Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

2
votes
1answer
1k views

Curl requiring ciphers to be specified

I am trying to run this command: curl https://api-3t.sandbox.paypal.com/nvp On my ubuntu machine, it failes with the following error: curl: (35) error:14077410:SSL ...
1
vote
1answer
24 views

Will openssl on Ubuntu 12.04 and 14.04 be maintained after Dec 31, 2016?

12.04 (EOL April 2017) and 14.04 (EOL 2019) both appear to use openssl 1.0.1, which is apparently not going to be supported at all after December 31, 2016 (according to openssl.org/source). Will ...
1
vote
1answer
178 views

How to change SSLv3 to TLS?

In my Rails application when user pay for products get error. OpenSSL::SSL::SSLError (SSL_connect returned=1 errno=0 state=SSLv3 read server certificate B: certificate verify failed) Due to ...
1
vote
1answer
272 views

Python error “version OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0…” when trying to run command in PHP scrip (LAMPP)

When in Ubuntu 14.04: I run a command of script written in Python with shell it normally runs. I try to run same command using PHP (lampp) I get this error: [errors] => Traceback (most recent ...
1
vote
1answer
905 views

SNI not working ubuntu 14.04, multiple virtual host SSL on same IP

ubuntu 14.04 standard LAMP install. on single IP, I am trying to run two websites using SSL with SNI. I have two diff certs and they are being applied correctly. My issue is redirection from HTTP to ...
1
vote
1answer
556 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...
1
vote
1answer
1k views

Openssl is either not installed properly or link to it is not working

Typing openssl version comes up with the following: The program 'openssl' is currently not installed. You can install it by typing: sudo apt-get install openssl Typing sudo apt-get install openssl ...
0
votes
1answer
20 views

outdated stunnel,openssl versions Kubuntu 14.04

I have : stunnel 4.53 > when the latest version is 5.31 openssl 1.0.1f > when the latest version is 1.0.2g I've updated the system using apt-get but still with 4.53 and 1.0.1f , I have a security ...
0
votes
1answer
146 views

Completely remove openssl dev version

I installed openssl dev version from github. However, I now wish to remove it to install openssl from the official repos. I tried to remove it using sudo apt-get remove --purge openssl but it's still ...
0
votes
1answer
41 views

Missing opensslconf.h when compiling GIT

I decided to clone the git source into /usr/src and checked out to the latest stable version (since I currently have 1.9.1). During the compiling I received a few errors regarding missing ...
0
votes
1answer
29 views

Specific version of library is not available

I have two ubuntu ec2 instances as below. Instance 1: Distributor ID: Ubuntu Description: Ubuntu 14.04.2 LTS Release: 14.04 Codename: trusty Instance 2: Distributor ID: Ubuntu ...
0
votes
1answer
445 views

Curl with SSL failing to download with https (DigitalOcean Ubuntu Server 15.04)

Received this error message: curl: (77) error setting certificate verify locations: CAfile: /usr/local/opt/curl-ca-bundle/share/ca-bundle.crt CApath: /etc/ssl/certs ...when trying to install a ...
0
votes
1answer
61 views

Everything uninstalled on ubuntu 14.10

In process of downgrading openssl, trying to first remove its current version I did sudo apt-get purge openssl. Now it has uninstalled EVERYTIHING ON MY SYSTEM! openssl, octave..etc and I cant even ...
0
votes
1answer
518 views

Ldap with ssl server configuration in ubuntu 12.04 server

I have successfully installed ldap server on Ubuntu 12.04 and other Ubuntu client can authenticate successfully but I want to secure ldap client server communication with the help of ssl I searched ...
0
votes
1answer
5k views

OpenSSL not picking up CAs in certs folder by default

On Ubuntu 12.04 LTS, I am getting error for certificate validation error if the CApath is not explicitly set Tried several solution. But nothing works. It is causing so much of issue to install new ...
0
votes
1answer
2k views

Setting up multiple SSL certificates on apache2 VirtualHost(s) - 14.04?

I am using apache2's VirtualHost feature on my Ubuntu 14.04 VPS to host two websites and a subdomain, for the conversation let's call them example1.com, example2.com and srv.example1.com. I am trying ...
0
votes
1answer
177 views

Enabling SSL on Squid

I installed Squid server and I am trying to secure it. In many searches, I see that is possible to enable SSL for squid. Is there any security benefits for squid server to enable SSL on it?
0
votes
1answer
477 views

Problems upgrading openssl to fix heartbleed - please advise

I'm trying to upgrade openssl but hit the following issue - please could you offer some advice on what is wrong here ? # sudo apt-get install openssl libssl1.0.0 Reading package lists... Done ...
0
votes
1answer
5k views

Compiling cowpatty on Ubuntu 13.10 64bit fails

So, I downloaded cowpatty from their site[1] and I am trying to compile it. However, there is an error that prevents the make-process. root@phil-laptop:/home/phil/wifite-2.0r85/cowpatty-4.6# make cc ...
0
votes
1answer
355 views

Accept SSL cert for wrong domain

A site has recycled their SSL cert from another site which is causing me errors on the command line (wget, etc). They have 2 certs on different parts of the site both issued by the same authority ...
2
votes
0answers
771 views

Unable to compile 32 bit Qt 4.8.6 libraries on 64 bit machine

I am trying to build 32 bit Qt 4.8.6 libraries on Ubuntu 14.04. I have installed additional libraries sudo apt-get install libx32gcc-4.8-dev sudo apt-get install libc6-dev-i386 sudo apt-get install ...
2
votes
0answers
2k views

Openssl - SHA256 (Base-64) using command line

I have to add hash total of a string to a file. Hash total is SHA-256 (Base-64). String stream would be as below: Transaction Type|External System Reference Number|Original External System ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

Since I have not enough reputation to comment an existing Answer, I create this new question. I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I upgraded all ...
2
votes
0answers
1k views

Python requests SSL version

I am using the python requests module on Ubuntu 13.04. I keep getting the error: requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert ...
1
vote
0answers
91 views

How to use .p7b for Root CA in Ubuntu

I need to add a p7b root ca to Ubuntu, in order to connect to services/servers for my company. Based on what I have found on the internet, it seems that I need to convert this file to either .crt or ...
1
vote
0answers
66 views

When was SSLv2 disabled from OpenSSL in ubuntu 14.04 LTS?

I tried to find out without success when (in which package version) SSLv2 was disabled from OpenSSL in Ubuntu 14.04 LTS Trusty Tahr? Could anyone help me with this?
1
vote
0answers
190 views

How to set environment variable for sshd

I have Ubuntu server 14.04 on a server with openssl version 1.0.1f and openssh version 6.6. In my openssl.cnf I have subjectAltName=${ENV::ALTNAME} so that I can set subjectAltName on the commandline ...
1
vote
0answers
540 views

On connecting to MySQL via SSL getting ERROR 2026 (HY000): SSL connection error: protocol version mismatch

I am working with MySQL and generated the certificates to use with MySQL to enable SSL. Here are SSL configs: mysql> show variables like '%ssl%'; +---------------+----------------------------+ | ...
1
vote
0answers
145 views

Rebuild OpenSSL with -DPURIFY

I'm trying to rebuild OpenSSL according to these instructions. I'm having a problem with the very first line: sudo apt-get build-dep libssl-dev This response is given: Reading package lists... ...
1
vote
0answers
462 views

Using hardware Encryption instead of SSL

I am using Freescale iMX6 security processor's CAAM for encryption and decryption of data. But how do I make my system use the hardware encryption instead of software? Do I have to make changes to ...
1
vote
0answers
680 views

Verifying certificates signed by intermediate CA

I am trying to figure out how to use OpenSSL to verify a certificate that has been signed by an intermediate CA which I have signed with my root CA. I tried concatenating the certificate with the ...
1
vote
0answers
3k views

OpenSSL: bad magic number

I want to decrypt a file, I run: openssl enc -d -aes128 -in encrypted.txt -out decrypted.txt It asked me this: enter aes-128-cbc decryption password: Whatever I type, I get this: bad magic ...
1
vote
0answers
529 views

ProFTPD with OpenSSL error, help

I'm receiving this error message while trying to start Proftpd server on a 12.04 Ubuntu server: <"my_chosen_server_name"> proftpd[5897]: mod_tls/2.4.3: compiled using OpenSSL version 'OpenSSL ...
1
vote
0answers
1k views

Cannot install intermediate SSL certificate

So i've got this LAMP server running on ubuntu 12.04 with an SSL certificate installed. I've got the certificate and the .ca-bundle files in /etc/ssl/certs. The host file located in ...
0
votes
0answers
22 views

openssl s_client -connect gmail.com:443 -ssl3 not working

I have installed Ubuntu 16.04 LTS on my laptop for my testing. Connect to gmail.com using the following command. openssl s_client -connect gmail.com:443 -ssl3 But I get the following error: ...
0
votes
0answers
16 views

Secure certificates using TPM in ubuntu

I have a requirement to secure AD machine based certificates(.cert,.pem,.key files) using TPM chip in Ubuntu operating system. The requirements are as follows: The certificates that are downloaded ...
0
votes
0answers
24 views

“_CONF_get_section” undefined symbol libcrypto error with Ubuntu 16.0.4 LTS

I am trying to build my application on Ubuntu 16.0.4 LTS with openssl. I installed openssl using the following commands: sudo apt-get install openssl sudo apt-get install libssl-dev At the linking ...
0
votes
0answers
24 views

SSL peer shut down incorrectly

I am getting the following error when launching a jnlp file It says - javax.net.ssl.SSLException: SSL peer shut down incorrectly. This issue is occurring intermittently The SSL version used is ...
0
votes
0answers
38 views

openssl/ec_lcl.h not found

I'm trying to build a program that uses OpenSSL. But I get an error: fatal error: openssl/ec_lcl.h: No such file or directory And it is right. There is no such file in /usr/include or anywhere ...
0
votes
0answers
204 views

When installing php from source configure: error: Cannot find OpenSSL's <evp.h>

I am trying to build php from source but ./configure gives error configure: error: Cannot find OpenSSL's my openssl version returns OpenSSL 1.0.2f 28 Jan 2016 and which openssl ...
0
votes
0answers
89 views

libssl dependency issue with vmware Horizon client on trusty

I installed vmware-view Horizon Client 3.5.0.299900, on Ubuntu 14.04 Trusty It installed fine by executing the "bundle" file. When I try to run the app (/usr/lib/vmware/view/bin/vmware-view), it gives ...
0
votes
0answers
19 views

How do I delete the folder ssl compensation?

I was a big mistake. I removed directory /etc/ssl/ on vps (ubuntu base). I reinstall openssl, but now not work git and Postgresql (because removed certificate files) I do not have a backup of the ...
0
votes
0answers
68 views

Weechat can't load SSL certificate or pem for relay from default folder

I created a certificate with openssl : openssl genpkey -out key.pem -algorithm RSA -pkeyopt rsa_keygen_bits:2048 openssl req -new -key key.pem -out csr.pem -subj /CN=example.com/ Then I registered ...
0
votes
0answers
1k views

OpenSSL: socket: Connection refused connect:errno=111 Cent OS

I'm facing this problem.Actually I'm trying to disable SSLV3 and enable TLS 1.2 in my Cent OS production server.I found exact same question here. [root@186-aven-vps ~]# openssl s_client -connect ...
0
votes
0answers
292 views

Apache2 on Ubuntu server SSL certificate getting overwritten

my webserver is eternialogic.com I have an instantssl.com free 90-day license key. Whenever I goto eternialogic.com, it says that the certificate is "self-signed" for ubuntu. Error.log: [Wed Oct 14 ...
0
votes
0answers
39 views

Can't get my backupscript to work?

I wrote a backupscript to make things easier on my desktop and server. But now the retrieve script isn't working. I'll post both script so you can get an idea of what I'm trying to do. I got my ...
0
votes
0answers
60 views

How to disable SSLV3 on ESXi5.5 to remediate poodle vulnerability

Is there any known way to disable SSLv3 support on ESXI5.5 and Vsphere client 5.5...
0
votes
0answers
131 views

Ubuntu 12.04 LTS enable TLS 1.2

I need to enable TLS 1.2 for a machine running Ubuntu 12.04 LTS. The machine us used to run a local credit card server that communicates with a pin pad and an external card handling server. The ...
0
votes
0answers
45 views

How do I compare my openssl version with non-ubuntu openssl versions?

I have an ongoing problem where every time an openssl vulnerability is found, the announcement documentation tells me what versions of openssl are safe -- but ubuntu doesn't actually use the same ...
0
votes
0answers
22 views

How to use a signed certificate by external server?

I need to configure HTTPS on Server1 by using a certificate signed by Server2. I did this command on Server2: openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout /etc/apache2/ssl/apache.key ...