Questions tagged [openssl]
OpenSSL is an open-source implementation of basic cryptographic primitives, X.509 certificate utilities, and SSL and TLS protocols.
1
vote
0answers
39 views
Creating X509 certificate in C using post-quantum public key algorithm?
I'm trying to implement a self signed x509 certificate that uses a post-quantum (PQ) public key algorithm as the public key algorithm. I looked at the openssl library in c, and the way it's done using ...
0
votes
1answer
50 views
I have an RSA public key and a private key created with the same modulus, can I decrypt cipher text?
Assuming I have an RSA public key which is stated to be created with the same modulus of the RSA private key that I have, and I have ciphertext created with the mentioned public key, can I decrypt the ...
1
vote
0answers
56 views
open ssl: Verify return code: 2 (unable to get issuer certificate) [on hold]
I have 3 certificates:
root_ca.pem (self signed cert CA)
issuing_ca.pem (Intermediate CA signed by root ca)
user.pem (user cert signed by intermediate ca)
If I try to validate the chain with openssl
...
2
votes
0answers
43 views
openSSL use SAN from CSR
I am trying to create an ssl certificate from a CSR file containing a SAN using openssl, using the command line:
openssl x509 -req -in keyshare.acceptance.privacybydesign.foundation.csr -CA rootCA....
4
votes
1answer
143 views
Using 'openssl cms verify/decrypt' to retrieve content encrypted and signed by a foreign Java library
I'm trying to decrypt and verify a message generated by a third-party Java framework. The ZIP archive of the latter could be found here, and the RFC-compliant certificates are uploaded to a Dropbox ...
0
votes
1answer
43 views
Can't generate a CSR request with CA set to true
I'm using this config file:
[ req ]
default_bits = 2048
distinguished_name = req_distinguished_name
req_extensions = v3_req
[ req_distinguished_name ]
commonName = John
[ v3_req ]...
1
vote
0answers
60 views
Why does OpenSSL fail to decrypt when the key is too large?
I have the following groovy script:
cmd1 = "echo ${really_long_key}"
ssl_cmd = "openssl aes-256-cbc -md md5 -nosalt -a -pass pass:${encryptPassword} dec"
def process = cmd1.execute() | ssl_cmd....
0
votes
0answers
42 views
Converting a raw EC public key into EVP_PKEY using openssl
I am trying to convert a raw EC key and EVP_PKEY structure. The process seems straightforward but am running into issues.
Here is the code I am using --
unsigned char tmpPubKey[] = {
0x04, ...
-1
votes
1answer
68 views
how to force openvpn client to use TLS instead of SSL connection [duplicate]
i'm trying to use openvpn client to connect TLS VPN server
here is my .ovpn file
client
tls-client
dev tun
proto tcp
remote example.com 443
resolv-retry infinite
auth-user-pass
persist-key
...
-1
votes
1answer
68 views
tls custom system trusted certificate on android6 not working [closed]
I encounter the same problem as the user has in this post:
Why does Samsung Android browser say our site has a valid certificate, but the site identity has not been verified?
The accepted answer is:
...
0
votes
0answers
15 views
Unable to load crlnumber when creating CRL with OpenSSL [migrated]
I am trying to create a CRL with my own private CA with OpenSSL. I have to work on a Windows machine from the binary. I give the command:
$openssl ca -gencrl -config root-ca.conf -out root-ca.crl
...
1
vote
2answers
86 views
How does TLS traffic impact firewalls?
If I have an open port on a firewall it means that I can receive traffic on that port. If it's unencrypted I assume that the raw data is just allowed through.
If TLS is being used, does firewall ...
1
vote
1answer
67 views
Cross platform OpenSSL aes encryption
I encrypted a file by using the following command from a stackoverflow answer:
openssl enc -in file_name -aes-256-cbc -pass stdin -out file_name.aes;
I can decrypt this file by running:
openssl enc ...
3
votes
1answer
79 views
How to filter ciphers based on ssl certificate?
I have many ssl certificates.
On one of the certificates I run the command openssl x509 -in cert.pem -text -noout
it shows:
Signature Algorithm: ecdsa-with-SHA256
Public Key Algorithm: id-...
2
votes
1answer
59 views
Is it OK to set SSL fullchain to service
Imagine service with SSL-server authentication. There are 3 certificates in chain:
Root CA certificate;
Intermediate CA certificate;
Host certificate.
Is it ok to put all 3 certificates (fullchain) ...
1
vote
1answer
61 views
OpenSSL ECC key - Additional byte in DER encoding for one curve
In the below, I use OpenSSL to create a private key for the secp224k1 curve. Note the length of the private key in the DER - 0x1d. That's 29 bytes, or 232 bits, not 224. It appears that a leading zero ...
1
vote
0answers
34 views
When using openssl to encrypt a file, how would I create a key made up of specific letters? [closed]
I want to create a 128bit AES key made up of specific letters. I think I would need to use something like
openssl genrsa -aes128 -out privkey.pem
or
openssl genrsa -out privkey.pem
but I'm not ...
0
votes
1answer
53 views
how do optional device certificates work?
i am trying to achieve this:
i have a bunch of users who log in to my website. some of the user can opt to be allowed to log in using their selected devices.
for this i am planning to use ssl based ...
0
votes
1answer
34 views
What could cause Location not to transfer from CSR to final certificate?
I'm using the Win32 port of OpenSSL from Shining Light Productions to operate a small personal CA, and I'm running into a weird problem. These are the commands I use to generate a client key/...
1
vote
0answers
65 views
Is ephemeral, authenticated, encrypted TLS-PSK ready to use commercially?
I have a secure way to get a pre-shared key between my server and all of the clients.
Is there a standard, easily available (e.g. in an OpenSSL release) way to use this to set up TLS-PSK with all of ...
0
votes
1answer
99 views
OpenSSL - 2040 bit temporary key size, 2048 bit private key
Recently, I had an OpenVAS scan report that a TLS connection to Postfix used a temporary key size of 2040 bits, instead of the 2048 bits that I have set for my key size, and I have perfect forward ...
1
vote
1answer
60 views
Are there any known examples of companies who were successfully breached using POODLE, BEAST or SWEET32?
When this was first announced back in 2014, Brian Krebs reported on how much of a threat these kinds of birthday attacks were, but I have not been able to find a case study of a successful breach.
Is ...
2
votes
1answer
260 views
How to verify Diffie Hellman uses a “Safe” prime
I'm the developer for a web application that was recently pen tested. One of the vulnerabilities reported from the pen test is that our server uses an unsafe Diffie-Hellman prime in our key exchange. ...
2
votes
0answers
55 views
Create self-signed ssl certificate that can't sign other certificates
I have a LAN HTTPS server that I want to give an SSL certificate to. Since it's local-only, a self-signed certificate is sufficient for me. I have previously given it a self-signed root certificate, ...
1
vote
0answers
52 views
Who is responsible for Cipher selection and SSL handshake - Akamai, Load balancer, Publisher dispatcher, publisher
We have a AEM (Adobe experience manager) 6.2 application.
I recently been advised to exclude/remove the weak ciphers for strict security policies. But I am not sure where shall I do the configuration ...
1
vote
0answers
171 views
Verify PKCS#7 (CMS) detached signature with timestamp with OpenSSL
I have a PKCS#7 (i.e., CMS) detached signature of a file that is signed by my signing certificate and then timestamp signed by a TSA that is all generated by an application we wrote. I would like to ...
0
votes
0answers
146 views
Using PSK between an openssl server and client
I'm trying to create a connection between an openssl server and client on my machine using ECDHE-PSK-AES256-CBC-SHA384 What am I doing wrong with these commands?
openssl s_server -cipher ECDHE-PSK-...
0
votes
1answer
82 views
Trying to understand/use openssl for decryption
There are many questions around this topic, but I haven't found one that explains exactly my issue.
I am encrypting data with AES 128 CBC, but using python and pycryptodome (should have used the ...
0
votes
1answer
34 views
Usage of SSL_CTX_use_certificate
While building a context through openssl, if I do not provide a certificate by using the function SSL_CTX_use_certificate, would all the connections from that context default to anonymous diffie-...
0
votes
1answer
39 views
Can a DH param .pem file force the usage of only a single type of diffie-hellman exchange
Is it possible to create a diffie-hellman param .pem file to force the openssl ctx to use only a certain type of dh exchange. For example, I know that it can be used to set the length of the dh key, ...
1
vote
2answers
56 views
Does EV SSL certificate makes any difference while used instead of self signed ssl in case of API for android app?
I understand that self signed ssl is risky incase of dns spoofing since the attacker may generate a self signed ssl himself and place it in his ip address and it will trigger a warning in the client ...
1
vote
1answer
44 views
OpenSSL Padding Oracle. Specific Ciphers on apache2 seems a little limited
I've seen a lot of articles giving the official explanation on how to prevent OpenSSL Padding Oracles, Usually all of them state that its CBC cipher suites that leave you vulnerable.
The following ...
2
votes
1answer
624 views
What is a “non-stitched” ciphersuite?
From the OpenSSL Security Advisory
- 0-byte record padding oracle (CVE-2019-1559)
In order for this to be exploitable "non-stitched" ciphersuites must
be in use.
What is a 'non-stitched' ...
0
votes
2answers
130 views
What makes SoftHSM more security than other software solutions such as OpenSSL? [closed]
I see many people using softhsm just for encryption / decryption rather than using openssl.When I ask people they reply softhsm is more secure. Can anyone say in what ways softhsm is more secure.
0
votes
0answers
393 views
Specify Subject Alt Names in OpenSSL CA
I know you can use -addext with openssl req..... but, are you able to do that with openssl ca....? I would like to be able to add Subject Alternative Names with only one command without having to edit ...
0
votes
0answers
30 views
decrypting a value read from disk fails with EVP_DecryptFinal_ex:bad decrypt message
Am getting this error "error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt". when I encrypt a buffer and persist it to writing to disk and trying to read the value from disk by ...
0
votes
1answer
54 views
RFC 5755 Attribute Certificate Validation
According to this explanation:
Manually walking through the signature validation of a certificate
I'd like to know how is the validation process of an RFC 5755 attribute certificates, because it ...
1
vote
1answer
45 views
What should be OpenSSL .cnf file equivalent of certreq .inf for S/MIME?
Currently I'm using certreq to prepare CSRs for S/MIME certificates. I want to move away from it and start using OpenSSL for key/CSR generation.
My .inf file looks like this:
[Version]
Signature="$...
0
votes
0answers
45 views
EVP_get_cipherbyname returns NULL
When I try to compile my code using OpenSSL 1.1.0i, EVP_get_cipherbyname() is working properly. But when compiled with OpenSSL 1.0.2p, this method always returns NULL and the error is "error:00000000:...
1
vote
1answer
62 views
Nmap / Qualys say 3DES is available, but OpenSSL fails to connect
Running a Qualys scan showed that the IP was vulnerable to a Sweet32 attack, here is the output:
TLSv1 WITH 64-BIT CBC CIPHERS IS SUPPORTED
DES-CBC3-SHA RSA RSA SHA1 3DES(168)...
2
votes
2answers
270 views
HMAC and key size
I generated a keyed hash using HMAC-MD5 and HMAC-SHA256 for an arbitrary file with various keys of different lengths.
Do we have to use a key with a fixed size in HMAC? If so, what is the key size? ...
0
votes
0answers
37 views
How can I create a self-signed certificate with a custom field? [duplicate]
For experiment, I want to add a custom field in a TLS certificate then validate it. Because it is experiment, it will be a self-signed certificate. I use OpenSSL 1.1.0g and Ubunut 18.04. Any hint will ...
2
votes
2answers
214 views
Why is OpenSSL verify output depending on source of cert files?
As a test of my TLS/SSL knowledge, I'm trying to verify wikipedia.org's TLS cert. I have downloaded the server-distributed certificate to a file called cert.pem and the root cert (from Globalsign's ...
0
votes
0answers
288 views
Generate symmetric key programmatically using openssl EVP
Am learning OpenSSL EVP API and trying to understand the ways to generate a symmetric key using OpenSSL EVP in C++ program.
I have two questions in this regard:
1) To understand what the command ...
1
vote
0answers
368 views
Use self-signed certificate inside of Docker Container for localhost
I've created a self-signed certificate for localhost to use https.
I'm running an Apache Docker container which uses the self-signed certificate and the private key. I then installed the certificate ...
0
votes
0answers
132 views
What is a reasonable default_crl_days value for OpenVPN CLR? Why?
I am having trouble finding a definitive answer (with a rationale) on what a reasonable default value for default_crl_days (in openssl.cnf) for use with OpenVPN.
The current default is 30 days. But ...
0
votes
2answers
231 views
How to generate the most secure private key? [closed]
I need to generate the most secure private key.
Usually I use a command:
openssl genrsa -des3 -out mykey.key 2048
Is triple DES secure enough?
Is 2048 large enough?
Are there any other ways to ...
0
votes
1answer
132 views
How to decrypt AES CCM with salt on Windows? [closed]
I have an old file that contains some important information. I know the password, except I forgot how I generated it, and as a result don't know how to decrypt it.
Here it is (decoded from it's ...
0
votes
0answers
71 views
Can I use OpenSSL to generate a key from asn1 configuration file without specifying the modular multiplicative inverse q^-1 (mod p)
I'm trying to create this gimmicky public-private RSA key pair where p and q are the same number. I would want to use the asn1 parser in OpenSSL, but I'm required to specify the coeff parameter, the ...
0
votes
1answer
78 views
Why are ciphers using DSS being offered when using DH+AES:!DSS?
When I run the following command on Windows 10 with OpenSSL 1.0.2p installed I receive a curious result back (Formatted for readability):
openssl ciphers "DH+AES:!DSS:!aDSS:!aNULL"
DH-DSS-AES256-GCM-...
