OpenSSL is an open-source implementation of the SSL and TLS protocols.

learn more… | top users | synonyms

1
vote
2answers
62 views

TLS version of cipher suite TLS_DHE_RSA_WITH_AES_256_CBC_SHA

I have a question related to the cipher suite TLS_DHE_RSA_WITH_AES_256_CBC_SHA (0x0039). It is first mentioned in RFC3268 in 2002. The highest available TLS version in 2002 was TLS 1.0 (RFC 2246). ...
1
vote
1answer
19 views

Regarding Openssl.config file: What is the importance of policy matching when creating a self-signed certificate with the aid of this file?

When trying to go through some material for self-signing a certificate, one of the steps required me to set policy conditions in this config file. See: https://www.phildev.net/ssl/opensslconf.html ...
2
votes
1answer
38 views

Two roots for an SSL certificate

Please consider the following scenario: I have an SSL end certificate issues by a well-known authority (e.g. COMODO). I have my own self-signed root and intermediate certificates which are used by ...
1
vote
0answers
41 views

SSL self signed certificate CER exception added to Keychain but fails in Chrome

Operating System: Mac OSX El Capitan 10.11.5 When browsing to the page I have a Privacy error, although an exception was added. I have the correct CER file so I added it to my Keychain TRUST THE ...
1
vote
1answer
128 views

How to specifiy -CAPath using OpenSSL in windows to perform TLS handshake

I'm new to using OpenSSL and currently using it in Windows trying to troubleshoot for the party connecting to our server. openssl s_client -connect servername:443 CONNECTED(00000134) depth=0 CN = ...
1
vote
1answer
40 views

Why RedHat Linux has obtained separate FIPS 140-2 certificates for OpenSSL , NSS, Kernel Crypto API etc?

I am wondering why RedHat Enterprise has obtained separate FIPS 140-2 certificates for OpenSSL , NSS, Kernel Crypto API etc. Is it not enough to have FIPS 140-2 certification for only one ...
4
votes
1answer
162 views

TPM support with OpenSSL FIPS Object Module

How can I use a TPM chip along with the OpenSSL FIPS Object Module without modifying OpenSSL FIPS Object Module (to avoid Private Label certification)? Should we add an engine interface in OpenSSL ...
4
votes
1answer
44 views

Why doesn't my leaf certificate validate against the root CA only

I created a root CA and intermediate CA, then used the intermediate to sign a leaf cert, for the purpose of enabling SSL on various web servers in an internal network. I'm trying to figure out if I ...
-1
votes
0answers
13 views

How Certicate is stored in SSL_CTX? [closed]

How CA and device Certificates are stored in SSL Context ?
4
votes
2answers
73 views

Can a SSL Certificate dictate protocol?

I know you can set the protocol/cipher via your web server: Nginx: ssl_protocols TLSv1 TLSv1.1 TLSv1.2; ssl_ciphers HIGH:!aNULL:!MD5; Apache: SSLProtocol all -SSLv2 SSLCipherSuite ...
0
votes
1answer
20 views

Certificate Verification in openssl

I was going through the openssl server-client program given here---> http://simplestcodings.blogspot.com.br/2010/08/secure-server-client-using-openssl-in-c.html. I can see both the client and server ...
-1
votes
0answers
38 views

Why is SSL/TLS considered to be located in between Transport and Application layers as opposed to being 100% Application layer [closed]

In literature, I see TLS/SSL as being located in between the Application and transport layers. It is not definitively classified as belonging to either of them. When it comes to the programmer ...
0
votes
0answers
21 views

How to use TPM to generate CSR for SSL?

I am following this guide: https://blog.habets.se/2012/02/TPM-backed-SSL The tutorial asks me to use libengine-tpm-openssl library to create a TPM key but it seems that the library is now obsolete. ...
1
vote
1answer
104 views

OpenSSL key derivation

I'm trying to manually decrypt DTLS packets sent by OpenSSL. The cipher suite used between the server and the client is TLS_RSA_WITH_AES_256_CBC_SHA256 and my understanding is that the IV used by ...
0
votes
0answers
16 views

How to validate fields in addition to the signature in a CSR?

I want my CSR to contain, say, an arbitrary serial number. When the CA validates the CSR, it must: Validate the signature. Validate the serial number. Is this possible? If yes, then how?
4
votes
0answers
286 views

Ansible Vault - how does the encryption work?

I was looking at Ansible Vault which is used for encryption in Ansible playbooks. The Ansible documentation seems to be thin on details of how it works, apart from mentioning that the default cipher ...
1
vote
1answer
88 views

Basic question regarding OpenSSL and AES-GCM

While researching how to encrypt private keys for SSH connections as securely as possible, I have run into the following very basic understanding problems (Note: I have used the newest stable release ...
0
votes
1answer
52 views

How SSL server can select cipher suite from Client proposed parameter?

When Client send list of cipher suites in client hello.. at that time server will select from one cipher suite. I want to know how it is selected?
1
vote
2answers
148 views

sharing private key sTunnel

All of the sTunnel guides and implementations at work do the same thing, they say once the private key and the public cert are created on the server, you need to cat them together and then share with ...
6
votes
1answer
215 views

Does HTTPS protocol leak HTTP body length?

It seems that in a MITM attack, hackers may know the whole HTTPS packet size sent through the network (i.e. size of HTTP headers + HTTP body + overhead). Besides that, does the HTTPS protocol also ...
0
votes
1answer
32 views

Generate Subject Key Identifier by hand using openssl command sequence

When creating a signed certificate I get the lines inside the certificate that identify the keys used: X509v3 extensions: X509v3 Subject Key Identifier: D8:D7:3F:99:CC:D7:20:AF:62:31:...
0
votes
2answers
32 views

Different certificates for the same website?

When I load https://objective-see.com in Safari, it shows me a certificate with CN=objective-see.com. However, when I retrieve the certificate using echo -e | openssl s_client -connect "objective-see....
3
votes
1answer
6k views

Why do I need to install the startcom intermediate certificate?

I issued my server a Startcom class 1 cert. With no changes on the client, I can access this server via FF without issue. However, when try to validate the certificate via openssl s_client it chokes ...
1
vote
0answers
54 views

AES keyfile size

I would like to encrypt files using a key file instead of a password. What I would do is: 1) Generate X random bits using openssl rand X > mykey 2) openssl enc -aes-256-cbc -in secretfile -out ...
4
votes
1answer
295 views

OpenSSL 0.9.6a PRNG algorithm weakness: How to exploit?

I saw an OpenSSL security advisory for Openssl 0.9.6a Recently a cryptographic flaw in OpenSSL's built-in pseudo-random number generator (PRNG) was pointed out to us by Markku-Juhani O. Saarinen , ...
3
votes
1answer
80 views

OpenSSL's EVP functions, more specifically EVP_SealInit

Reference: https://wiki.openssl.org/index.php/Manual:EVP_SealInit%283%29 I want to securely share a symmetrical key between two endpoints using OpenSSL's EVP interface. Transferring the encrypted ...
0
votes
0answers
13 views

Is there an original informaton source linking output of Qualys SSL report to settings in nginx and Apache configurations?

The online tool at Qualys for testing webserver SSL configurations, https://www.ssllabs.com/ssltest/index.html, produces a list of codeslike TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384, ...
1
vote
1answer
44 views

How to implement the fix for Forward Secrecy on Debian Apache OpenSSL? [closed]

My SSL test result was an A- due to forward secrecy. I want to know how to implement the fix mentioned on this page here: https://blog.qualys.com/ssllabs/2013/06/25/ssl-labs-deploying-forward-secrecy ...
23
votes
3answers
19k views

Can someone explain what exactly is accomplished by generation of DH parameters?

I'm setting up a node.js server: https.createServer({ ... ciphers: 'ECDHE-RSA-AES128-SHA256:AES128-GCM-SHA256:RC4:HIGH:!MD5:!aNULL:!EDH', honorCipherOrder: true }, app).listen(443); ...
11
votes
5answers
2k views

Is it possible to recover a lost passphrase for a private key file?

We have a set of public and private keys and certificates on the server. The problem is that while public encryption works fine, the passphrase for the .key file got lost. So, when trying to execute ...
0
votes
1answer
346 views

How to get “Policy: X509v3 Any Policy” in a certificate generated with OpenSSL?

I am trying to generate a certificate through OpenSSL which has the following line X509v3 Certificate Policies: Policy: X509v3 Any Policy But I end up getting X509v3 Certificate Policies: ...
3
votes
2answers
168 views

Verify my own self signed SSL certificate

I have generated my own SSL certificate for a web server on the internet, however this was for three reasons: Fun Not wanting to buy an SSL certificate Trying to get an A rating (excluding trust ...
1
vote
0answers
47 views

Certificate based Access Control for Pub Sub messaging

I'm extending an existing p2p/master Pub Sub framework to support additional security measures, via over the wire encryption and topic based access control. I'd like to use the x.509 certificates that ...
4
votes
1answer
77 views

Can a .DER be converted to a .PFX / .P12 ?

Burp-Suite's http://burp/cert:8080 web-interface for downloading the CA Certificate only provides a .der encoded certificate, but for a particular use-case scenario I require a PKCS#12 .pfx/.p12. I ...
1
vote
2answers
107 views

Suggestion on asymmetric (hybrid encryption) encryption for big file

We will be using following commands to encrypt to firmware file at server and that will be decrypted on the embedded board using decryption command mentioned below, Following command will be used to ...
22
votes
4answers
22k views

Provide subjectAltName to openssl directly on command line

Is it possible to provide a subjectAltName-Extension to the openssl req module directly on the command line? I know it's possible via a openssl.cnf file but that's not really elegant for batch-...
8
votes
1answer
5k views

SSL certificates and cipher suites correspondence

I have been learning about the SSL/TLS protocol (from https://tools.ietf.org/html/rfc5246) and have a few conceptual questions about the protocol. The client and server exchange "hello" messages ...
21
votes
2answers
24k views

Decrypting TLS in Wireshark when using DHE_RSA ciphersuites

How can I decrypt TLS messages when an ephemeral Diffie-Hellman ciphersuite is used? I am able to expose the premaster secret and master secret from the SSL Client. Using that, how to decrypt the ...
5
votes
1answer
93 views

Why do Chrome and OpenSSL disagree over signature algorithm?

$ openssl version OpenSSL 1.0.2h 3 May 2016 $ openssl s_client -connect winkel.vpro.nl:443 < /dev/null 2>/dev/null | openssl x509 -text -in /dev/stdin | grep -i sha Signature Algorithm: ...
1
vote
1answer
100 views

TLSv1: Reason for client not sending client certificate

Our BizTalk installation consists of two load balanced nodes B1 (10.137.10.1) and B2 (10.137.10.2) which process and route incoming SOAP messages. The processing is nothing more than: sending the ...
4
votes
1answer
103 views

Ways to generate symmetric and asymmetric keys

We are using Beaglebone Black based custom board, and want to use hybrid encryption for encrypting firmware file, i.e. symmetric for encryption big firmware file and asymmetric for encrypting ...
3
votes
2answers
125 views

Comparison and difference between CAs

While doing some Google searches, I learnt that there are a lot of different Certification Authorities like the Windows role named "Active Directory Certificate Services", the OpenSSL library or the ...
3
votes
1answer
57 views

The use of DES-CBC3 for TLS

When researching some TLS compliant software I found some mentions of DES-CBC3. Further research shows that it is probably simply a name of OpenSSL for 3DES-EDE-CBC (under section "CIPHER SUITE NAMES" ...
3
votes
2answers
148 views

How to tell if a SSL cert is 128 bit or 256 bit?

My cert is: Key Length = 2048 Signature algorithm = SHA256 + RSA So is it a 256 bit SSL cert?
3
votes
1answer
63 views

Where and how to create secret on embedded Linux system?

I'm using OpenSSL on an embedded Intel Edison (Atom Platform) running an Yocto Linux. I want to store passwords with OpenSSL on the device, but I don't know after which rules I should create the ...
2
votes
2answers
63 views

DROWN vulnerability on root domain affect subdomains?

I maintain a departmental server hosted on a subdomain of my organizational network, as in department.example.com. Both example.com and department.example.com use HTTPS, but run on completely ...
8
votes
2answers
6k views

OpenSSL PKCS#7 vs. S/MIME

OpenSSL 1.0.1c onwards seems to offer CMS support. I have difficulty understanding the difference between smime and pkcs7. S/MIME specs are layered on PKCS#7 (so says Wikipedia). Now in openssl I ...
8
votes
2answers
500 views

Why was LibreSSL PRNG unsafe on Linux?

From the article LibreSSL's PRNG is Unsafe on Linux. The first version of LibreSSL portable, 2.0.0, was released a few days ago (followed soon after by 2.0.1). Despite the 2.0.x version numbers, ...
0
votes
1answer
55 views

SSL warnings while using Origin Certificate on my VPS

I created Origin Certificate in cloudflare and installed on my Apache on Debian VPS using the guide https://support.cloudflare.com/hc/en-us/articles/217472077. My URL is like this: https://socket....
5
votes
3answers
4k views

Could I delete .csr files once the key was signed by CA

I'm creating my own openvpn server. The Certificate authority is located on a separated host. There is two kind of clients: which that just send a .csr and to which i send the .crt as an answer and ...