OpenSSL is an open-source implementation of the SSL and TLS protocols.

learn more… | top users | synonyms

1
vote
2answers
93 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
5
votes
3answers
120 views

X509 CRL suspended certificates and openssl ca comand

In CRL X509 format we have "Hold Instruction code" for a list of suspended certificates. I know that "its use is strongly deprecated for the Internet PKI", but in my own private CA, I want to use it. ...
1
vote
2answers
123 views

Why won't Firefox accept my certificate?

I've been trying to get stunnel to work with my signed certificate (with a CA that I've trusted in Firefox). The error is: 127.0.0.1:5559 uses an invalid security certificate. The certificate is ...
4
votes
1answer
249 views

OpenSSL 0.9.6a PRNG algorithm weakness: How to exploit?

I saw an OpenSSL security advisory for Openssl 0.9.6a Recently a cryptographic flaw in OpenSSL's built-in pseudo-random number generator (PRNG) was pointed out to us by Markku-Juhani O. Saarinen ...
3
votes
1answer
40 views

OpenSSL's EVP functions, more specifically EVP_SealInit

Reference: https://wiki.openssl.org/index.php/Manual:EVP_SealInit%283%29 I want to securely share a symmetrical key between two endpoints using OpenSSL's EVP interface. Transferring the encrypted ...
13
votes
2answers
2k views

Are SHA-2 certificates considered obsolete, or current?

A guide on this site on how to make a decent Certificate Signing Request (CSR) says that I should be using SHA-2 certificates to secure a HTTPS webserver. Are SHA-2 certificates considered obsolete, ...
2
votes
1answer
28 views

Can you tell OpenSSH to force a rekey according to a packet number limit?

OpenSSH has a parameter in the config files (ssh_config and sshd_config) for both client and server called RekeyLimit. The default values for it are: RekeyLimit 1G 1h Which will force a rekey ...
0
votes
0answers
26 views

How to create RSA host key for OpenSSL 1.0.1 server, with ssh-keygen

Trying to create a private 4096-bit RSA host key, for a server running OpenSSL 1.0.1 using >ssh-keygen -b 4096 -t rsa -f rsa_key when the server starts up, it gives an error about the key, and I ...
0
votes
0answers
26 views

Using the same public exponent for RSA on multiple machines

I have a system where many machines running the same software work independently of each other with no central server of any kind. A user may wish to speak with another user privately and securely, ...
17
votes
2answers
8k views

Different performance of openssl speed on the same hardware with AES 256 (EVP and non EVP API)

If I run openssl 1.0.1e like this : $ ./openssl speed aes-256-cbc (i.e without EVP API) Doing aes-256 cbc for 3s on 16 size blocks: 14388425 aes-256 cbc's in 3.00s Doing aes-256 cbc for 3s on 64 size ...
2
votes
1answer
631 views

Determine private key size using public certificate [duplicate]

I have a public certificate in a PEM (.pem) file -----BEGIN CERTIFICATE----- MIICsjCCAZqgAwIBAgIJAMA1YIQ2JLXDMA0GCSqGSIb3DQEBBQUAMBExDzANBgNV ... 29V/R9RZOoSBHDzGPL84wm4qojMuwQ== ...
1
vote
0answers
27 views

Create a signed file from the detached signature and the clear text file content

Assuming I have the following: data.txt data.ps7 (the detached signature) Can I generate the bundled signed file ? Any example would be great, using C#, Java or openssl or any other tool ?
0
votes
0answers
10 views

How do I update a verisign SSL certificate for a website running on Apache for windows server? [migrated]

The site has an SSL cert signed by verisign which expires in four days. Webserver is a windows server 2008 running Apache 2.2. There's an Apache2.2/conf/ssl/verisign folder that has all the certs ...
3
votes
1answer
139 views

TPM support with OpenSSL FIPS Object Module

How can I use a TPM chip along with the OpenSSL FIPS Object Module without modifying OpenSSL FIPS Object Module (to avoid Private Label certification)? Should we add an engine interface in OpenSSL ...
1
vote
1answer
25 views

How is PKCS#10 and x509 related?

I'm unable to make sense of them using the RFCs. Can anyone help? When I use this function, http://www.pyopenssl.org/en/stable/api/crypto.html#x509req-objects , am I creating a PKCS#10 format CSR?
1
vote
0answers
31 views

What comes into calculation of certificate signature?

I have written my own code with openssl in order to create certificates. In order to verify this code, I tried to reconstruct an openssl commandline generated self-signed certificate ... openssl req ...
1
vote
1answer
35 views

OpenSSL certificate revocation check in client program using OCSP stapling 2

Pretty much this is request for additional information for the question: http://stackoverflow.com/questions/9607516/openssl-certificate-revocation-check-in-client-program-using-ocsp-stapling I want ...
2
votes
1answer
44 views

Can I revoke a client certificate using only it's serial number (not it's crt/pem)?

I've signed and issued some client certificates with my CA. I can now revoke them like so: openssl ca -name ${CA_NAME} -revoke ${USERS_DIR}/${USERNAME}.crt -keyfile $SSL_PRIVATE_DIR/ca.key -cert ...
3
votes
2answers
67 views

SSL browser session keys

I am trying to export/write the SSL master secret and keys to a file from the chromium browser. I would appreciate if someone could advice me how to do this. To write the premaster secret we can ...
0
votes
0answers
20 views

Why SMIME decryption works with sender and recipient private key?

Im developing an application, that needs to use SMIME encryption and authentication. I've implemented a decryption system, and am currently testing it. I send the emails with another fully working ...
4
votes
2answers
828 views

How secure is AES-256-CBC with user provided password and initialization vector

From my understanding the IV is used as a previous block for the first block only. But since each block is used by the following this adds significant security is a IV is provided and not based on the ...
0
votes
0answers
3 views

How to check if the .sig file is correct? [migrated]

I issued the following commands to create a signature for a file (linux kernel) : openssl req -newkey rsa -keyout codesign.key -out codesign.req openssl ca -config ca.cnf -extensions codesigning -in ...
1
vote
1answer
67 views

OpenSSL key derivation

I'm trying to manually decrypt DTLS packets sent by OpenSSL. The cipher suite used between the server and the client is TLS_RSA_WITH_AES_256_CBC_SHA256 and my understanding is that the IV used by ...
4
votes
1answer
67 views

Should 'openssl verify' recognise an exceeded 'Path Length' constraint on a root/intermediate CA?

Background Following the guides here and here I am setting up a multi-level PKI. I have increased the pathlen config to 3, such that I can generate one root certificate that I can use to sign the ...
1
vote
0answers
62 views

HTTPS: Same certificate, different public key

I have a web server, Debian, and the site uses a HTTPS cert from Thawte. The root certificate meant to be on top of my verification chain is also on the server, in /etc/ssl/certs, because the APT ...
1
vote
1answer
83 views

Monitoring HTTP traffic on openvpn server

I have configured an OpenVPN server and can monitor HTTP traffic via tcpdump. Is there any way to monitor the HTTPS traffic as well? Hints Self Signed SSL certificate as root certificate on VPN ...
3
votes
0answers
52 views

Modify Certificate Subject using OpenSSL x509 Command

I'm building a CA based on the OpenSSL command line tools. I don't want to use the openssl ca tool and its file based database though, instead I create certificates using the openssl x509 tool ...
1
vote
0answers
27 views

Followup to one-liner to create cert request with SAN

I've been trying to use the OpenSSL line from this older thread to create a CSR with subject alternative name: Provide subjectAltName to openssl directly on command line If I run the line from that ...
3
votes
1answer
40 views

Do I put my subordinate (intermediate) or root CA certificate in my truststore?

I have a server using a certificate signed by my subordinate (intermediate) CA. My java based client needs to put either the intermediate or root CA cert in it's truststore so when it communicates ...
1
vote
2answers
55 views

understanding client certificate - pfx on the general

Today I am given a pfx and told to access a website. I have absolutely no idea what was given to me initially, so please kindly confirm my understanding on a general level 1) the pfx is a container ...
-2
votes
1answer
33 views

Generate CSR code on local machine

I've tried activating an SSL cert. When it asked for the CSR code, I was thinking about generating this code on local machine because I haven't rented my own VPS yet. The thing is, I'm not sure ...
2
votes
1answer
96 views

Why does this key get Base64 encoded prior to use?

I wish to have my server encrypt messages to clients who have each provided the server with an RSA public key, as well as having the clients authenticate their messages to the server using their ...
7
votes
4answers
2k views

P12 - Extract public part (certificate) without knowing the p12 password

I would like to extract the public part of a revoked P12 which doesn't belong to me. I can't open it with KeyStore Explorer because I am prompted for the password, is it possible with OpenSSL ? The ...
2
votes
0answers
25 views

Openssl ciphers list sorting and removing

I was playing with a ciphers app to create example list of suites. Looking at the website (https://openssl.org/docs/manmaster/apps/ciphers.html) if I run one of the examples there: openssl ciphers -v ...
21
votes
4answers
17k views

Provide subjectAltName to openssl directly on command line

Is it possible to provide a subjectAltName-Extension to the openssl req module directly on the command line? I know it's possible via a openssl.cnf file but that's not really elegant for ...
3
votes
2answers
148 views

Use openssl to individually verify components of a certificate chain

This is related to another question, How to verify a signature of one entity by another using OpenSSL CLI? I used openssl s_client -showcerts -connect www.google.com:443 to collect three certificates ...
4
votes
1answer
37 views

table elements are not encrypted

I read a security book a while ago that said HTML table elements are sent plain text, even if the server connection is https. Is this accurate? I'm thinking about making an on-line purchase from a ...
0
votes
1answer
29 views

OpenSSL_encrypt returning an incorrect cyphertext?

I am trying to use the openssl_encrypt function in PHP, this is my code: <?php $message = hex2bin("00112233445566778899aabbccddeeff"); $key = hex2bin("000102030405060708090a0b0c0d0e0f"); $method ...
1
vote
0answers
20 views

About DROWN SSL attack [duplicate]

I need some clarification regarding DROWN attack: 1) All and only SLLv2 is vulnerable regardless of the chipper strength? 2) How can I check it with Nmap or sslscan? 3) How it's done? I have also ...
2
votes
3answers
137 views

How to decrypt SSL traffic with a packet sniffer when I have the private key?

How you do you decrypt ssl packets (traffic) with the private key? I tried to do this with ssldump and openssl but nothing worked.
2
votes
3answers
115 views

Why doesn't openssl s_client correctly validate google.com:443?

I try $ openssl s_client -connect www.google.com:443 but it openssl complains that the cert chain is invalid: $ openssl s_client -connect www.google.com:443 CONNECTED(00000003) depth=2 C = US, O = ...
16
votes
3answers
17k views

openssl: recover key and IV by passphrase

A large amount of files were encrypted by openssl enc -aes-256-cbc -pass pass:MYPASSWORD Openssl should derive key+IV from passphrase. I'd like to know key+IV equivalent of that MYPASSWORD. Is ...
3
votes
1answer
73 views

How to verify a signature of one entity by another using OpenSSL CLI?

I'm teaching a class about certificate chains, so I download the chain from www.google.com which has 4 certs. I want to demonstrate how the dependencies work from issuer to subject by showing that ...
11
votes
5answers
2k views

Is it possible to get the pass phrase for private key file

We have a set of public and private keys and certificates on the server. The problem is that while public encryption works fine, the pass phrase for the .key file was lost. So, when trying to ...
1
vote
2answers
507 views

signing private openssl key for use with openssh

This is related to Converting keys between openssl and openssh . I have private keys generated by openssl that I want to use with SSH for connection authentication. I have no issue using ssh-keygen ...
1
vote
0answers
98 views

MQTT (Mosquitto) certificate SSL23_GET_CLIENT_HELLO:unknown protocol [closed]

I'm been desperately trying to get my MQTT clients to connect to my MQTT broker which is set up with a certificate from a CA. To be able to get the CA certificate, I've used the letsencrypt python ...
-1
votes
1answer
76 views

How do I change LUKS backend to OpenSSL?

I know there is a way to do it, but I don't know how to do it: the default backend for LUKS is libgcrypt and I want to test it with the openssl cryptographic library. I was told that there is a ...
1
vote
1answer
46 views

Is reseeding OpenSSL CSPRNG necessary if using RAND_bytes?

I read that cryprographic secure PRNG (CSPRNG) need a random seed to provide random output. Looking at OpenSSL that seems to be archived by RAND_poll() and random data is fetched with RAND_bytes(buf, ...
1
vote
1answer
66 views

ECDSA implicit certificate using OpenSSL

I am trying to generate implicit ECDSA certificate only for signing and verification using OpenSSL. I tried google but I am getting many research papers. I understood that A messages need to be signed ...
1
vote
1answer
3k views

How to manually test for DROWN attack?

We know that the official website serves the user with a way to test our servers against DROWN attack. Apart from that, I am looking for a manual testing method to check any servers against this ...