New answers tagged

1

These are NOT lines: TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA These are ciphers and should go inside the SSLCipherSuite in appropriate form. Implementation: First, make sure that there is no other SSLCipherSuite (except vhosts) that may override your new cipher suite settings. If there is, ...


0

There is probably a more elegant way to do it, but I add the following option to the [ v3_ca ] section of my OpenSSL configuration file: certificatePolicies = 2.5.29.32.0 The OID values are available at http://www.alvestrand.no/objectid/2.5.29.32.0.html .


4

Not sure if you mean manually or automatically. Manually -- yes -- you can view the thumbprint of the certificate that reaches your browser, e.g. in Chrome you would right-click the part of the address bar to the left of the address, choose Details, View Certificate, and click on the details tab. The thumbprint is at or near the bottom. Automatically -- ...


2

In case you have enough trust in the other connection to the server then yes, you can calculate the fingerprint over there and compare it to the one in the client. Basically the fingerprint is just a hash over the (binary encoded) certificate. So for instance: openssl x509 -in yourcert.pem -outform DER -out yourcert.cer removes any ASCII armour / PEM ...


2

Can I convert directly from a .der to a .pfx/.p12? I don't think so because Openssl uses PEM encoding for certificates by default unless you set it explicitly using -inform or -outform arguments. There is no such option listed in the pkcs12 command. Do I need a .key (not provided via http://burp/cert:8080) in order to do the conversion? You ...


1

Not an answer but you asked for suggestions and this would be a lot for (SX) comments. (0) openssl pkcs8 -topk8 ... -v2 aes-128-cbc -nocrypt is misleading at best if not wrong. If the output file is not encrypted, it doesn't matter what algorithm is not used to encrypt it. (1) openssl enc -pass file: (or -kfile) reads the first line of the file as a string,...


1

As I understood the problem you are trying to protect the firmware file over web when board needs to be updated(Firmware Update), correct me if I'm wrong. Why you are mixing symmetric and asymmetric cryptography altogether, even you can achieve your goal by only using asymmetric cryptography. As you mentioned you are generating the public and private key ...


7

Why do Chrome and openssl disagree over signature algorithm? Because they get different certificates. The reason for this is that Chrome uses Server Name Indication (SNI) whileopenssl s_client does not, at least not by default. If you look close not only the signature algorithm is different but also the subject of the certificate: $ openssl s_client -...


1

From the Wireshark trace on B2, we see that the client is simply not responding at all; after one minute, the server grows impatient and closes the connection. This is probably not a problem of certificate availability on B2: if SChannel simply believed that it had no appropriate certificate, then it would send back an empty Certificate handshake message. ...


2

You seem to ask for a comparative study on the PRNG (pseudo-random number generators) used by default by OpenSSL and the Linux kernel. This could most probably fill a volume full of mathematical formulas, and to make it worse OpenSSL and the Linux PRNG are not independent since OpenSSL will use /dev/urandom as a default seed, and there are ongoing work to ...


1

DES-CBC3, is a shorthand for a few suites in OpenSSL (that doesn't always have an exact one to one mapping between the name used and the suite used, it constructs it from the name and the type of key used for authentication). Nowadays, this name almost always means a suite documented in RFC 6101 where it is called, a slightly better name : ...


3

So is it a 256bit SSL cert? No. Yes. Maybe. The real answer is: It depends on the terminology, as some CAs appear to be notoriously lousy about such details. The certificate contains the public portion of the asymmetric key pair that is used to authenticate the server (ensure that you really are talking to the server you think you are talking to) and ...


5

First off, let's be careful about language, when you talk about a public CA like Entrust, or Verisign, or Digicert, yes there is some software involved for actually creating and managing the certificates, but you're really talking about the people. These companies are trusted CAs not because of the software they use, but because their network admins take ...


-1

To answer the last part. Yes they are all compliant with x.509. And they can all be used to set up a certificate authority (as described by previous answer). There are functional differences, more on the management, scalability or specific technical features, side that makes one or the other of them more suitable for your requirements than the other.


7

So is it a 256bit SSL cert? No. There are several aspects which are relevant for a certificate: the type of the key, usually RSA or ECC the size of the key. The strength of the key depends both on the type and the size, i.e. the commonly used 2048 bit RSA and 256 bit ECC keys are roughly equivalent the signature algorithm, i.e. SHA-256 + RSA When ...


2

The most secure way is to use a Trusted Platform Module. This is specific hardware made for storing keys and doing cryptographic operations. This is secure even against sophisticated attackers with physical access (e.g. the FBI), but you need specific hardware which will cost more. Without this, attackers may just read the key from memory. In that case you ...


2

A not properly configured server can actually make you vulnerable to DROWN, let me show you how. As illustrated in DROWN's original website in order to be vulnerable, one of these 2 conditions has to be met: The server allows SSLv2 connections. This is surprisingly common, due to misconfiguration and inappropriate default settings. Our ...


1

If a site is affected by the DROWN attack only depends on the setup of the server serving this site, not on any relation to other servers. Thus if your server is configured to not support SSLv2 it should not be affected by the DROWN attack. Which means that either the report is wrong or your site has a different than expected setup or the outside DNS ...


4

CloudFlare's Origin CA is working as intended. It's not trusted by browsers. It's only trusted by CloudFlare's servers. Its purpose is to secure communications between CloudFlare and your origin, not for general usage. Reference: Introducing CloudFlare Origin CA If you want a free, publicly trusted certificate, check out Let's Encrypt. (It's a legitimate ...


0

Distinguishing header from content is usually not the hardest part of cryptanalysis. This is because headers usually come with a specific structure, common length range and limited value variety. Yes, SSL/TLS is leaking length details which might be used for multiple classes of attacks. In some cases an attacker might be even able to determine content ...



Top 50 recent answers are included