Tagged Questions

Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

0
votes
1answer
47 views

SSL connection with TLS connection error

I am using Ubuntu 12.04, installed at VirtualBox (Mac) using vagrant. I am not using any proxy server. In my company network, when I try curl -1vsS ...
0
votes
0answers
25 views

Curl requiring ciphers to be specified

I am trying to run this command: curl https://api-3t.sandbox.paypal.com/nvp On my ubuntu machine, it failes with the following error: curl: (35) error:14077410:SSL ...
0
votes
0answers
53 views

OpenVPN TLS Error

I've tried to install and setup OpenVPN on my Ubuntu Server 14.04 and after generating the certificates and connecting i get the following error: Sat Oct 25 10:53:13 2014 us=916595 192.168.1.1:54081 ...
0
votes
0answers
23 views

Installation problem in libosip2-3deb package

I am working on open IMS core, for that I need to install SIP on client systems. I wanted to install this uctimsclient, but I am facing issues with installing dependency packages given below: ...
0
votes
0answers
51 views

Failure during ssl handshake while sending mail using openssl

I am trying to send mail from terminal using openssl by connecting to gmail's server using ssl on the port 465. Things are fine until i enter from address and authenticate. But when i enter RCPT TO, i ...
0
votes
1answer
55 views

Checkinstall error with OpenSSL 0.9.8za on Trusty (Ubuntu 14.04)

We have a specific need for OpenSSL 0.9.8za, and cannot rely on back-ported support for these features in newer versions of OpenSSL (1.0.1). After installing checkinstall (sudo apt-get install ...
1
vote
2answers
377 views

opensslconf.h not found

I'm trying to build znort987's parser, and have executed sudo apt-get libssl-dev. I can see all sorts of ssl related header files in /usr/include/openssl but opensslconf.h is missing from the openssl ...
0
votes
1answer
60 views

How to compress syslog-ng's network link, now that zlib is disabled in openssl?

In our servers infrastructure, for logging, we use a client/server setup, using syslog-ng, and stunnel as a mean of compression at the network level, through zlib at the SSL layer (syslog-ng doesn't ...
0
votes
2answers
238 views

ldap_bind: Confidentiality required (13)

I want to configure ldap with ssl so I used openssl for certificate and when I enable olcSecurity tls=1 in /etc/ldap/slapd.d/cn=config.ldif and now when I try to use ldapsearch or try to login it ...
0
votes
1answer
105 views

Ldap with ssl server configuration in ubuntu 12.04 server

I have successfully installed ldap server on Ubuntu 12.04 and other Ubuntu client can authenticate successfully but I want to secure ldap client server communication with the help of ssl I searched ...
0
votes
1answer
523 views

Trying to compile from source newest apache with newest openssl

I need to install apache 2.4.10 using openssl 1.0.1i. I compiled openssl from source with: $ ./config \ --prefix=/opt/openssl-1.0.1i \ --openssldir=/opt/openssl-1.0.1i $ make $ sudo make ...
2
votes
1answer
854 views

OpenSSL installed, but Ruby unable to require it

I'm trying to setup github-pages on my Ubuntu laptop, and following the guide provided by Github I have to install the bundler package; giving the command ~$ gem install bundler returns me this ...
0
votes
1answer
74 views

OpenSSL not picking up CAs in certs folder by default

On Ubuntu 12.04 LTS, I am getting error for certificate validation error if the CApath is not explicitly set Tried several solution. But nothing works. It is causing so much of issue to install new ...
0
votes
1answer
232 views

How to setup ssl (https) for your site on Ubuntu Linux--Two way SSL

I have a website, the main requirement is to make that website secure by using https When the client access from a different machine it has to work only if the certificate had uploaded in the ...
0
votes
1answer
89 views

Getting OpenSSL aes output in hex format

I am trying to use openssl's aes implementation. The encryption and decryption is working fine but when I compare the ciphertext to an online implementation they don't match. openssl aes-256-cbc -a ...
1
vote
2answers
66 views

OpenSSL getting rollback automatically to default version in Ubuntu 12.04.4

I have installed Ubuntu 12.04.4 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1h version by refering this link. I have applied patch ...
1
vote
0answers
92 views

Verifying certificates signed by intermediate CA

I am trying to figure out how to use OpenSSL to verify a certificate that has been signed by an intermediate CA which I have signed with my root CA. I tried concatenating the certificate with the ...
3
votes
1answer
645 views

How to check which OpenSSL version is use by Apache on Ubuntu 12.04

I have installed Ubuntu12.04 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1g version by refering this link. Now I want to confirm ...
0
votes
1answer
219 views

Ubuntu 14.04.1 LTS and OpenSSL [duplicate]

Does Ubuntu Ubuntu 14.04.1 LTS have any OpenSSL vulnerabilities in connection with the Heartbleed bug? I downloaded the ISO today and I am installing it and I would like to know if there are any ...
0
votes
1answer
322 views

Setting up multiple SSL certificates on apache2 VirtualHost(s) - 14.04?

I am using apache2's VirtualHost feature on my Ubuntu 14.04 VPS to host two websites and a subdomain, for the conversation let's call them example1.com, example2.com and srv.example1.com. I am trying ...
0
votes
0answers
345 views

OpenSSL: bad magic number

I want to decrypt a file, I run: openssl enc -d -aes128 -in encrypted.txt -out decrypted.txt It asked me this: enter aes-128-cbc decryption password: Whatever I type, I get this: bad magic ...
1
vote
1answer
484 views

Fake UserTrust.com Certificates in Chrome?

I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab). Those are marked as Not Safe, and they are related to mail.google.com, ...
1
vote
1answer
309 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...
0
votes
0answers
74 views

Using pkg-config to build OpenVPN

I want to build OpenVPN 2.3.4 on Ubuntu 14.04. Therefore I downloaded and built the required libraries (lzo, openssl). I installed them in /opt. How do I ./configure OpenVPN with pkg-config to use the ...
0
votes
1answer
50 views

Is the compiled version of a binary dynamically linked to the system SSL library?

In my case I build nginx from source and I want to confirm whether I need to rebuild it whenever a new OpenSSL update is released. From what I understand either of these two commands can be used to ...
5
votes
3answers
5k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
5
votes
1answer
358 views

nut (UPS) and SSL certificates

Today I installed nut on my Ubuntu server (Ubuntu 14.04 LTS). $ uname -a Linux boson 3.13.0-24-generic #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux The UPS is connected ...
0
votes
0answers
77 views

How to setup an ubuntu VM running in windows azure to be connected to via ssh from 2 or more computers

I have an ubuntu VM hosted on Azure. When creating the VM, I was prompted to add a pem ssh key for authentication when I want to ssh to the VM. However, How do I set up this VM so that my other ...
1
vote
1answer
2k views

How to convert rsa key to pem using X.509 standard

I've converted an rsa key to pem using the following command openssl rsa -in ~/.ssh/id_rsa -outform pem > id_rsa.pem However when I try uploading this key to my ubuntu server hosted on Azure I ...
0
votes
1answer
78 views

Enabling SSL on Squid

I installed Squid server and I am trying to secure it. In many searches, I see that is possible to enable SSL for squid. Is there any security benefits for squid server to enable SSL on it?
0
votes
0answers
1k views

Update to Clamav 0.98.3

I'm running Ubuntu 12.04 LTS. Upon updating clam definitions with sudo freshclam I got the message that my current clam software (0.98.1) was outdated and that I should upgrade to 0.98.3., which I ...
0
votes
1answer
178 views

How to install Apache with Openssl 1.0.1?

I want to test Heartbleed on Apache Server. I removed Apache and Openssl from my OS (Ubutu 12.04). I wonder how can I install Apache WITH the Openssl version 1.0.1 in order to be able to test this ...
2
votes
2answers
68 views

Openssl version within Apache

I have installed (long time ago) Apache server on Ubuntu 12.04. How could I know the Openssl version my server is using ?
0
votes
0answers
24 views

Ubuntu 14.04 LTS and Heartbleed bug [duplicate]

Does Ubuntu 14.04 LTS on it's own, the desktop version and not the server version, contain any Heartbleed bug vulnerabilities? I need to install this on a business laptop and I don't want to open up ...
0
votes
1answer
251 views

Problems upgrading openssl to fix heartbleed - please advise

I'm trying to upgrade openssl but hit the following issue - please could you offer some advice on what is wrong here ? # sudo apt-get install openssl libssl1.0.0 Reading package lists... Done ...
1
vote
1answer
3k views

Error 255 when trying to install openssl-1.0.1g from source

installing man1/cms.1 cms.pod around line 457: Expected text after =item, not a number cms.pod around line 461: Expected text after =item, not a number cms.pod around line 465: Expected text after ...
1
vote
0answers
278 views

ProFTPD with OpenSSL error, help

I'm receiving this error message while trying to start Proftpd server on a 12.04 Ubuntu server: <"my_chosen_server_name"> proftpd[5897]: mod_tls/2.4.3: compiled using OpenSSL version 'OpenSSL ...
0
votes
0answers
199 views

Error 255 when installing openSSL from source

I need to build openssl from source because it's needed to build a mysql driver for android for Qt but when I do "make install" I get the following error: cms.pod around line 457: Expected text after ...
0
votes
0answers
46 views

Ruby OpenSSL vs Linux openssl

I have a difficulty reconciling Ruby's OpenSSL library with the standard Linux command line openssl. What I'm trying to do here is encrypt the string mysecretstring with the password foobar but first ...
4
votes
2answers
5k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
3
votes
2answers
3k views

OpenSSL remains vulnerable after update to 14.04

We have an AWS server running OpenVPN which was built using Ubuntu 13.10. After the announcement of the Heartbleed vulnerability, we updated the server. This morning, we upgraded the server to 14.04. ...
2
votes
1answer
5k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
1
vote
1answer
320 views

Openssl is either not installed properly or link to it is not working

Typing openssl version comes up with the following: The program 'openssl' is currently not installed. You can install it by typing: sudo apt-get install openssl Typing sudo apt-get install openssl ...
1
vote
0answers
577 views

Openssl - SHA256 (Base-64) using command line

I have to add hash total of a string to a file. Hash total is SHA-256 (Base-64). String stream would be as below: Transaction Type|External System Reference Number|Original External System ...
0
votes
0answers
334 views

How do I enable SSLv2 on openSSL

I have tried to enable openSSL with SSLv2 by downloading the sources, setting the 'enable SSLv2' options and compiling, as per the instructions here: ...
2
votes
4answers
444 views

I am using Ubuntu 12.04 as live desktop CD for banking am I subject to the Heartbleed bug?

I am not running any Apache or any thing that triggers ssl libray, so is there a service in Ubuntu that runs Open ssl by default? So, I am just booting live session for internet browser. Am I safe?
3
votes
1answer
268 views

Heartbleed and OpenVPN, am I safe?

I run my own OpenVPN server, since the discovery of heartbleed I updated OpenSSL, changed the server password and ran the command ./clean-all to erase all keys and certificates. And of course, I ...
-3
votes
1answer
104 views

Trying to Compile Latest OpenSSL from Source Fails With Errors [closed]

I'm running Ubuntu x86_64, and want to upgrade to OpenSSL 1.0.1.f. wget <openssl latest> tar -xzvf openssl.tar.gz cd <openssl dir> ./configure --prefix=/usr make In the console output, ...
0
votes
0answers
25 views

Heartbleed Ubuntu 13.04 stuck on OpenSSL 1.0.1c [duplicate]

Just noticed that my Ubuntu 13.04 install is stuck on an old version of OpenSSL. OpenSSL 1.0.1 14 Mar 2012 The distro is fully to to date, running apt-get update, then apt-get upgrade or apt-get ...
0
votes
2answers
101 views

How do we test after upgrading to 1.0.1-4ubuntu5.12 (any possible testing commands to know the configuration works after upgrade?)?

How do we test after upgrading to 1.0.1-4ubuntu5.12 (any possible testing commands to know the configuration is working right after upgrade)? Also note i had to reboot server after reboot: when ...