Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

learn more… | top users | synonyms

141
votes
6answers
112k views

How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?

As of today, a bug in OpenSSL has been found affecting versions 1.0.1 through 1.0.1f (inclusive) and 1.0.2-beta. Since Ubuntu 12.04, we are all vulnerable to this bug. In order to patch this ...
50
votes
4answers
67k views

How do I quickly encrypt a file with AES?

I want to encrypt a file using AES-256. How can I do that quickly and easily, and how can I - or someone else -decrypt it again?
18
votes
3answers
18k views

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can ...
13
votes
3answers
65k views

Upgrade OpenSSL on Ubuntu 12.04

I wanted to upgrade OpenSSL to 1.0.1 on an Ubuntu 12.04 system. I have noticed that an apt-get upgrade openssl does not end up upgrading OpenSSL. Is the newer OpenSSL supported on Ubuntu? I have also ...
12
votes
1answer
14k views

What is “openssl binaries” and “openssl development package”?

Build it using general C development environment with bash, gcc (3 or 4 series), make, etc on a linux machine. Building pre-requirements are: ** 1. openssl binaries; 2. openssl ...
11
votes
5answers
12k views

Enabling SSL in MySQL

I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL. I've generated the following keys/certs files with OpenSSL: ca-cert.pem server-cert.pem server-key.pem I stored ...
10
votes
2answers
10k views

Patch OpenSSL CVE-2014-0160 on ubuntu 12.04?

NO, this is not a duplicate of How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?. So, read on. I am seeing conflicting information with respect to Ubuntu 12.04: The Heartbleed page claims ...
10
votes
3answers
8k views

How to enable TLS 1.2 in Nginx?

How do I enable TLS 1.1 and 1.2 for SSL connections in my Ubuntu 12.04 server? I am using the following version of nginx and openssl library. $ ./nginx -v nginx version: nginx/1.2.3 $ openssl ...
9
votes
1answer
1k views

Is there a modern and clear tutorial on setting up SSL for localhost / testing use?

Let's say I'm developing a script for login.example.com. I have absolutely no access to login.example.com, but that page loads a script on assets.example.com (which I have access to). To test how ...
9
votes
0answers
8k views

Am I affected? Heartbleed bug [duplicate]

I've just learned about the Heartbleed Bug (OpenSSL leaking private keys), and based on the website, heartbleed.com, it says that OpenSSL 1.0.1 through version f is affected. However it leaves off ...
8
votes
2answers
8k views

Do I need to take action on a 10.04 LTS server to avoid the heartbleed vulnerability?

From the heartbleed.com website, I see that OpenSSL 0.9.8 is NOT vulnerable, which is the version that is available on 10.04. That should mean that actually having stuck with 10.04 until now has ...
7
votes
3answers
21k views

How would you install OpenSSL package for Ruby?

I have trouble finding the package for this software. I built and installed from the packages found here, but it's still not working properly with rvm and gem (log is located here). How would you ...
7
votes
1answer
2k views

OpenSSL not picking up CAs in certs folder

We're having trouble with curl not connecting to an HTTPS server: $ curl https://the-problem-site.com (not the real URL!) curl: (35) error:14077458:SSL ...
6
votes
1answer
8k views

How to convert rsa key to pem using X.509 standard

I've converted an rsa key to pem using the following command openssl rsa -in ~/.ssh/id_rsa -outform pem > id_rsa.pem However when I try uploading this key to my ubuntu server hosted on Azure I ...
6
votes
2answers
1k views

nut (UPS) and SSL certificates

Today I installed nut on my Ubuntu server (Ubuntu 14.04 LTS). $ uname -a Linux boson 3.13.0-24-generic #47-Ubuntu SMP Fri May 2 23:30:00 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux The UPS is connected ...
5
votes
3answers
8k views

How to patch the Vulnerability [CVE-2014-0224] in OpenSSL?

I've received a warning from the authority that generated my certificate, it says that there is bug in OpenSSL and it has been found affecting versions 1.0.1. As I understand, I have to upgrade to ...
5
votes
1answer
4k views

How to check which OpenSSL version is use by Apache on Ubuntu 12.04

I have installed Ubuntu12.04 on my machine and it got heartBleed version of OpenSSL 1.0.1. So I uninstalled OpenSSL 1.0.1 and install new 1.0.1g version by refering this link. Now I want to confirm ...
4
votes
2answers
7k views

Is Ubuntu 14.04 secure against heart bleed bug [duplicate]

I have read that there is a bug in SSL called heart bleed bug. Has Ubuntu 14.04 shipped along with this bug or has it been resolved in this release?
4
votes
1answer
3k views

What does BuildID SHA1 mean?

I was exploring around in the ubuntu unity terminal window when this came up: When I typed: file /bin/ls the output is: /bin/ls: ELF 64-bit LSB executable, x86-64, version 1 (SYSV), dynamically ...
4
votes
2answers
485 views

Dependency errors in Ubuntu installation

I'm trying to fix an APT setup in an Ubuntu server to which I only have SSH access and can't make head or tail of the dependency errors. I've run sudo apt-get install -f, and get the following: ...
4
votes
1answer
22k views

PHP OpenSSL extension has a package?

I know that OpenSSL extension is in PHP source, but I can't enable it when I perform apt-get install php5. There is not even a apt-get install php5-openssl. How I must proceed?
4
votes
1answer
47 views

OpenSSH client not connecting after deleting id_rsa

So I stupidly overwrote my id_rsa and id_rsa.pub files earlier, and I just decied to rm -rf the whole .ssh folder because it was all corrupted/broken after tinkering with it. Ever since that when I ...
4
votes
3answers
9k views

Where are PEM files stored for validating SSL certificates?

I am writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though it is a world famous betting site that I know ...
4
votes
1answer
2k views

Can't pass PCI scans for vulnerability compliance SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS

I'm trying to pass a pci scan, I'm on Ubuntu 12.04 lts server and Nginx. I've tried everything I know and did a lot of research... apparently seems that need to disable a setting in OpenSSL which I ...
4
votes
2answers
2k views

Ubuntu 12.04 LTS, SSL, IRC: Unable to build with OpenSSL

I have a small server running Ubuntu 12.04 LTS. On it I wanted to set up IRC with SSL support. it appears that ircd-hybrid is most popular. I am not married to using it so other options are welcome. ...
4
votes
1answer
128 views

How to compile ffmpeg with https support

I have installed both openssl and openssl-dev, with these: sudo apt-get install openssl sudo apt-get install libssl-dev And has install ffmpeg by these: sudo add-apt-repository ...
3
votes
1answer
3k views

Upgrading openssl on Ubuntu 10.04.4 LTS - Heartbleed

I have a Server which is using Ubuntu 10.04.4 LTS. I read that this OS version is not effected because it comes with older version of openssl, 0.9.8 or similar. But my Server show following on running ...
3
votes
1answer
5k views

vsftpd will not start with SSL enabled

I am having a problem trying to set up an FTPS server on my Ubuntu Server 13.10 machine. I have vsftpd installed. When I try to start the service using sudo service vsftpd start I get : vsftpd ...
3
votes
2answers
6k views

OpenSSL remains vulnerable after update to 14.04

We have an AWS server running OpenVPN which was built using Ubuntu 13.10. After the announcement of the Heartbleed vulnerability, we updated the server. This morning, we upgraded the server to 14.04. ...
3
votes
1answer
7k views

How to enable OpenSSL for PHP Cli?

There is no major difference in the php.ini files located at /etc/php5/apache2/php.ini and /etc/php5/cli/php.ini. But <?php phpinfo(); ?> when accessed from a browser says OpenSSL support ...
3
votes
1answer
2k views

Why can't I use an OpenSSL key pair with ecryptfs?

According to documentation, I simply create a public/private keypair for ecryptfs using ecryptfs-manager. But there is nothing to select. $ sudo ecryptfs-manager eCryptfs key management menu ...
3
votes
3answers
3k views

opensslconf.h not found

I'm trying to build znort987's parser, and have executed sudo apt-get libssl-dev. I can see all sorts of ssl related header files in /usr/include/openssl but opensslconf.h is missing from the openssl ...
3
votes
1answer
300 views

Heartbleed and OpenVPN, am I safe?

I run my own OpenVPN server, since the discovery of heartbleed I updated OpenSSL, changed the server password and ran the command ./clean-all to erase all keys and certificates. And of course, I ...
2
votes
4answers
522 views

I am using Ubuntu 12.04 as live desktop CD for banking am I subject to the Heartbleed bug?

I am not running any Apache or any thing that triggers ssl libray, so is there a service in Ubuntu that runs Open ssl by default? So, I am just booting live session for internet browser. Am I safe?
2
votes
1answer
8k views

How to upgrade OpenSSL 1.0.1f on Ubuntu Server 14.04? [duplicate]

It looks like Ubuntu Server 14.04 just released today includes OpenSSL v1.0.1f which is vulnerable to the heartbleed bug. I've updated my packages (apt-get update) but that's the latest version ...
2
votes
2answers
1k views

What is CVE-2015-1793? Does it affect me?

Apparently a new bug has been discovered in OpenSSL, it is being called as Alternative chains certificate forgery (CVE-2015-1793). Canonical already declared the versions of openssl that are not ...
2
votes
1answer
9k views

Why do I get “undefined reference” errors when linking against OpenSSL?

My compilation process throws around errors like ..undefined reference to `BN_cmp' although I include <openssl/bn.h> and run gcc -lssl -lcrypto test.c -o test can someone help? (openssl ...
2
votes
1answer
2k views

Problem updating OpenSSL in 13.10 - How to diagnose or work around?

Following the instructions in the existing question on the OpenSSL bugs, I've run apt-get update and upgrade, and rebooted. Now when I check the version, I do not have the version mentioned in the ...
2
votes
2answers
8k views

Can't find openssl

I'm trying to work with Boost:asio to establish a SSL connection. Now, my compiler says, it can't find openssl/conf.h I'd like to know where this path is and how to fix this problem. Thanks in ...
2
votes
1answer
4k views

OpenSSL installed, but Ruby unable to require it

I'm trying to setup github-pages on my Ubuntu laptop, and following the guide provided by Github I have to install the bundler package; giving the command ~$ gem install bundler returns me this ...
2
votes
2answers
94 views

Openssl version within Apache

I have installed (long time ago) Apache server on Ubuntu 12.04. How could I know the Openssl version my server is using ?
2
votes
1answer
4k views

Which TLS protocols are enabled in Ubuntu 14.04's OpenSSL?

This is a follow up to Override Distro Package with Custom Package?. Does anyone know if Ubuntu 14.04's OpenSSL enables all TLS protocols (TLS1.0, TLS1.1 and TLS1.2)? Or does it have protocols ...
2
votes
2answers
327 views

Encrypting and decrypting single file with master password and passphrase

Last night my system shutdown unexpectedly and when i restart it, it gave me superblock error. will then i fixed a little but. i was able to retrive my encrypted files which i encrypted my pgp public ...
2
votes
1answer
195 views

Why does ssh(d) seems to use OpenSSL heartbleed version?

It is commonly known that the heartbleed bug exists in the OpenSSL versions 1.0.1 through 1.0.1f (inclusive). So why are ssh and sshd compiled with OpenSSL 1.0.1, where the bug exists (12.04 -> ...
2
votes
2answers
3k views

How force that all connections to my Apache use TLSv1.1 or TLSv1.2?

I tested on Ubuntu 12.04 (apache 2.2.22-1ubuntu1.4 and openssl 1.0.1-4ubuntu5.10) and Ubuntu 13.04 (apache 2.2.22-6ubuntu5.1 and openssl 1.0.1c-4ubuntu8.1). here explain how to do so, but I have the ...
2
votes
0answers
48 views

Unable to compile 32 bit Qt 4.8.6 libraries on 64 bit machine

I am trying to build 32 bit Qt 4.8.6 libraries on Ubuntu 14.04. I have installed additional libraries sudo apt-get install libx32gcc-4.8-dev sudo apt-get install libc6-dev-i386 sudo apt-get install ...
2
votes
1answer
747 views

Curl requiring ciphers to be specified

I am trying to run this command: curl https://api-3t.sandbox.paypal.com/nvp On my ubuntu machine, it failes with the following error: curl: (35) error:14077410:SSL ...
2
votes
0answers
4k views

Problems with OpenSSL-Heartbleed in Ubuntu12.04LTS

Since I have not enough reputation to comment an existing Answer, I create this new question. I have a vServer with Ubuntu 12.04LTS. Because of the Heartbleed-Bug in OpenSSL1.0.1 I upgraded all ...
2
votes
0answers
744 views

Python requests SSL version

I am using the python requests module on Ubuntu 13.04. I keep getting the error: requests.exceptions.SSLError: [Errno 1] _ssl.c:504: error:14077410:SSL routines:SSL23_GET_SERVER_HELLO:sslv3 alert ...
1
vote
2answers
3k views

SSL23_GET_SERVER_HELLO:unknown protocol when trying to access HTTPS URL

While trying to create a staging environment for my WORDPRESS website, I am not quite able to setup the HTTPS configuration. I copied the wordpress folder and backed up Mysql database and was able to ...