL Wildcard two days ago and have been working really hard to make it works with my Nginx. But I don't know why it doesn't work. Here is what I do. 1. Creating a private ...
0
votes
0answers
33 views

Remotely Monitoring RDP Certificate

We use OpenSSL on a CentOS 6 server to monitor the certificate on servers for RDP. To do this we use: openssl s_client -connect SERVER01:3389 -prexit This has worked flawlessly until 4 days ago, ...
3
votes
1answer
144 views

How to configure nginx + ssl with an encrypted key in .pem format

I would like to set up ssl for an existing nginx server. I got handed both a certificate and the corresponding (encrypted) private key. Both are in .pem format (each in its own file). About all ...
0
votes
1answer
116 views

Manually completing certificate chain for server

I have a certificate, signed by Active Domain Certificate Services. The certificate itself looks fine, I successfully converted it from DER to PEM. However, it says X509v3 CRL Distribution Points: ...
2
votes
1answer
87 views

OpenVPN - trying to validate CRL on client certificate

I'm running OpenVPN on a hardware router running OpenWRT. Every time a client connects I get the following error in the logs: VERIFY WARNING: depth=0, unable to get certificate CRL I've got a 2 ...
1
vote
0answers
84 views

ECDSA certificates fail validation with curl and Firefox

I've been stuck on a problem for 2 days regarding certificates where some clients connect and some other fails the certificate validation. I'm working on CentOS 7.3 and Nginx 1.15.4. I have 3 levels ...
0
votes
0answers
17 views

Having issue to convert crt to pfx because of private key mismatch

Using openssl I created a key and with that key a CSR. The CSR was submitted to https://cheapsslsecurity.com and I was granted a crt for code signing purposes. I want to sign msi files and therefor I ...
0
votes
1answer
248 views

Not able to disable tls 1.1 for nginx

Spent many hours, but can't fix it. I'm not able to disable TLS 1.1. That's required to use Stripe or any other CC gateway for my Wordpress Woocommerce based shop. Domain name: russianphilately.com ...
0
votes
0answers
37 views

cipher suite returned from TLS ServerHello is not shown in openssl ciphers

ServerHello of a TLS handshake returned the following ciphersuite: Cipher Suite: TLS_DHE_RSA_WITH_AES_128_CBC_SHA (0x0033) But when I used openssl to list the ciphers on the server, it seemed a ...
0
votes
1answer
86 views

How to generate x509 cert/key pair from root certificate authority pem file

I have the root certificate pem file from a Linux server. The application that needs to connect to that server is telling me it needs a publicCert pem file and a privateKey pem file to communicate ...
0
votes
1answer
181 views

Nginx SSL Handshake Error (No suitable key share)

To keep the introduction short I am trying to figure out the meaning and cause of this SSL handshake error in nginx. Specifically the part about the key share since searching the error has found no ...
1
vote
2answers
32 views

TLS v1 enabled in nginx config but not working and certificates not available

I have an Ubuntu 18.04.1 server running PHP 5.6 with Forge on Digital Ocean. I'm trying to to enable TLSv1 and TLSv1.1 for a site. So Ive edited my NGINX config to include them: ssl_protocols TLSv1 ...
0
votes
0answers
65 views

squid proxy dont load only one site , dont SSL VERIFY HOST

squid proxy don't load only one site, don't have a problem with other websites I think this problem from SSL VERIFY HOST on squid. I use this code on squid config but don't fix my problem: Source: ...
0
votes
1answer
78 views

No STARTTLS with Dovecot and Postfix

I have done a lot of searching and am not finding a solution. I had to reload Mageia 6 on my email server. I am using dovecot-2.2.34-1.mga6 and postfix-3.1.6-1.mga6. Openssl is openssl-1.0.2o-1....
-1
votes
1answer
261 views

NGINX IPv4 SSL23_GET_SERVER_HELLO:unknown

I have an Ubuntu 18.04 server up and running using ipv4 and ipv6. The system is reachable (ssh) via ipv4 as well as ipv6. There is a NGINX up and running with a valid and payed certificate. Clients ...
0
votes
1answer
176 views

Can't get SSL certificate from LDAPS server

I'm trying to retrieve the public SSL certificate from my organization's LDAPS server. I'm following the instructions here, which recommend I run the following openssl command: openssl s_client -...
1
vote
0answers
643 views

Lets encrypt ERR_CERTIFICATE_TRANSPARENCY_REQUIRED on chrome 68.0.3440.106

I have a VPS server under Ubuntu 17.10, and I have 2 domains, I have created a successful SSL certificate for the first domain 2 months ago, Today I tried to install lets encrypt domain for the 2nd ...
3
votes
1answer
1k views

TLS1.3 not working on nginx 1.15.2 with OpenSSL 1.1.1-pre9

Despite having the latest nginx and OpenSSL does not yield TLS1.3 on my server (www.baldeonline.com for reference) even though it is enabled in my configuration files. Furthermore, my instance of ...
1
vote
0answers
38 views

Blacklisting OpenSSL cipher

When faced with an application that does not allow for configuring cipher suites to use, is there another way to blacklist cipher suites at the openssl shared library level without rebuilding from ...
0
votes
0answers
14 views

Cert conversion from p7b to pcks12

I am trying to send email via tls to Microsoft EOP but having some issues. After working with support, they tell me I need the following certs installed https://support.office.com/en-us/article/...
1
vote
1answer
60 views

why does postgres complain about “ca md too weak” when connecting with ssl

I'm trying to setup a postgres server (version 10.4) with openssl access only. I created a self signed ca and the necessary private and public keys for the user and the server with easyrsa version 3 ...
0
votes
0answers
27 views

OpenSSL X509 PEM Lib error Proxying to AWS S3

I am using Vormetric Cloud Encryption Gateway to proxy to AWS S3. env | grep proxy http_proxy=http://10.91.3.37:3128 https_proxy=https://10.91.3.37:3128 Issuing the aws s3 ls to return a listing of ...
0
votes
0answers
119 views

Why is there openSSL version difference?

So I was trying to install nginx on my virtual machine. I firstly used epel repository, but it couldn't resolve some dependencies. So I configured nginx repository and tried installing nginx again. ...
0
votes
0answers
501 views

Why is tcpdump not capturing TLS packets on port 443?

I am using the following command: sudo tcpdump -vvv -A -XX -i any -w dump.pcap I can see several TCP packets coming or and going to the expected IP addresses on port 443. Nevertheless, I am not able ...
0
votes
0answers
182 views

openssl ca -gencrl is not working at all

Out of the blue, all clients cannot connect because the crl has expired. I am unable to generate a new crl. I currently have OpenVPN configured to ignore it for the time being because clients must be ...
0
votes
0answers
31 views

Downloading net-SNMP without openssl.

I have been attempting to download net-SNMP onto a windows x64 computer, however I have run into the issue that it will only work with openssl 0.9.8r which is no longer available for download. I ...
0
votes
2answers
274 views

Trying to connect to LDAPS (Windows active directory) but keep receiving Verify return code: 20 (unable to get local issuer certificate) error

I've been given a certificate by the person who runs our Active Directory server so I can use LDAPS but I can't get it to work. When verifying with openssl: openssl s_client -connect domain.com:636 -...
1
vote
1answer
183 views

Ideal Setup of Apache for multiple SSL certs with SNI on a single IP

I'm looking for the most efficient way to achieve this setup on Apache 2.4.33 in the Amazon Linux Distro: a single server instance (here: AWS EC2) a single associated IP two (or more) domains, each ...
0
votes
1answer
322 views

curl - SSL peer does not support certificates of the type it received

Trying to send a request with a client certificate to an Apache server, I have the following request and error: $ curl -X POST https://my-server.com/dummy/user -H 'Cache-Control: no-cache' -H '...
3
votes
1answer
59 views

DomainComponent error with openssl

I am creating a simple PKI to use TLS with an LDAP server. I created the root CA request and certificate with this in the config file: [ ca_dn ] 0.domainComponent = "org" 1.domainComponent ...
1
vote
1answer
593 views

How to selfsign an SSL Certificate for HPE Integrated Lights-Out (iLO 5)

PROBLEM: When I access the ilo via browser, it return to me an error with SSL certificate. WHAT I TRIED: I created a CSR (ilo.csr) from iLO web interface --> Security --> SSL Certificate After I ...
0
votes
2answers
902 views

Apache: SSLCertificateFile: file does not exist or is empty

I created a Private Key, CSR, and CRT using the below commands to run a Website using HTTPS on Apache 2.4.6. And the Operating System is Cent OS 7. // To generate a Private Key 1. openssl genrsa -...