Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

OpenSSL is an open source project which develops software for Secure Sockets Layer (SSL v2/v3), Transport Layer Security (TLS v1), as well being a full-strength general purpose cryptography library.

OpenSSL provides both a library (for use within your own program), and a series of command line tools for common tasks.

1601 questions
0
votes
1 answer

Curl is failing to connect to StartCom protected sites while wget succeeds

I'm trying to track down a strange issue with my servers. Within the last day or so, connections to certain SSL protected sites(both HTTP and SMTP) started failing. Here is the output from openssl: CONNECTED(00000003) depth=1 C = IL, O =…
Jesse Weigert
  • 287
  • 1
  • 2
  • 10
0
votes
0 answers

Changing SSL-version for curl

I have been trying for hours to change the SSL Version for curl from NSS to OpenSSL because I have a web application that's dependant on it. I'm running RedHat RHEL 6.7 on a 64-bit system. I have read threads that say that I should set this when…
Marwzoor
  • 41
  • 1
  • 1
  • 3
0
votes
3 answers

How to trust a self signed certificate with different issuer?

I have a certificate and private key files which are created by my colleague. There are placed in Apache /etc/apache/ssl directory and all the configurations set properly. I opened the site with https:// and got "certificate not trusted" error and…
karthikeayan
  • 101
  • 4
0
votes
0 answers

Disable SSL verification on Hsts

When i try to run openssl s_client -connect www.merdincz.com:443 -debug command i'm getting; SSL routines:SSL23_GET_SERVER_HELLO:tlsv1 alert internal error On SSLLabs https://www.ssllabs.com/ssltest/analyze.html?d=merdincz.com everything seems…
merdincz
  • 101
  • 1
  • 1
0
votes
1 answer

Secure ejabberd: protocol options and ciphers setting has no effect

I try to secure my ejabberd by configuring openssl ciphers like this for s2s communication: {s2s_use_starttls, required}. {s2s_certfile, "/etc/ejabberd/mycert.pem"}. {s2s_protocol_options, ["no_sslv3", "no_sslv2"]}. {s2s_ciphers, "HIGH" }. However…
funkenstrahlen
  • 101
0
votes
1 answer

Lost my key file when I generated the csr

This is the first time for me dealing with ssl. I have created a csr file, but I lost the key file in this generation. The certificate was issued and I got all the crt files. Now I want to install it on my nodejs server, but i cant because I dont…
SexyMF
  • 209
  • 1
  • 2
  • 10
0
votes
2 answers

Can only connect to httpd on 443 with IP address, hostname SSL handshake fails

I've come across a very strange issue. On our server, we are running Solaris 10 with httpd 2.2.19 and openssl 1.0.0d. We have only a single virtual host: ServerName hostname.example.com:443 With hostname being the…
Scottie
  • 1
0
votes
0 answers

Cannot connect to smtp mail server

I have an installation of Postfix & Dovecot on a Centos 7 server. While being logged into the server via ssh I am able to use telnet and openssl to connect to localhost like openssl s_client -starttls smtp -crlf -connect localhost:25 authenticate…
seyfe
  • 151
  • 1
  • 5
0
votes
1 answer

SSL .csr asn1 encoding routines:ASN1_CHECK_TLEN:wrong tag

I have created a .csr and .key file in /etc/apache2/ssl/domain/ like openssl req -new -newkey rsa:2048 -nodes -keyout domain.key -out domain.csr like GoDaddy said, then linked to those files with the apache directives:
batflaps
  • 179
  • 1
  • 3
  • 10
0
votes
1 answer

installing ruby 1.9.3-p194 using rbenv on centos 6.7

I'm moving a Ruby/Rails app to a Centos 6.7 server (from Ubuntu) and am installing ruby via rbenv. I run rbenv install -v 1.9.3-p194 and it will start to compile but the build fails. The build output log gives the following output showing a…
nulltek
  • 1,251
  • 3
  • 14
  • 22
0
votes
1 answer

openssl default md5 message digest default_md not listed in cert

According to this serverfault answer the default message digest for openssl 1.0 is MD5. My openssl.cnf file has default_md set to default. I generated a certificate using openssl 1.0.0: openssl req -x509 -newkey rsa:2048 -keyout key.pem -out…
abalone
  • 211
  • 1
  • 2
  • 5
0
votes
1 answer

Difference between ssl products and recommented ssl

I need more information on SSL certificate. I am using AWS EC2 Ubuntu 14 with LAMP. I looked for OpenSSL as I do not have budget but it acts like first one. I need SSL which can acts like second one or third one. More importantly, I need SSL…
KuKu
  • 141
  • 6
0
votes
0 answers

SSLv3 support in Chrome 40+

One 1 machine I am using openssl 1.0.0m with only support for SSLv3 ciphers. I am also using Chrome 47 that uses this openssl server successfully. I am not setting SSLv3-fallback. On another machine with the same setup Chrome sporadically displays…
abalone
  • 211
  • 1
  • 2
  • 5
0
votes
1 answer

How to add multiple X509v3 Subject Alternatve names during cerificate request (CSR generation) without editing openssl.cnf file

I want to generate CSR for two domains. I have tried according to this http://apetec.com/support/GenerateSAN-CSR.htm But there is no such section available in openssl.cnf file and i don't want to edit openssl.cnf Also tried…
Varun Chawla
  • 155
  • 1
  • 2
  • 5
0
votes
1 answer

Openssl: cat: /dev/fd/63: No such file or directory

I try to create a Certificate Signing Request (CSR) using openssl req -new -sha256 -key domain.key -subj "/" \ -reqexts SAN -config <(cat /System/Library/OpenSSL/openssl.cnf \ <(printf "[SAN]\nsubjectAltName=DNS:foo.com,DNS:www.foo.com")) but…
dknaack
  • 249
  • 1
  • 3
  • 10
1 2 3
…
99 100