Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

0
votes
0answers
11 views

Openssl 2.18 vs 2.19

because we run in to problem with openssl 2.19. We want to downgrade to 2.18. But 2.18 dont seem to exist in the repo. Anyone know why? Or any way to solve the problem? Our problem seems to be that we ...
0
votes
1answer
43 views

openssl update on ubuntu 8.04 [closed]

I have an old e-commerce website on an old but stable Ubuntu 8.04. We're worried about the new OpenSSL requirement for Paypal. Seems that we have to update the TLS protocol to version 1.2 and ...
0
votes
0answers
34 views

Openssl non fips for 16.04

Is there an easy way to install the non fips version of openssl instead of removing openssl and libssl-dev and compiling from source?
0
votes
0answers
110 views

Upgrade Apache OpenSSL to same as system OpenSSL

I'm using OpenSSL 1.0.2h 3 May 2016 in my Ubuntu 14.04.4 TLS server: # openssl version OpenSSL 1.0.2h 3 May 2016 But Apache still using an old version: AH00163: Apache/2.4.7 (Ubuntu) OpenSSL/1.0....
1
vote
1answer
57 views

Apache mod_ssl to use OpenSSL ENGINE on Ubuntu 14.04

I have installed OpenSSL 1.0.1f and created an Engine for RSA acceleration using GPU. The Engine is dynamic so it is known globally. Then I have installed Apache $ sudo apt-get install apache2, ...
0
votes
0answers
109 views

Ubuntu 14.04 Openssl 1.0.2 Package

Will the openssl package be upgraded from 1.0.1f to 1.0.2 any time in the future? (I'm able to build openssl from source as an alternative and am specifically curious about 1.0.2 package ...
-1
votes
1answer
107 views

openssl s_client -connect gmail.com:443 -ssl3 not working

I have installed Ubuntu 16.04 LTS on my laptop for my testing. Connect to gmail.com using the following command. openssl s_client -connect gmail.com:443 -ssl3 But I get the following error: ...
1
vote
1answer
33 views

Will openssl on Ubuntu 12.04 and 14.04 be maintained after Dec 31, 2016?

12.04 (EOL April 2017) and 14.04 (EOL 2019) both appear to use openssl 1.0.1, which is apparently not going to be supported at all after December 31, 2016 (according to openssl.org/source). Will ...
0
votes
0answers
25 views

Secure certificates using TPM in ubuntu

I have a requirement to secure AD machine based certificates(.cert,.pem,.key files) using TPM chip in Ubuntu operating system. The requirements are as follows: The certificates that are downloaded ...
0
votes
0answers
50 views

“_CONF_get_section” undefined symbol libcrypto error with Ubuntu 16.0.4 LTS

I am trying to build my application on Ubuntu 16.0.4 LTS with openssl. I installed openssl using the following commands: sudo apt-get install openssl sudo apt-get install libssl-dev At the linking ...
4
votes
1answer
2k views

Why hasn't Trusty received the updates for OpenSSL's CVE-2016-2108 and CVE-2016-2107? [duplicate]

OpenSSL released a security advisory, warning users of two recently discovered vulnerabilities: Memory corruption in the ASN.1 encoder (CVE-2016-2108) Padding oracle in AES-NI CBC MAC check (CVE-...
0
votes
1answer
28 views

outdated stunnel,openssl versions Kubuntu 14.04

I have : stunnel 4.53 > when the latest version is 5.31 openssl 1.0.1f > when the latest version is 1.0.2g I've updated the system using apt-get but still with 4.53 and 1.0.1f , I have a security ...
1
vote
0answers
114 views

How to use .p7b for Root CA in Ubuntu

I need to add a p7b root ca to Ubuntu, in order to connect to services/servers for my company. Based on what I have found on the internet, it seems that I need to convert this file to either .crt or ....
0
votes
0answers
50 views

SSL peer shut down incorrectly

I am getting the following error when launching a jnlp file It says - javax.net.ssl.SSLException: SSL peer shut down incorrectly. This issue is occurring intermittently The SSL version used is ...
1
vote
0answers
76 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
9
votes
1answer
2k views

Are all versions of Ubuntu secure against DROWN attack?

OpenSSL updates release versions 1.0.2g and 1.0.1s to fix the DROWN vulnerability (CVE-2016-0800). In Ubuntu 14.04 LTS Trusty Tahr, the latest OpenSSL version is 1.0.1f-1ubuntu2.18. Do I understand it ...
0
votes
0answers
43 views

openssl/ec_lcl.h not found

I'm trying to build a program that uses OpenSSL. But I get an error: fatal error: openssl/ec_lcl.h: No such file or directory And it is right. There is no such file in /usr/include or anywhere ...
0
votes
1answer
255 views

Completely remove openssl dev version

I installed openssl dev version from github. However, I now wish to remove it to install openssl from the official repos. I tried to remove it using sudo apt-get remove --purge openssl but it's still ...
0
votes
1answer
58 views

Build libcrypto with -fPIC

I am trying to build Julia from source, but running make returns this error: /usr/bin/ld: /usr/local/lib/libcrypto.a(poly1305-x86_64.o): relocation R_X86_64_PC32 against symbol `poly1305_blocks' can ...
-1
votes
1answer
78 views

Fix OpenSSL CCS vulnerability on Ubuntu 14.04

I just installed an SSL certificate from Let's Encrypt on one of my domains. Everything was fine, green lock icon on Chrome. But just to be sure, I checked the domain on ssllabs.com. And to my ...
0
votes
0answers
246 views

When installing php from source configure: error: Cannot find OpenSSL's <evp.h>

I am trying to build php from source but ./configure gives error configure: error: Cannot find OpenSSL's my openssl version returns OpenSSL 1.0.2f 28 Jan 2016 and which openssl /home/nexusstar/...
0
votes
1answer
88 views

No certificate files inside of /usr/lib/ssl

I don't appear to have any SSL certs installed on my machine and it is causing issues with wget and Faraday called within Rails. When I run openssl version -a I am told my OPENSSLDIR is "/usr/lib/...
0
votes
0answers
116 views

libssl dependency issue with vmware Horizon client on trusty

I installed vmware-view Horizon Client 3.5.0.299900, on Ubuntu 14.04 Trusty It installed fine by executing the "bundle" file. When I try to run the app (/usr/lib/vmware/view/bin/vmware-view), it gives ...
0
votes
1answer
48 views

Missing opensslconf.h when compiling GIT

I decided to clone the git source into /usr/src and checked out to the latest stable version (since I currently have 1.9.1). During the compiling I received a few errors regarding missing ...
0
votes
1answer
30 views

How do I symlink this file?

I'm really confused. I'm trying to install rvm ( Ruby's version manager ) but keep getting an error message. Something about how /etc/pki/tls/certs/ca-bundle.crt not found. I believe the security ...
0
votes
0answers
22 views

How do I delete the folder ssl compensation?

I was a big mistake. I removed directory /etc/ssl/ on vps (ubuntu base). I reinstall openssl, but now not work git and Postgresql (because removed certificate files) I do not have a backup of the ...
2
votes
3answers
1k views

How can I downgrade openssl via apt-get?

After a recent upgrade, I am having some SSL connection problems. I would like to downgrade openssl temporarily to see if the issues go away. The current version of openssl installed is 1.0.1-...
0
votes
0answers
79 views

Weechat can't load SSL certificate or pem for relay from default folder

I created a certificate with openssl : openssl genpkey -out key.pem -algorithm RSA -pkeyopt rsa_keygen_bits:2048 openssl req -new -key key.pem -out csr.pem -subj /CN=example.com/ Then I registered ...
4
votes
1answer
3k views

LetsEncrypt - “Can't connect to the client for DV”

I am using LetsEncrypt on Ubuntu 15.10. I have opened ports 443 and 80 using UFW and can access the domain (akuk.co.uk) I'm trying to secure in web browsers from HTTP. When running the ./letsencrypt-...
-1
votes
1answer
49 views

Disable SSL listeners in LAMP stack

I have an Ubuntu 14.04 server, and I've installed a LAMP stack. However, I need to disable SSL in the LAMP stack. How do I go about disabling the ssl functionality?
1
vote
1answer
186 views

How to change SSLv3 to TLS?

In my Rails application when user pay for products get error. OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed) Due to ...
1
vote
1answer
341 views

Python error “version OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0…” when trying to run command in PHP scrip (LAMPP)

When in Ubuntu 14.04: I run a command of script written in Python with shell it normally runs. I try to run same command using PHP (lampp) I get this error: [errors] => Traceback (most recent ...
0
votes
0answers
1k views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
0
votes
0answers
337 views

Apache2 on Ubuntu server SSL certificate getting overwritten

my webserver is eternialogic.com I have an instantssl.com free 90-day license key. Whenever I goto eternialogic.com, it says that the certificate is "self-signed" for ubuntu. Error.log: [Wed Oct 14 ...
1
vote
1answer
107 views

On 14.04, I ran “openssl genrsa –aes256 -out server-sec.key 4096”, but only got Usage prompt, what's wrong?

I try to generate server keys, but unable to do so on Ubuntu 14.04, and also unable to understand why it complain about the usage. Please help. Thanks in advance. Roger
0
votes
0answers
39 views

Can't get my backupscript to work?

I wrote a backupscript to make things easier on my desktop and server. But now the retrieve script isn't working. I'll post both script so you can get an idea of what I'm trying to do. I got my ...
0
votes
0answers
64 views

How to disable SSLV3 on ESXi5.5 to remediate poodle vulnerability

Is there any known way to disable SSLv3 support on ESXI5.5 and Vsphere client 5.5...
0
votes
0answers
17 views

Replacing system OpenSSL by custom one [duplicate]

Is it possible to completely replace bundled OpenSSL 1.0.1f from xUbuntu by custom 1.0.2d? I need it for Apache 2.4 and PHP. If so, how to do it? If not, why is it not possible? I found only this: ...
3
votes
1answer
1k views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
141 views

Ubuntu 12.04 LTS enable TLS 1.2

I need to enable TLS 1.2 for a machine running Ubuntu 12.04 LTS. The machine us used to run a local credit card server that communicates with a pin pad and an external card handling server. The ...
1
vote
0answers
235 views

How to set environment variable for sshd

I have Ubuntu server 14.04 on a server with openssl version 1.0.1f and openssh version 6.6. In my openssl.cnf I have subjectAltName=${ENV::ALTNAME} so that I can set subjectAltName on the commandline ...
1
vote
1answer
1k views

pycurl.error: (35, 'gnutls_handshake() failed: Handshake failed')

On trying to download from a https:// URL with PycURL 'PycURL/7.19.3 libcurl/7.35.0 GnuTLS/2.12.23 zlib/1.2.8 libidn/1.28 librtmp/2.3' in Python 2.7 on Ubuntu 14.04.2, I receive pycurl.error: (35, '...
2
votes
0answers
839 views

Unable to compile 32 bit Qt 4.8.6 libraries on 64 bit machine

I am trying to build 32 bit Qt 4.8.6 libraries on Ubuntu 14.04. I have installed additional libraries sudo apt-get install libx32gcc-4.8-dev sudo apt-get install libc6-dev-i386 sudo apt-get install ...
0
votes
1answer
1k views

Remove newline from openssl base64 encode string? [closed]

echo -n 'HelloWorld' | openssl base64 | pbcopy That command give me a newline after paste it. I thought the -n removed the newline but don't remove when use base64. so how can get my output string ...
0
votes
1answer
29 views

Specific version of library is not available

I have two ubuntu ec2 instances as below. Instance 1: Distributor ID: Ubuntu Description: Ubuntu 14.04.2 LTS Release: 14.04 Codename: trusty Instance 2: Distributor ID: Ubuntu Description:...
0
votes
1answer
315 views

openssl 1.0.1 update on 12.04 has broken a curl command

After updating openssl on our dev server to version 1.0.1-4ubuntu5.31, a script that contains a curl command to a specific server no longer connects. We were running openssl 1.0.1-4ubuntu5.25. Curl ...
0
votes
1answer
467 views

Curl with SSL failing to download with https (DigitalOcean Ubuntu Server 15.04)

Received this error message: curl: (77) error setting certificate verify locations: CAfile: /usr/local/opt/curl-ca-bundle/share/ca-bundle.crt CApath: /etc/ssl/certs ...when trying to install a ...
4
votes
1answer
2k views

How to compile ffmpeg with https support

I have installed both openssl and openssl-dev, with these: sudo apt-get install openssl sudo apt-get install libssl-dev And has install ffmpeg by these: sudo add-apt-repository ppa:mc3man/trusty-...
2
votes
1answer
6k views

openssl/curl error: SSL23_GET_SERVER_HELLO:tlsv1 alert internal error

We encounter very strange problems connecting with openssl or curl to one of our servers, from Ubuntu 14.04 Executing: openssl s_client -connect ms.icometrix.com:443 gives: CONNECTED(00000003) ...
3
votes
1answer
85 views

Why don't Ubuntu package version numbers match version numbers in the rest of the space? [duplicate]

Ubuntu version numbers don't match the rest of the space, and it's not clear why they don't or how they actually work. For instance, there's openSSL 1.0.1n and 1.0.1f-1ubuntu9.8 What's the ...