Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

0
votes
1answer
12 views

Missing opensslconf.h when compiling GIT

I decided to clone the git source into /usr/src and checked out to the latest stable version (since I currently have 1.9.1). During the compiling I received a few errors regarding missing ...
0
votes
1answer
22 views

How do I symlink this file?

I'm really confused. I'm trying to install rvm ( Ruby's version manager ) but keep getting an error message. Something about how /etc/pki/tls/certs/ca-bundle.crt not found. I believe the security ...
0
votes
0answers
8 views

How do I delete the folder ssl compensation?

I was a big mistake. I removed directory /etc/ssl/ on vps (ubuntu base). I reinstall openssl, but now not work git and Postgresql (because removed certificate files) I do not have a backup of the ...
1
vote
3answers
307 views

How can I downgrade openssl via apt-get?

After a recent upgrade, I am having some SSL connection problems. I would like to downgrade openssl temporarily to see if the issues go away. The current version of openssl installed is ...
0
votes
0answers
37 views

Weechat can't load SSL certificate or pem for relay from default folder

I created a certificate with openssl : openssl genpkey -out key.pem -algorithm RSA -pkeyopt rsa_keygen_bits:2048 openssl req -new -key key.pem -out csr.pem -subj /CN=example.com/ Then I registered ...
4
votes
1answer
1k views

LetsEncrypt - “Can't connect to the client for DV”

I am using LetsEncrypt on Ubuntu 15.10. I have opened ports 443 and 80 using UFW and can access the domain (akuk.co.uk) I'm trying to secure in web browsers from HTTP. When running the ...
-1
votes
1answer
27 views

Disable SSL listeners in LAMP stack

I have an Ubuntu 14.04 server, and I've installed a LAMP stack. However, I need to disable SSL in the LAMP stack. How do I go about disabling the ssl functionality?
1
vote
1answer
85 views

How to change SSLv3 to TLS?

In my Rails application when user pay for products get error. OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed) Due to ...
1
vote
1answer
142 views

Python error “version OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0…” when trying to run command in PHP scrip (LAMPP)

When in Ubuntu 14.04: I run a command of script written in Python with shell it normally runs. I try to run same command using PHP (lampp) I get this error: [errors] => Traceback (most recent ...
0
votes
0answers
582 views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
0
votes
0answers
164 views

Apache2 on Ubuntu server SSL certificate getting overwritten

my webserver is eternialogic.com I have an instantssl.com free 90-day license key. Whenever I goto eternialogic.com, it says that the certificate is "self-signed" for ubuntu. Error.log: [Wed Oct 14 ...
1
vote
1answer
49 views

On 14.04, I ran “openssl genrsa –aes256 -out server-sec.key 4096”, but only got Usage prompt, what's wrong?

I try to generate server keys, but unable to do so on Ubuntu 14.04, and also unable to understand why it complain about the usage. Please help. Thanks in advance. Roger
0
votes
0answers
26 views

Can't get my backupscript to work?

I wrote a backupscript to make things easier on my desktop and server. But now the retrieve script isn't working. I'll post both script so you can get an idea of what I'm trying to do. I got my ...
0
votes
0answers
44 views

How to disable SSLV3 on ESXi5.5 to remediate poodle vulnerability

Is there any known way to disable SSLv3 support on ESXI5.5 and Vsphere client 5.5...
0
votes
0answers
17 views

Replacing system OpenSSL by custom one [duplicate]

Is it possible to completely replace bundled OpenSSL 1.0.1f from xUbuntu by custom 1.0.2d? I need it for Apache 2.4 and PHP. If so, how to do it? If not, why is it not possible? I found only this: ...
3
votes
1answer
490 views

freeradius refuses to start because it says OpenSSL is vulnerable

I work with Ubuntu 14.04 and I can't start the freeradius deamon (freeradius-server-3.0.9). I have this error that I cannot solve: Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 ...
0
votes
0answers
82 views

Ubuntu 12.04 LTS enable TLS 1.2

I need to enable TLS 1.2 for a machine running Ubuntu 12.04 LTS. The machine us used to run a local credit card server that communicates with a pin pad and an external card handling server. The ...
1
vote
0answers
130 views

How to set environment variable for sshd

I have Ubuntu server 14.04 on a server with openssl version 1.0.1f and openssh version 6.6. In my openssl.cnf I have subjectAltName=${ENV::ALTNAME} so that I can set subjectAltName on the commandline ...
1
vote
1answer
450 views

pycurl.error: (35, 'gnutls_handshake() failed: Handshake failed')

On trying to download from a https:// URL with PycURL 'PycURL/7.19.3 libcurl/7.35.0 GnuTLS/2.12.23 zlib/1.2.8 libidn/1.28 librtmp/2.3' in Python 2.7 on Ubuntu 14.04.2, I receive pycurl.error: (35, ...
2
votes
0answers
437 views

Unable to compile 32 bit Qt 4.8.6 libraries on 64 bit machine

I am trying to build 32 bit Qt 4.8.6 libraries on Ubuntu 14.04. I have installed additional libraries sudo apt-get install libx32gcc-4.8-dev sudo apt-get install libc6-dev-i386 sudo apt-get install ...
0
votes
1answer
502 views

Remove newline from openssl base64 encode string? [closed]

echo -n 'HelloWorld' | openssl base64 | pbcopy That command give me a newline after paste it. I thought the -n removed the newline but don't remove when use base64. so how can get my output string ...
0
votes
1answer
24 views

Specific version of library is not available

I have two ubuntu ec2 instances as below. Instance 1: Distributor ID: Ubuntu Description: Ubuntu 14.04.2 LTS Release: 14.04 Codename: trusty Instance 2: Distributor ID: Ubuntu ...
0
votes
1answer
196 views

openssl 1.0.1 update on 12.04 has broken a curl command

After updating openssl on our dev server to version 1.0.1-4ubuntu5.31, a script that contains a curl command to a specific server no longer connects. We were running openssl 1.0.1-4ubuntu5.25. Curl ...
0
votes
1answer
292 views

Curl with SSL failing to download with https (DigitalOcean Ubuntu Server 15.04)

Received this error message: curl: (77) error setting certificate verify locations: CAfile: /usr/local/opt/curl-ca-bundle/share/ca-bundle.crt CApath: /etc/ssl/certs ...when trying to install a ...
4
votes
1answer
974 views

How to compile ffmpeg with https support

I have installed both openssl and openssl-dev, with these: sudo apt-get install openssl sudo apt-get install libssl-dev And has install ffmpeg by these: sudo add-apt-repository ...
2
votes
1answer
3k views

openssl/curl error: SSL23_GET_SERVER_HELLO:tlsv1 alert internal error

We encounter very strange problems connecting with openssl or curl to one of our servers, from Ubuntu 14.04 Executing: openssl s_client -connect ms.icometrix.com:443 gives: CONNECTED(00000003) ...
0
votes
1answer
51 views

Why don't Ubuntu package version numbers match version numbers in the rest of the space?

Ubuntu version numbers don't match the rest of the space, and it's not clear why they don't or how they actually work. For instance, there's openSSL 1.0.1n and 1.0.1f-1ubuntu9.8 What's the ...
4
votes
2answers
1k views

What is CVE-2015-1793? Does it affect me?

Apparently a new bug has been discovered in OpenSSL, it is being called as Alternative chains certificate forgery (CVE-2015-1793). Canonical already declared the versions of openssl that are not ...
0
votes
1answer
31 views

Where are these certificates coming from? [duplicate]

On an Ubuntu 12.04 server I have a bunch of certificates listed in my /etc/ssl directory...where could these have come from? I don't remember adding them myself, do they get generated when aptitude ...
1
vote
1answer
3k views

How to generate Openssl .pem file and where we have to place it

I want to generate a OpenSSL .pem file to allow the remote login via ssh using .pem file at the place of password. I am able to generate key as well as .crt and .pem file using the following sudo ...
2
votes
2answers
4k views

How to enable TLS 1.2 in apache?

The current enabled TLS on my server is "tls 1", how can i enable tls 1.2 on my ubuntu server, and do i have to upgrade my openssl first? # apache2ctl -v Server version: Apache/2.2.12 (Ubuntu) # ...
0
votes
0answers
40 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
0answers
20 views

How to use a signed certificate by external server?

I need to configure HTTPS on Server1 by using a certificate signed by Server2. I did this command on Server2: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key ...
0
votes
0answers
88 views

What browser I can install on my Ubuntu 15.04 64bit that has ChaCha20 and Poly1305 support?

I already tried Google Chrome Dev Channel version 44 but still not recognizing ChaCha20 and Poly1305. Same as Firefox Next Channel, not supporting.
0
votes
0answers
37 views

Easily create local SSL certificates with multiple subject names for local testing

I want to systematically create SSL certificates for local testing of websites. The certificates should support multiple subjectAltNames. I then want to sign the certificates using a local CA and ...
0
votes
2answers
219 views

Created a new OpenSSL key and I don't know where my CSR file is?

Still learning a lot about Ubuntu and server management. I need to generate a new SSL certificate and I have followed a tutorial on how to create the CSR file. I ran the following command: openssl ...
4
votes
1answer
61 views

OpenSSH client not connecting after deleting id_rsa

So I stupidly overwrote my id_rsa and id_rsa.pub files earlier, and I just decied to rm -rf the whole .ssh folder because it was all corrupted/broken after tinkering with it. Ever since that when I ...
-2
votes
2answers
419 views

Ubuntu 15.04 OpenSSL Heartbleed

I spun up a new Rackspace server with Ubuntu Server 15.04, choosing 15.04 believing that I was getting the latest and greatest software. However, after some investigation, it seems that 15.04 ships ...
0
votes
0answers
302 views

OpenVPN: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Im trying to use vpn to connect two internal networks using virtual machines. I have a virtual machine "gateway" and a virtual machine "client", and I want to connect to my gateway from client using ...
0
votes
0answers
74 views

Openssl is not installing

I am trying to install Openssl in my Ubuntu 64bit os which is running in Virtual Box, But i am keep getting the following error. root@Ubuntu64Bit:~# sudo apt-get install openssl Reading package ...
1
vote
0answers
391 views

On connecting to MySQL via SSL getting ERROR 2026 (HY000): SSL connection error: protocol version mismatch

I am working with MySQL and generated the certificates to use with MySQL to enable SSL. Here are SSL configs: mysql> show variables like '%ssl%'; +---------------+----------------------------+ | ...
0
votes
1answer
89 views

OpenSSL -DPURIFY problem

I tried to recompile openssl with flag -DPURIFY using [this guide][1]. However when I try to install the package using sudo debi, I get following error: /sbin/ldconfig.real: ...
1
vote
1answer
5k views

pip raises ImportError: cannot import name HTTPSHandler

After installing the python-pip package in Ubuntu 14.04.1 I get: $ pip Traceback (most recent call last): File "/usr/bin/pip", line 9, in <module> load_entry_point('pip==1.5.4', ...
0
votes
1answer
61 views

Everything uninstalled on ubuntu 14.10

In process of downgrading openssl, trying to first remove its current version I did sudo apt-get purge openssl. Now it has uninstalled EVERYTIHING ON MY SYSTEM! openssl, octave..etc and I cant even ...
1
vote
2answers
7k views

SSL23_GET_SERVER_HELLO:unknown protocol when trying to access HTTPS URL

While trying to create a staging environment for my WORDPRESS website, I am not quite able to setup the HTTPS configuration. I copied the wordpress folder and backed up Mysql database and was able to ...
1
vote
0answers
121 views

Rebuild OpenSSL with -DPURIFY

I'm trying to rebuild OpenSSL according to these instructions. I'm having a problem with the very first line: sudo apt-get build-dep libssl-dev This response is given: Reading package lists... ...
2
votes
1answer
592 views

Why does ssh(d) seems to use OpenSSL heartbleed version?

It is commonly known that the heartbleed bug exists in the OpenSSL versions 1.0.1 through 1.0.1f (inclusive). So why are ssh and sshd compiled with OpenSSL 1.0.1, where the bug exists (12.04 -> ...
0
votes
1answer
2k views

Enabling SSL breaks apache

I seem to be in the midst of a struggle between apache2 and ssl on my 12.04 VPS. Whenever I enable SSL on one of my virtual servers, apache fails to start. Upon examination of my virtual host's ...
0
votes
1answer
268 views

Github Push > gnutls_handshake() error after switching to OpenSSL [closed]

Maybe a couple months ago, I was attempting to push my project to Github when I encountered the following error: fatal: unable to access 'https://github.com/choct155/TEL.git/': gnutls_handshake() ...
1
vote
1answer
652 views

SNI not working ubuntu 14.04, multiple virtual host SSL on same IP

ubuntu 14.04 standard LAMP install. on single IP, I am trying to run two websites using SSL with SNI. I have two diff certs and they are being applied correctly. My issue is redirection from HTTP to ...