Questions tagged [openssl]
Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols
52
questions
153
votes
6
answers
126k
views
How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?
As of today, a bug in OpenSSL has been found affecting versions 1.0.1 through 1.0.1f (inclusive) and 1.0.2-beta.
Since Ubuntu 12.04, we are all vulnerable to this bug. In order to patch this ...
- 18.9k
69
votes
5
answers
177k
views
Ubuntu 20.04 - how to set lower SSL security level?
I'd like to ask if there's a way to lower SSL security level to 1 on Ubuntu 20.04, since I'm receiving:
141A318A:SSL routines:tls_process_ske_dhe:dh key too small
when trying to curl the website.
...
4
votes
2
answers
9k
views
Is Ubuntu 14.04 secure against heart bleed bug [duplicate]
I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
- 5,001
3
votes
3
answers
11k
views
OpenSSL remains vulnerable after update to 14.04 [duplicate]
We have an AWS server running OpenVPN which was built using Ubuntu 13.10. After the announcement of the Heartbleed vulnerability, we updated the server. This morning, we upgraded the server to 14.04. ...
- 39
2
votes
1
answer
2k
views
SSLv3 error with cert generated in OpenSSL
I generated self-signed certificate with latest Ubuntu OS and OpenSSL in it. Certificate has RSA 4096 and SHA512...but it uses SSLv3 and from mozilla I can not access the web page because Mozilla does ...
- 123
35
votes
1
answer
111k
views
How to upgrade OpenSSL 1.1.0 to 1.1.1 in Ubuntu 18.04?
I have been running a production server with Ubuntu 18 installed.
Recently, I found that my web application was not allowed on some of the firewalls installed at the customer location.
I found that ...
- 467
20
votes
3
answers
142k
views
Upgrade OpenSSL on Ubuntu 12.04
I wanted to upgrade OpenSSL to 1.0.1 on an Ubuntu 12.04 system. I have noticed that an apt-get upgrade openssl does not end up upgrading OpenSSL. Is the newer OpenSSL supported on Ubuntu?
I have also ...
- 253
14
votes
4
answers
30k
views
Error 255 when trying to install openssl-1.0.1g from source
installing man1/cms.1
cms.pod around line 457: Expected text after =item, not a number
cms.pod around line 461: Expected text after =item, not a number
cms.pod around line 465: Expected text after =...
- 141
12
votes
2
answers
61k
views
How to install openssl 1.0.2 with default openssl (1.1.1) on Ubuntu 16.04?
P4Python does not work on Ubuntu 16.04 since the distribution comes with OpenSSL 1.1.0g.(details). I am trying to build P4Python from source using --ssl path/to/openssl1.0. I need to install OpenSSL 1....
- 537
6
votes
1
answer
19k
views
16.04 - curl: (35) gnutls_handshake() failed: Error in the pull function
When trying to connect to a HTTPS websites, I get this error curl: (35) gnutls_handshake() failed: Error in the pull function..
In detail:
curl -vvv "https://example.tld"
* Rebuilt URL to: https://...
- 61
3
votes
1
answer
404
views
How do new package versions find their way to the LTS distribution? (Current example: OpenSSL)
I'm running several Ubuntu 18.04 machines all of which need OpenSSL.
Recently, OpenSSL reported a security problem: https://www.openssl.org/news/secadv/20200421.txt (CVE-2020-1967).
I did install ...
- 228
1
vote
1
answer
2k
views
OpenSSL compilation fails
I try to compile the latest version but I get this error message.
$ make OPENSSL=/usr/local/ssl
Makefile:82: ../aolserver/include/Makefile.module: No such file or directory
make: *** No rule to make ...
- 3,337
0
votes
1
answer
2k
views
Override Distro Package with Custom Package?
Ubuntu 12.04 LTS provides OpenSSL 1.0.1e, but it disables TLSv1.1 and TLSv1.2. In the past it was an interop decision because of broken client implementations. In 2014, its really not appropriate ...
user207039
31
votes
13
answers
90k
views
module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK'
I was using python 3.6 on my ubuntu machine and faced this error when doing some testing:
CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support ...
- 413
31
votes
1
answer
48k
views
How to install openssl 3.0.7 on Ubuntu 22.04? [duplicate]
There's a highest severity security hole in openssl v3.0.x where x<7. The patched version (3.0.7) has officially dropped on November 1, 2022.
How to install/update openssl 3.0.7 on an Ubuntu 22.04 ...
- 1,355
26
votes
7
answers
40k
views
Enabling SSL in MySQL
I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL.
I've generated the following keys/certs files with OpenSSL:
ca-cert.pem
server-cert.pem
server-key.pem
I stored these ...
- 361
14
votes
7
answers
76k
views
libcrypto.so.1.0.0: no version information available (required by ssh)
I get the following error:
jalal@klein:~$ ssh -i "hyunwoo_key.pem" [email protected]
ssh: /home/jalal/computer_vision/MCR/v901/bin/glnxa64/libcrypto.so.1.0.0: no version ...
- 4,545
10
votes
2
answers
11k
views
Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?
NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on.
I am seeing conflicting information with respect to Ubuntu 12.04:
The Heartbleed page claims ...
- 402
10
votes
2
answers
37k
views
When I try to CURL a website I get SSL error
I installed Ubuntu 20 on my VPS. This is why I'm trying to do:
curl -v https://imenik.tportal.hr/show?action=pretraga&type=bijeleStranice
[1] 438975
root@vps:/var/www/html/tportal# * Trying 195....
- 203
6
votes
4
answers
51k
views
Which TLS protocols are enabled in Ubuntu 14.04's OpenSSL?
This is a follow up to Override Distro Package with Custom Package?.
Does anyone know if Ubuntu 14.04's OpenSSL enables all TLS protocols (TLS1.0, TLS1.1 and TLS1.2)? Or does it have protocols ...
user207039
6
votes
1
answer
3k
views
openSSL 1.1.1 security bug CVE-2020-1971 [duplicate]
I just read a description of CVE-2020-1971, which indicates that a patch was released today for openSSL, the patched version is 1.1.1i -- my version of Ubuntu 20.04.1 LTS is running openSSL version 1....
- 197
6
votes
1
answer
4k
views
Why hasn't Trusty received the updates for OpenSSL's CVE-2016-2108 and CVE-2016-2107? [duplicate]
OpenSSL released a security advisory, warning users of two recently discovered vulnerabilities:
Memory corruption in the ASN.1 encoder (CVE-2016-2108)
Padding oracle in AES-NI CBC MAC check (CVE-2016-...
- 32.2k
2
votes
1
answer
34k
views
error while loading shared libraries: libssl.so.1.1 (and libcrypto.so.1.1)
As you can see I'm missing libcrypto and libssl files. I locked out myself from my server after running apt-update and apt-upgrade, I'm running this from web console, because ssh nor any other program ...
- 227
51
votes
2
answers
70k
views
How should I change encryption according to *** WARNING : deprecated key derivation used
When I encrypt or decrypt a file I get:
*** WARNING : deprecated key derivation used.
Using -iter or -pbkdf2 would be better.
I do not understand what this means, and how I should change my ...
- 1,069
34
votes
3
answers
258k
views
PHP OpenSSL extension has a package?
I know that OpenSSL extension is in PHP source, but I can't enable it when I perform apt-get install php5. There is not even a apt-get install php5-openssl. How I must proceed?
30
votes
1
answer
49k
views
What is "openssl binaries" and "openssl development package"?
Build it using general C development environment with bash, gcc (3 or
4 series), make, etc on a linux machine.
Building pre-requirements are:
**
1. openssl binaries;
2. openssl ...
- 531
28
votes
3
answers
80k
views
How do I use OpenSSL 1.1.1 in Ubuntu 22.04?
I understand that Ubuntu 22.04 upgraded to OpenSSL 3.0. This has broken my university's secure WiFi access point joining script because "some insecure algorithms have been disabled by default&...
- 391
24
votes
3
answers
95k
views
Where are PEM files stored for validating SSL certificates?
I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate.
Just to make ...
- 2,251
24
votes
4
answers
202k
views
How to install OpenSSL 1.1.1 and libSSL package?
I want to use OpenSSL1.1.1 version for my code development. Currently I am working with Openssl 1.1.0g on Ubuntu 18.04 machine.
If I download the package with the command sudo apt install libssl-dev, ...
- 425
21
votes
3
answers
51k
views
How to enable TLS 1.2 in Nginx?
How do I enable TLS 1.1 and 1.2 for SSL connections in my Ubuntu 12.04 server? I am using the following version of nginx and openssl library.
$ ./nginx -v
nginx version: nginx/1.2.3
$ openssl ...
- 393
18
votes
6
answers
66k
views
opensslconf.h not found
I'm trying to build znort987's parser, and have executed sudo apt-get libssl-dev. I can see all sorts of ssl related header files in /usr/include/openssl but opensslconf.h is missing from the openssl ...
15
votes
1
answer
37k
views
How to check which OpenSSL version is use by Apache on Ubuntu 12.04
I have installed Ubuntu12.04 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1g version by refering this link.
Now I want to confirm ...
- 275
15
votes
1
answer
14k
views
What does BuildID SHA1 mean?
I was exploring around in the ubuntu unity terminal window when this came up:
When I typed:
file /bin/ls
the output is:
/bin/ls: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically ...
- 1,659
14
votes
9
answers
37k
views
Setting up barrier to run on startup
Barrier is a free popular KVM software that enables mouse/keyboard sharing across several devices.
I've been fiddling with it for a few hours and I can't seem to get it right.
I have a barrier ...
- 303
11
votes
1
answer
41k
views
How to fix Microsoft ODBC Driver 17 for SQL Server : SSL Provider ssl_choose_client_version:unsupported protocol
I have installed Sql Server 2019 Developer Edition and mssql-tools on my Ubuntu 20.04 minimal.
I can connect to my localhost with no issue, but when I want to remote to another sql server:
sqlcmd -S &...
- 223
9
votes
0
answers
8k
views
Am I affected? Heartbleed bug [duplicate]
I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
- 116
9
votes
1
answer
23k
views
Fake UserTrust.com Certificates in Chrome?
I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab).
Those are marked as Not Safe, and they are related to mail.google.com, ...
- 733
9
votes
3
answers
19k
views
nut (UPS) and SSL certificates
Today I installed nut on my Ubuntu server (Ubuntu 14.04 LTS).
$ uname -a
Linux boson 3.13.0-24-generic #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
The UPS is connected ...
- 740
8
votes
2
answers
68k
views
Installing latest cmake on Ubuntu 18.04.3 LTS run via WSL: OpenSSL error
Using CLion on Windows (a C++ IDE), I'd like to install the latest version of cmake on Ubuntu 18.04.3 LTS run via WSL (the current version of CLion requires cmake > 3.15, while I have only version 3....
- 183
7
votes
2
answers
31k
views
Can't find openssl
I'm trying to work with Boost:asio to establish a SSL connection.
Now, my compiler says, it can't find openssl/conf.h
I'd like to know where this path is and how to fix this problem.
Thanks in ...
- 177
7
votes
3
answers
11k
views
How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?
I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1.
As I understand, I have to upgrade to 1....
- 1,227
3
votes
1
answer
33k
views
Generate private key encrypted with password using openssl
I'm using openssl to sign files, it works but I would like the private key file is encrypted with a password. These are the commands I'm using, I would like to know the equivalent commands using a ...
- 163
2
votes
2
answers
4k
views
wpa_supplicant/OpenSSL connection problems after 22.04 upgrade
My office WiFi uses WPA & WPA2 Enterprise Security with PEAP authentication, and MSCHAPv2 for inner authentication.
Since upgrading to Ubuntu 22.04, I am unable to connect to my office WiFi. Here'...
- 171
2
votes
5
answers
9k
views
Broken pip due to bad OpenSSL module
whenever I run pip (python -m pip) I get the following error message:
Traceback (most recent call last):
File "/usr/bin/pip", line 11, in <module>
load_entry_point('pip==20.0.2'...
- 31
2
votes
1
answer
6k
views
openssl s_client -connect gmail.com:443 -ssl3 not working
I have installed Ubuntu 16.04 LTS on my laptop for my testing. Connect to gmail.com using the following command.
openssl s_client -connect gmail.com:443 -ssl3
But I get the following error:
...
- 31
1
vote
1
answer
2k
views
Bind9 (named) does not start after upgrade from 9.16.1 to 9.16.15
I am using bind9 on Ubuntu 21.10. Under an older Version of bind9, everything is working fine:
$ named -v
BIND 9.16.1-Ubuntu (Stable Release) <id:[censored]>
However, when I am upgrading bind9 ...
- 41
1
vote
2
answers
5k
views
Can't install python-pip
I can't install the package. I tried it with the command 'sudo apt-get install python-pip python-dev build-essential'
and I got the output:
Reading package lists... Done
Building dependency tree
...
- 333
1
vote
1
answer
5k
views
undefined symbol: EVP_idea_cbc when using wget
When try to run this sudo wget http://www.openssl.org/source/openssl-1.1.1.tar.gz I get the error below:
wget: /usr/local/ssl/lib/libssl.so.1.0.0: no version information available (required by ...
0
votes
2
answers
3k
views
Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?
I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
- 101
0
votes
1
answer
711
views
Different output for ldd between sudo and root
on my system, the output for ldd /usr/bin/openssl differers between the regular user, root and sudo.
This is the output for the regular user:
$ whoami
myname
$ ldd /usr/bin/openssl
linux-vdso.so.1 ...
- 41