Tagged Questions

OpenSSL is an open-source implementation of the SSL and TLS protocols.

learn more… | top users | synonyms

1
vote
0answers
11 views

Forcing eap-TLS 1.2 authentication with FreeRadius and OpenSSL

Been working with TLS DHECE Certificate Based Handshake with a FreeRADIUS Server and wpa_supplicant- both running OpenSSL 1.0.1j FIPS. Afer watching the Wireshark traffic, I notice that the client ...
-1
votes
0answers
46 views

Removing CBC ciphers specific to SSLv3 [migrated]

I need to disable SSLv3 specific CBC ciphers as a temporary solution to the POODLE vulnerability as there are legacy applications that need to use SSLv3. After consulting the OPENSSL docs, it seems ...
4
votes
2answers
299 views

Disable SSLv3 in Dovecot --> TLS handshaking failed: no shared cipher?

Ubuntu 12.04 OpenSSL 1.0.1-4ubuntu5.20 14 Mar 2012 Dovecot 2.0.19 The situation is I'm trying to disable SSLv3 in Dovecot by adding !SSLv3 to the ssl_cipher_list: ssl_cipher_list = ...
0
votes
1answer
90 views

Isn't this a broken certificate chain?

My certificate provider responded to my CSR with four certificates, the first being "ours", and the remaining three presumably to build a chain of trust. I've never had to investigate (and prove to ...
0
votes
0answers
17 views

Change client hello TLS version to 1.2 openssl & wpa_supplicant [on hold]

Been working for awhile with TLS DHECE Certificate Based Handshake with a RADIUS Server and wpa_supplicant- both running OpenSSL 1.0.1e FIPS. Afer watching the Wireshark traffic, I notice that the ...
1
vote
0answers
44 views

Build only OpenSSL crypto?

I was wondering if it's at all possible to compile only the crypto functionality of OpenSSL that I want? In particular, is it possible to compile just SHA1, AES, and DH parts of OpenSSL? I followed ...
1
vote
5answers
658 views

How can I verify that SSLv3 protocol is disabled?

I'm trying to disable SSLv3 in ejabberd 2.1.10 on Ubuntu 12.04. There is no way to disable it in config file, so I have to patch the source and rebuild the package: ...
2
votes
3answers
89 views

it is possible to decrypt HTTPS with the (private, public) pair if it uses DHE?

Assuming you have a PCAP file with HTTPS traffic and having the key pair (private & public), it is possible to decrypt the traffic if it uses Diffie Hellman Ephemeral? Using openSSL lib for ...
1
vote
2answers
279 views

SSLv3 cannot be disabled, can I use weak cipher as a workaround?

We're using lighttpd 1.5.0-2349 which unfortunately doesn't support the option to disable SSLv3. I think a potential workaround would be to only allow it to use some cipher which has already been ...
1
vote
1answer
385 views

Poodle - possible to protocol downgrade if SSLv3 is disabled but still have SSLv3 ciphers enabled?

My title pretty much sums it up. If I have: A server with the SSLv3 protocol disabled BUT still have SSLv3 ciphers enabled. Would that mean that a protocol downgrade attack can still occur?
178
votes
4answers
50k views

SSL3 “POODLE” Vulnerability

Canonical question regarding the recently disclosed padding oracle vulnerability in SSL v3. Other identical or significantly similar questions should be closed as a duplicate of this one. What ...
0
votes
0answers
13 views

how to pass password file to openssl srp [migrated]

I'm trying to pass password to the openssl srp through a file using -passin param as below but im getting errors. openssl srp -verbose -passin file:password.srpv.attr -srpvfile password.srpv -add -gn ...
0
votes
1answer
51 views

NSS / OpenSSL tradeoff on an embedded linux application which uses a TPM via pkcs11?

I am on a trade-off between the use of OpenSSL or NSS in an embedded Linux application that makes use of a TPM (HSM). EDIT: I need a SSH server and Apache using TLS, both using the keys protected by ...
-1
votes
0answers
14 views

mod_ssl with FIPS mode enabled and SSLRandomSeed [migrated]

I have traced through the mod_ssl and the OpenSSL FIPS code as best I can and I believe that the SSLRandomSeed configuration parameter given in the mod_ssl.conf file simply doesn't do anything useful ...
2
votes
1answer
38 views

How to check a public RSA key file [closed]

Inside a shell script I want verify public RSA file. All I want to do is that find a way to check this file is a genuine public key file, nothing else. Can I ask experts here what are the ways I can ...
3
votes
1answer
60 views

How to sign and encrypt mail using openssl?

I am trying to send and encrypt mail using openssl. So far, I figure I should use theese commands: cat ${content} | \ openssl smime -encrypt -inkey lib/me.crt -aes256 -subject "$titre (cs)" -to ...
1
vote
1answer
43 views

Know certificate signing algorithm of a remote site using OpenSSL

I have been trying to know the "Certificate Signing Algorithm" ( SHA1 with RSA etc.) using openssl. To start with I tried to see the cerificate using following command, but it also does not show up ...
22
votes
2answers
678 views

Effect on PCI compliance of not checking SSL certificate?

PCI DSS states: "[You must...] verify that only trusted SSL/TLS keys/certificates are accepted." Long story short, our payment service provider just asked us to please stop verifying their ...
1
vote
1answer
71 views

How can we represent SSL and Firewall in OSI Model? [closed]

I want to draw an architecture diagram for a general ERP application. In that I have come across a confusing point: where should I place the SSL and Firewall? I tried to figure out exactly where ...
0
votes
1answer
33 views

OpenSSL -nopad with ECB mode

I was just trying to check if OpenSSL does use PCSK5 as documentation states when I got the following problem. I first encrypted a plaintext and encrypted it using DES-ECB. I was expecting to see ...
0
votes
0answers
22 views

How to control which OPENSSL_cleanse version to be linked? Assembly or C?

I found that in openssl code, there is a function OPENSSL_cleanse to clear the memory, and there are two versions, one is implemented by assembly and one is implemented by C. By default, other ...
1
vote
0answers
56 views

Secure self-concealing symmetric encryption (non-verifiable decryption)?

From what I observed using standard encryption tools such as OpenSSH and GPG, the decryption only succeeds when the correct password/key is provided (or at most a few others, in case of collision). ...
0
votes
0answers
58 views

OpenSSL CVE-2014-3508 - what can be read?

Per the OpenSSL announcement for CVE-2014-3508, sensitive information can be read from the stack. The OBJ_obj2txt function in crypto/objects/obj_dat.c in OpenSSL 0.9.8 before 0.9.8zb, 1.0.0 before ...
1
vote
3answers
111 views

Not replacing SSL cert on a rebuilt, formerly rooted Unix Server

If a server was rooted, to the point that we know a Perl script which creates a remote shell was placed on the filesystem remotely, and the server was rebuilt entirely, patching the original Apache ...
1
vote
2answers
107 views

OpenSSL updating ciphers suites

For PCI compliance I was required to protect our server against BEAST attacks. While I have correctly configured the apache / openssl settings to pass a scan, these settings have effectively limited ...
0
votes
1answer
58 views

Is it possible to inject information into a clients TLS session cache?

Hypothetically speaking, could an attacker run a targeted attack on a network that would inject information into a victim's cache of recent TLS connections? Specifically, the master-key and sessionID ...
7
votes
2answers
107 views

What happens when certificates further up the chain expires before mine? (Equifax/GeoTrust)

I just bought a certificate from RapidSSL. Looking up the chain, I found GeoTrust who is signed by Equifax. Then I realized that the ”Equifax Secure Certificate Authority” is due to expire on ...
0
votes
2answers
125 views

Problem with OpenSSL rejecting CA possibly due to 12 digit Serial No

I work as a tester at a VoIP software company. We've been running into a problem with using TLS to communicate with certain phones. The phones are from different manufacturers but both exhibit the ...
1
vote
2answers
68 views

Relying on openssl's certificate authority list or provide my own

My apologies if this is too subjective, but I am looking for advice on best practices. We maintain a small program written in Python that runs on our customers' servers and communicates back with our ...
0
votes
1answer
261 views

How are TLSv1.0 ciphers negotiated as TLSv1.2?

I'm a little confused about something I am reading in Bulletproof SSL. "TLS 1.2 is the only protocol that allows suites to define their PRFs. This means that for the suites defined before TLS 1.2 ...
1
vote
0answers
66 views

How to generate ECC (160 bits) Keys with OpenSSL? [closed]

I have this problem: I want generate RSA Keys at 1024 bits with OpenSSL. I do this with this commands: For generate RSA Key at 1024 bits: openssl genrsa -out rsa.key 1024 For view the content of ...
1
vote
1answer
68 views

ECDSA/RSA certifcates and cipher selection

In this image can someone tell me if a standard RSA certificate can support the EC*_RSA ciphers listed? If so do you create the typical RSA keys when you are creating the CSR? Also I am fairly ...
2
votes
1answer
82 views

Drawbacks to only using TLS 1.2 ciphers in OpenSSL

I understand you would not want to do this as it would limit compatibility for older devices and platforms. However if someone were in an all TLS1.2 environment, say a very well managed internal ...
4
votes
2answers
103 views

Why was LibreSSL PRNG unsafe on Linux?

From the source: https://www.agwa.name/blog/post/libressls_prng_is_unsafe_on_linux The first version of LibreSSL portable, 2.0.0, was released a few days ago (followed soon after by 2.0.1). Despite ...
2
votes
1answer
101 views

LibreSSL 2.0.5 - Why wasn't it fully affected by secadv_20140806.txt?

From: https://marc.info/?l=openbsd-announce&m=140752800525709 The announcement: We have released LibreSSL 2.0.5, which should be arriving in the LibreSSL directory of an OpenBSD mirror near ...
3
votes
2answers
328 views

Why is a CSR hashed?

What are the use cases for defining something other than the default SHA1 hash in a CSR? Is it to protect the digital signature, public/private keys? What is it protecting exactly?
1
vote
1answer
4k views

Can a CSR be created in OpenSSL with SHA2?

Can a CSR be created in OpenSSL with SHA2? If so, what would the command be and what does this tell the CA, if anything? If you could create a CSR using SHA2 would it "tell" the signing CA to use it ...
1
vote
1answer
166 views

Display browser requested cipher suites from OpenSSL

I installed OpenSSL locally and used s_server command to start a server by using self signed certificate created by OpenSSL as well. The command I used to start a https server is OpenSSL> s_server ...
1
vote
1answer
86 views

OpenSSL TLS 1.1 Cipher Suites

https://www.openssl.org/docs/apps/ciphers.html listed a set of cipher suites supported by different protocol versions, but I don't see a TLS 1.1 list. Anybody could help me to understand where to get ...
1
vote
0answers
147 views

If even Apple cannot properly install certificate [closed]

I've just installed a new copy of Mozilla Firefox/29.0 SeaMonkey/2.26.1 on a new Mac with OS X 10.9.4, and I'm getting an error message in place of a webpage when trying to access ...
1
vote
0answers
50 views

Open ldap start tls succesful even after CA is removed

I have one question related to how openldap and openssl handles the CA and server certificates. I have openldap client using openssl. My intention is to establish a ldaps connection to the ldap ...
0
votes
0answers
13 views

Does openldap stores the ssl context in global variable after the first start_tls?

Does openldap stores the ssl conext which is passed to SSL_connect ?
0
votes
1answer
34 views

Does openssl store the certificate of the server after verification is done?

As per my understanding , openssl will verify the certificate of the server during ssl handshake , using the trusted CAs present in the CA certificate dir in the context. After the server certificate ...
2
votes
1answer
95 views

Proper way to ask for parameters renegotiation with SSL

Given a specific SSL/TLS connection, I would like to know what is the proper way to launch a parameter renegotiation, asked from client side. 1) Are they any requirements from the previous handshake ...
1
vote
1answer
170 views

Questions about self-signed Certificates' Fingerprints and Client-Server Interaction through SSL

I have some questions about how the fingerprint function is performed. First of all, I have some knowledge about cryptography. However it seems to do not be good enough to understand hundreds of ...
0
votes
1answer
87 views

What is the difference between openssl and mkcert and IIS self signed certificate

What is the difference between openssl and mkcert. Which one should I prefer. I want to create an IIS hosted WCF service. Which one should I use to create an SSL certificate. Also, there is another ...
2
votes
1answer
68 views

Is there any mechanism to audit which signed certificates are unrevoked?

We are currently using EasyRSA and OpenSSL to manage our user VPN certificates for OpenVPN. The process we have in place currently is: User generates a CSR on their laptop and sends it to us to sign ...
1
vote
1answer
157 views

How to decrypt a file when I have its key?

How could I decrypt a file (encrypted with AES-128) using openssl ? I do not remember the passphrase I used to encrypt it, but I saved the key generated and used to encrypt my file. How could I use ...
1
vote
1answer
193 views

256 Bit Key into AES 128 same output as 256 Bit Key into AES 256

I have two different crypto libraries I created, one is in java and uses the standard built-in java crypto libraries. The other uses openssl and has been wrapped in java through the JNI. I'm ...
1
vote
1answer
99 views

What is the relationship between Suite B and FIPS 140-2?

What is the relationship between the Suite B algorithms and FIPS 140-2 certification? Does OpenSSL meet both criteria? From what I've read, it seems that OpenSSL's crypto library implements many ...