Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

0
votes
1answer
16 views

How to generate Openssl .pem file and where we have to place it

I want to generate a OpenSSL .pem file to allow the remote login via ssh using .pem file at the place of password. I am able to generate key as well as .crt and .pem file using the following sudo ...
0
votes
1answer
34 views

How to enable TLS 1.2 in apache?

The current enabled TLS on my server is "tls 1", how can i enable tls 1.2 on my ubuntu server, and do i have to upgrade my openssl first? # apache2ctl -v Server version: Apache/2.2.12 (Ubuntu) # ...
-2
votes
0answers
22 views

How To Set Up Multiple SSL Certificates on One IP with Apache on Ubuntu 14.04?

I am trying to install Self-Signed OpenSSL on Ubuntu 14.04 that hosts multiple domains with single IP. I followed the instruction that are available on the web but still getting error message on ...
0
votes
0answers
19 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
0answers
12 views

How to use a signed certificate by external server?

I need to configure HTTPS on Server1 by using a certificate signed by Server2. I did this command on Server2: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key ...
0
votes
0answers
47 views

What browser I can install on my Ubuntu 15.04 64bit that has ChaCha20 and Poly1305 support?

I already tried Google Chrome Dev Channel version 44 but still not recognizing ChaCha20 and Poly1305. Same as Firefox Next Channel, not supporting.
0
votes
0answers
20 views

Easily create local SSL certificates with multiple subject names for local testing

I want to systematically create SSL certificates for local testing of websites. The certificates should support multiple subjectAltNames. I then want to sign the certificates using a local CA and ...
0
votes
2answers
31 views

Created a new OpenSSL key and I don't know where my CSR file is?

Still learning a lot about Ubuntu and server management. I need to generate a new SSL certificate and I have followed a tutorial on how to create the CSR file. I ran the following command: openssl ...
3
votes
1answer
40 views

OpenSSH client not connecting after deleting id_rsa

So I stupidly overwrote my id_rsa and id_rsa.pub files earlier, and I just decied to rm -rf the whole .ssh folder because it was all corrupted/broken after tinkering with it. Ever since that when I ...
-2
votes
2answers
156 views

Ubuntu 15.04 OpenSSL Heartbleed

I spun up a new Rackspace server with Ubuntu Server 15.04, choosing 15.04 believing that I was getting the latest and greatest software. However, after some investigation, it seems that 15.04 ships ...
0
votes
0answers
83 views

OpenVPN: SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Im trying to use vpn to connect two internal networks using virtual machines. I have a virtual machine "gateway" and a virtual machine "client", and I want to connect to my gateway from client using ...
0
votes
0answers
49 views

Openssl is not installing

I am trying to install Openssl in my Ubuntu 64bit os which is running in Virtual Box, But i am keep getting the following error. root@Ubuntu64Bit:~# sudo apt-get install openssl Reading package ...
0
votes
0answers
168 views

On connecting to MySQL via SSL getting ERROR 2026 (HY000): SSL connection error: protocol version mismatch

I am working with MySQL and generated the certificates to use with MySQL to enable SSL. Here are SSL configs: mysql> show variables like '%ssl%'; +---------------+----------------------------+ | ...
0
votes
1answer
44 views

OpenSSL -DPURIFY problem

I tried to recompile openssl with flag -DPURIFY using [this guide][1]. However when I try to install the package using sudo debi, I get following error: /sbin/ldconfig.real: ...
1
vote
1answer
888 views

pip raises ImportError: cannot import name HTTPSHandler

After installing the python-pip package in Ubuntu 14.04.1 I get: $ pip Traceback (most recent call last): File "/usr/bin/pip", line 9, in <module> load_entry_point('pip==1.5.4', ...
0
votes
1answer
42 views

Everything uninstalled on ubuntu 14.10

In process of downgrading openssl, trying to first remove its current version I did sudo apt-get purge openssl. Now it has uninstalled EVERYTIHING ON MY SYSTEM! openssl, octave..etc and I cant even ...
1
vote
2answers
2k views

SSL23_GET_SERVER_HELLO:unknown protocol when trying to access HTTPS URL

While trying to create a staging environment for my WORDPRESS website, I am not quite able to setup the HTTPS configuration. I copied the wordpress folder and backed up Mysql database and was able to ...
1
vote
0answers
53 views

Rebuild OpenSSL with -DPURIFY

I'm trying to rebuild OpenSSL according to these instructions. I'm having a problem with the very first line: sudo apt-get build-dep libssl-dev This response is given: Reading package lists... ...
2
votes
1answer
141 views

Why does ssh(d) seems to use OpenSSL heartbleed version?

It is commonly known that the heartbleed bug exists in the OpenSSL versions 1.0.1 through 1.0.1f (inclusive). So why are ssh and sshd compiled with OpenSSL 1.0.1, where the bug exists (12.04 -> ...
0
votes
1answer
870 views

Enabling SSL breaks apache

I seem to be in the midst of a struggle between apache2 and ssl on my 12.04 VPS. Whenever I enable SSL on one of my virtual servers, apache fails to start. Upon examination of my virtual host's ...
0
votes
1answer
104 views

Github Push > gnutls_handshake() error after switching to OpenSSL [closed]

Maybe a couple months ago, I was attempting to push my project to Github when I encountered the following error: fatal: unable to access 'https://github.com/choct155/TEL.git/': gnutls_handshake() ...
0
votes
1answer
325 views

SNI not working ubuntu 14.04, multiple virtual host SSL on same IP

ubuntu 14.04 standard LAMP install. on single IP, I am trying to run two websites using SSL with SNI. I have two diff certs and they are being applied correctly. My issue is redirection from HTTP to ...
1
vote
0answers
177 views

Using hardware Encryption instead of SSL

I am using Freescale iMX6 security processor's CAAM for encryption and decryption of data. But how do I make my system use the hardware encryption instead of software? Do I have to make changes to ...
0
votes
1answer
150 views

AES code in Openssl

I'm trying to modify AES-256-CBC code in openssl package, let me say I want to put some printing messages. my problem is that I can't locate AES exact code, I've found some aes.c files under ...
1
vote
1answer
154 views

How to install a specific version of openssl

I am running 12.04 but the question applies to all ubuntu versions. Is there a package for a specific (actually I am only interested in the newest) version of openssl? Although I have the latest ...
0
votes
1answer
56 views

Ubuntu 14.04LTS How to generate an a Windows Azure Compatible .cer key

How can I generate a .cer public key certificate file using ubuntu so that I can upload it onto Azure VPN management portal since it doesn't allow any other formats?
0
votes
1answer
491 views

SSL connection with TLS connection error

I am using Ubuntu 12.04, installed at VirtualBox (Mac) using vagrant. I am not using any proxy server. In my company network, when I try curl -1vsS ...
2
votes
1answer
668 views

Curl requiring ciphers to be specified

I am trying to run this command: curl https://api-3t.sandbox.paypal.com/nvp On my ubuntu machine, it failes with the following error: curl: (35) error:14077410:SSL ...
0
votes
0answers
232 views

OpenVPN TLS Error

I've tried to install and setup OpenVPN on my Ubuntu Server 14.04 and after generating the certificates and connecting i get the following error: Sat Oct 25 10:53:13 2014 us=916595 192.168.1.1:54081 ...
0
votes
0answers
116 views

Installation problem in libosip2-3deb package

I am working on open IMS core, for that I need to install SIP on client systems. I wanted to install this uctimsclient, but I am facing issues with installing dependency packages given below: ...
0
votes
1answer
175 views

Failure during ssl handshake while sending mail using openssl

I am trying to send mail from terminal using openssl by connecting to gmail's server using ssl on the port 465. Things are fine until i enter from address and authenticate. But when i enter RCPT TO, i ...
0
votes
1answer
115 views

Checkinstall error with OpenSSL 0.9.8za on Trusty (Ubuntu 14.04)

We have a specific need for OpenSSL 0.9.8za, and cannot rely on back-ported support for these features in newer versions of OpenSSL (1.0.1). After installing checkinstall (sudo apt-get install ...
3
votes
3answers
2k views

opensslconf.h not found

I'm trying to build znort987's parser, and have executed sudo apt-get libssl-dev. I can see all sorts of ssl related header files in /usr/include/openssl but opensslconf.h is missing from the openssl ...
1
vote
1answer
186 views

How to compress syslog-ng's network link, now that zlib is disabled in openssl?

In our servers infrastructure, for logging, we use a client/server setup, using syslog-ng, and stunnel as a mean of compression at the network level, through zlib at the SSL layer (syslog-ng doesn't ...
0
votes
2answers
1k views

ldap_bind: Confidentiality required (13)

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it ...
0
votes
1answer
269 views

Ldap with ssl server configuration in ubuntu 12.04 server

I have successfully installed ldap server on Ubuntu 12.04 and other Ubuntu client can authenticate successfully but I want to secure ldap client server communication with the help of ssl I searched ...
0
votes
1answer
2k views

Trying to compile from source newest apache with newest openssl

I need to install apache 2.4.10 using openssl 1.0.1i. I compiled openssl from source with: $ ./config \ --prefix=/opt/openssl-1.0.1i \ --openssldir=/opt/openssl-1.0.1i $ make $ sudo make ...
2
votes
1answer
3k views

OpenSSL installed, but Ruby unable to require it

I'm trying to setup github-pages on my Ubuntu laptop, and following the guide provided by Github I have to install the bundler package; giving the command ~$ gem install bundler returns me this ...
0
votes
1answer
2k views

OpenSSL not picking up CAs in certs folder by default

On Ubuntu 12.04 LTS, I am getting error for certificate validation error if the CApath is not explicitly set Tried several solution. But nothing works. It is causing so much of issue to install new ...
0
votes
1answer
3k views

How to setup ssl (https) for your site on Ubuntu Linux--Two way SSL

I have a website, the main requirement is to make that website secure by using https When the client access from a different machine it has to work only if the certificate had uploaded in the ...
0
votes
1answer
472 views

Getting OpenSSL aes output in hex format

I am trying to use openssl's aes implementation. The encryption and decryption is working fine but when I compare the ciphertext to an online implementation they don't match. openssl aes-256-cbc -a ...
1
vote
2answers
126 views

OpenSSL getting rollback automatically to default version in Ubuntu 12.04.4

I have installed Ubuntu 12.04.4 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1h version by refering this link. I have applied patch ...
1
vote
0answers
467 views

Verifying certificates signed by intermediate CA

I am trying to figure out how to use OpenSSL to verify a certificate that has been signed by an intermediate CA which I have signed with my root CA. I tried concatenating the certificate with the ...
5
votes
1answer
3k views

How to check which OpenSSL version is use by Apache on Ubuntu 12.04

I have installed Ubuntu12.04 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1g version by refering this link. Now I want to confirm ...
0
votes
1answer
539 views

Ubuntu 14.04.1 LTS and OpenSSL [duplicate]

Does Ubuntu Ubuntu 14.04.1 LTS have any OpenSSL vulnerabilities in connection with the Heartbleed bug? I downloaded the ISO today and I am installing it and I would like to know if there are any ...
0
votes
1answer
1k views

Setting up multiple SSL certificates on apache2 VirtualHost(s) - 14.04?

I am using apache2's VirtualHost feature on my Ubuntu 14.04 VPS to host two websites and a subdomain, for the conversation let's call them example1.com, example2.com and srv.example1.com. I am trying ...
1
vote
0answers
1k views

OpenSSL: bad magic number

I want to decrypt a file, I run: openssl enc -d -aes128 -in encrypted.txt -out decrypted.txt It asked me this: enter aes-128-cbc decryption password: Whatever I type, I get this: bad magic ...
1
vote
1answer
3k views

Fake UserTrust.com Certificates in Chrome?

I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab). Those are marked as Not Safe, and they are related to mail.google.com, ...
1
vote
1answer
457 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...
0
votes
1answer
128 views

Is the compiled version of a binary dynamically linked to the system SSL library?

In my case I build nginx from source and I want to confirm whether I need to rebuild it whenever a new OpenSSL update is released. From what I understand either of these two commands can be used to ...