New answers tagged openssl
0
votes
Validate HTTPS traffic at later time
TLSv1.3 explicitly prevents this kind of traffic analysis "at later time", i.e. without having the internal state of both sides. This is called "perfect forward secrecy" (PFS).
In ...
- 3,395
2
votes
Accepted
Why is there an ASN1 OID and a NIST CURVE reference for the same curve?
Most of the X.509 standards are based on a format called ASN.1 (Abstract Syntax Notation). This is a tag-length-value (TLV) format that describes the structure of data. One of those data structures ...
- 6,655
4
votes
Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?
Neither cipher suite is good. Which one is the least bad depends on your threat model.
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA has two problems:
It uses SHA-1 to authenticate the server's signature. SHA-1 ...
1
vote
Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?
Risks of CBC ciphers
To attack an implementation vulnerable to variants of POODLE and Lucky13, one of the sides needs to be vulnerable (not a given, e.g. if SChannel is used on both sides it should be ...
- 7,603
1
vote
Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?
On the cmd line, try:
$ openssl ciphers | tr ':' '\n'
This would give you the list of ciphers in the decreasing order of "strength". This list should help you evaluate the two ciphers in ...
- 1,136
3
votes
Which cipher is more secure TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA or TLS_RSA_WITH_AES_256_GCM_SHA384?
I agree with @schroeder, I don't think you can do a direct "which is better?" comparison with cipher suites.
That said, Mozilla's TLS Recommendations currently lists DHE-RSA-AES256-GCM-...
- 57k
1
vote
Check public key certificate
Since you're using OpenSSL
openssl verify -check_ss_sig -CAfile cert.pem cert.pem
If you mean you want to do it 'by hand' so that you see the exact data being signed (but still with OpenSSL), the ...
- 9,635
0
votes
2 Way SSL for Magento API
What are the changes required in PHP and apache.
What are the certificates, the client should pass to the server.
What are the certificates, the server should pass to the client.
Your questions are ...
- 101
Top 50 recent answers are included