Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

133
votes
6answers
93k views

How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?

As of today, a bug in OpenSSL has been found affecting versions 1.0.1 through 1.0.1f (inclusive) and 1.0.2-beta. Since Ubuntu 12.04, we are all vulnerable to this bug. In order to patch this ...
40
votes
5answers
41k views

How do I quickly encrypt a file with AES?

I want to encrypt a file using AES-256. How can I do that quickly and easily, and how can I - or someone else -decrypt it again?
18
votes
3answers
16k views

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can ...
11
votes
3answers
35k views

Upgrade OpenSSL on Ubuntu 12.04

I wanted to upgrade OpenSSL to 1.0.1 on an Ubuntu 12.04 system. I have noticed that an apt-get upgrade openssl does not end up upgrading OpenSSL. Is the newer OpenSSL supported on Ubuntu? I have also ...
11
votes
1answer
3k views

How to patch Ubuntu EOL for Heartbleed / cve-2014-0160? [closed]

I still have an Ubuntu 13.04 Raring Ring server that I am running. I need to patch it for Heartbleed / cve-2014-0160 bug, but Canical no longer is supporting it. What do I do? References: ...
11
votes
3answers
2k views

How to enable TLS 1.2 in Nginx?

How do I enable TLS 1.1 and 1.2 for SSL connections in my Ubuntu 12.04 server? I am using the following version of nginx and openssl library. $ ./nginx -v nginx version: nginx/1.2.3 $ openssl ...
10
votes
2answers
10k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
9
votes
0answers
8k views

Am I affected? Heartbleed bug [duplicate]

I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
8
votes
2answers
8k views

Do I need to take action on a 10.04 LTS server to avoid the heartbleed vulnerability?

From the heartbleed.com website, I see that OpenSSL 0.9.8 is NOT vulnerable, which is the version that is available on 10.04. That should mean that actually having stuck with 10.04 until now has ...
8
votes
1answer
887 views

Is there a modern and clear tutorial on setting up SSL for localhost / testing use?

Let's say I'm developing a script for login.example.com. I have absolutely no access to login.example.com, but that page loads a script on assets.example.com (which I have access to). To test how ...
7
votes
3answers
21k views

How would you install OpenSSL package for Ruby?

I have trouble finding the package for this software. I built and installed from the packages found here, but it's still not working properly with rvm and gem (log is located here). How would you ...
6
votes
1answer
783 views

OpenSSL not picking up CAs in certs folder

We're having trouble with curl not connecting to an HTTPS server: $ curl https://the-problem-site.com (not the real URL!) curl: (35) error:14077458:SSL ...
5
votes
4answers
5k views

Enabling SSL in MySQL

I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL. I've generated the following keys/certs files with OpenSSL: ca-cert.pem server-cert.pem server-key.pem I stored ...
4
votes
3answers
3k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
4
votes
2answers
4k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
4
votes
2answers
226 views

Dependency errors in Ubuntu installation

I'm trying to fix an APT setup in an Ubuntu server to which I only have SSH access and can't make head or tail of the dependency errors. I've run sudo apt-get install -f, and get the following: ...
4
votes
1answer
2k views

Can't pass PCI scans for vulnerability compliance SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS

I'm trying to pass a pci scan, I'm on Ubuntu 12.04 lts server and Nginx. I've tried everything I know and did a lot of research... apparently seems that need to disable a setting in OpenSSL which I ...
4
votes
2answers
1k views

Ubuntu 12.04 LTS, SSL, IRC: Unable to build with OpenSSL

I have a small server running Ubuntu 12.04 LTS. On it I wanted to set up IRC with SSL support. it appears that ircd-hybrid is most popular. I am not married to using it so other options are welcome. ...
4
votes
1answer
165 views

nut (UPS) and SSL certificates

Today I installed nut on my Ubuntu server (14.03). $ uname -a Linux boson 3.13.0-24-generic #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux The UPS is connected to another ...
3
votes
1answer
8k views

PHP OpenSSL extension has a package?

I know that OpenSSL extension is in PHP source, but I can't enable it when I perform apt-get install php5. There is not even a apt-get install php5-openssl. How I must proceed?
3
votes
1answer
3k views

What is “openssl binaries” and “openssl development package”?

Build it using general C development environment with bash, gcc (3 or 4 series), make, etc on a linux machine. Building pre-requirements are: ** 1. openssl binaries; 2. openssl ...
3
votes
1answer
76 views

How to check which OpenSSL version is use by Apache on Ubuntu 12.04

I have installed Ubuntu12.04 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1g version by refering this link. Now I want to confirm ...
3
votes
3answers
3k views

Where are PEM files stored for validating SSL certificates?

I am writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though it is a world famous betting site that I know ...
3
votes
2answers
1k views

OpenSSL remains vulnerable after update to 14.04

We have an AWS server running OpenVPN which was built using Ubuntu 13.10. After the announcement of the Heartbleed vulnerability, we updated the server. This morning, we upgraded the server to 14.04. ...
3
votes
1answer
258 views

Heartbleed and OpenVPN, am I safe?

I run my own OpenVPN server, since the discovery of heartbleed I updated OpenSSL, changed the server password and ran the command ./clean-all to erase all keys and certificates. And of course, I ...
2
votes
4answers
398 views

I am using Ubuntu 12.04 as live desktop CD for banking am I subject to the Heartbleed bug?

I am not running any Apache or any thing that triggers ssl libray, so is there a service in Ubuntu that runs Open ssl by default? So, I am just booting live session for internet browser. Am I safe?
2
votes
1answer
3k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
2
votes
1answer
2k views

Upgrading openssl on Ubuntu 10.04.4 LTS - Heartbleed

I have a Server which is using Ubuntu 10.04.4 LTS. I read that this OS version is not effected because it comes with older version of openssl, 0.9.8 or similar. But my Server show following on running ...
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
2
votes
1answer
4k views

Why do I get “undefined reference” errors when linking against OpenSSL?

My compilation process throws around errors like ..undefined reference to `BN_cmp' although I include <openssl/bn.h> and run gcc -lssl -lcrypto test.c -o test can someone help? (openssl ...
2
votes
1answer
2k views

What does BuildID SHA1 mean?

I was exploring around in the ubuntu unity terminal window when this came up: When I typed: file /bin/ls the output is: /bin/ls: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically ...
2
votes
2answers
56 views

Openssl version within Apache

I have installed (long time ago) Apache server on Ubuntu 12.04. How could I know the Openssl version my server is using ?
2
votes
1answer
1k views

vsftpd will not start with SSL enabled

I am having a problem trying to set up an FTPS server on my Ubuntu Server 13.10 machine. I have vsftpd installed. When I try to start the service using sudo service vsftpd start I get : vsftpd ...
2
votes
2answers
268 views

Encrypting and decrypting single file with master password and passphrase

Last night my system shutdown unexpectedly and when i restart it, it gave me superblock error. will then i fixed a little but. i was able to retrive my encrypted files which i encrypted my pgp public ...
2
votes
1answer
1k views

Why can't I use an OpenSSL key pair with ecryptfs?

According to documentation, I simply create a public/private keypair for ecryptfs using ecryptfs-manager. But there is nothing to select. $ sudo ecryptfs-manager eCryptfs key management menu ...
2
votes
1answer
19 views

OpenSSL installed, but Ruby unable to require it

I'm trying to setup github-pages on my Ubuntu laptop, and following the guide provided by Github I have to install the bundler package; giving the command ~$ gem install bundler returns me this ...
2
votes
1answer
2k views

How to enable OpenSSL for PHP Cli?

There is no major difference in the php.ini files located at /etc/php5/apache2/php.ini and /etc/php5/cli/php.ini. But <?php phpinfo(); ?> when accessed from a browser says OpenSSL support ...
2
votes
1answer
93 views

Postfix SMTP-AUTH

On a VPS with Ubuntu 12.04 server, I have install and configure postfix. For the SMTP-AUTH I used the mail-stack-delivery package (previously packaged as dovecot-postfix). sudo apt-get install ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

Since I have not enough reputation to comment an existing Answer, I create this new question. I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I upgraded all ...
2
votes
0answers
286 views

Python requests SSL version

I am using the python requests module on Ubuntu 13.04. I keep getting the error: requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert ...
1
vote
2answers
30 views

OpenSSL getting rollback automatically to default version in Ubuntu 12.04.4

I have installed Ubuntu 12.04.4 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1h version by refering this link. I have applied patch ...
1
vote
1answer
39 views

Fake UserTrust.com Certificates in Chrome?

I was trying to install a SSL certificate, when I digged into Chrome Settings and looked at the installed ones (servers tab). Those are marked as Not Safe, and they are related to mail.google.com, ...
1
vote
1answer
2k views

Error 255 when trying to install openssl-1.0.1g from source

installing man1/cms.1 cms.pod around line 457: Expected text after =item, not a number cms.pod around line 461: Expected text after =item, not a number cms.pod around line 465: Expected text after ...
1
vote
1answer
193 views

Does Ubuntu provide patched version of openssl for 12.10? [duplicate]

12.10 is right at end of life in April 2014.
1
vote
2answers
337 views

Fixing nginx 1.4.6 dependency on old openssl version (libssl0.9.8)?

I'm trying to enable TLSv1.1 & TLSv1.2 on my Ubuntu 12.04 EC2 instance w/ nginx 1.4.6, but this version of nginx is dependent upon libssl0.9.8, even though the newest version of OpenSSL is ...
1
vote
2answers
4k views

Can't find openssl

I'm trying to work with Boost:asio to establish a SSL connection. Now, my compiler says, it can't find openssl/conf.h I'd like to know where this path is and how to fix this problem. Thanks in ...
1
vote
1answer
3k views

How can I backup and encrypt with tar, split and openssl, all in one command?

I often use tar to backup my stuff in 4 gigabyte chunks to a directory on a FAT32-formatted disk, as documented here. To get that done, I use the following command: tar -cvpj /path/to/directory/ | ...
1
vote
2answers
4k views

Install ruby 1.9.2-p180 via RVM on Ubuntu 12.04

I just upgraded to the newest Ubuntu release and this broke my ruby on rails setup. I would like to install ruby 1.9.2-p180 now via RVM: rvm install ruby-1.9.2-p180 This is cancelled due to some ...
1
vote
0answers
22 views

Verifying certificates signed by intermediate CA

I am trying to figure out how to use OpenSSL to verify a certificate that has been signed by an intermediate CA which I have signed with my root CA. I tried concatenating the certificate with the ...
1
vote
1answer
160 views

Ubuntu 12.04 LTS, openssl 1.0.1-4ubuntu5.16 and CVE-2014-0224

I've installed openssl 1.0.1-4ubuntu5.16 on my Ubuntu 12.04 LTS and restarted nginx. I still receive the warning from https://www.ssllabs.com/ssltest Experimental: This server is vulnerable to the ...