New answers tagged openssl
4
votes
Is missing SAN in certificate a security issue?
It's not a security risk, but using the Common Name for the hostname has been deprecated for almost 25 years according to RFC 2818 (HTTP over TLS) and completely removed from modern browsers.
In other ...
- 17.5k
1
vote
Is missing SAN in certificate a security issue?
Some browsers (see discussion in this question) such as Firefox and Chrome will ignore the CN and only look at the SAN - so they will always treat a certificate with a missing SAN as untrusted.
So if ...
- 14.6k
1
vote
Extract pre-master keys from an OpenSSL application
I found mitmproxy was able to generate the needed pre-master SSL key log I needed to inspect traffic created outside of the web browser (in my case, a F5 WAF blocked PATCH request made by docker push)...
- 111
3
votes
Extract pre-master keys from an OpenSSL application
Old thread, but an update for anyone reading it:
https://github.com/openssl/openssl/pull/25297#top
Will be merged and available in openssl-3.5, and so the use of SSLKEYLOGFILE should "just work&...
- 31
0
votes
What Server Temp Key algorithms are allowed in each SECLEVEL?
Thanks to Steffen Ullrich comment
The relevant documentation is at SSL_CTX_set_security_level, and the requirements for key sizes apply to server temp keys also:
SECLEVEL=0: Everything is permitted
...
Top 50 recent answers are included