Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

OpenSSL is an open source project which develops software for Secure Sockets Layer (SSL v2/v3), Transport Layer Security (TLS v1), as well being a full-strength general purpose cryptography library.

OpenSSL provides both a library (for use within your own program), and a series of command line tools for common tasks.

1601 questions
0
votes
0 answers

Apache mod_ssl [2.2.26] and Openssl [0.9.8za] compatibility

Our product running over RHEL has Apache 2.2.26 & OpenSSL 0.9.7 [ofcourse, pretty old]. We are currently upgrading Openssl to 0.9.8za. I have installed the latest OpenSSL RPMs. However Apache is failing to start. After debugging i found the issue is…
kiwi
  • 1
  • 1
0
votes
1 answer

openssl installer not copying dlls to windows system folder

I have downloaded windows openssl (Win32OpenSSL_Light-1_0_1h.exe). When installing it prompts if the dll files are to be copied to the windows system directory. I select Yes. But after the install the date/time of the files in the…
M Schenkel
  • 291
  • 1
  • 2
  • 8
0
votes
1 answer

“wget ca-directory=/etc/ssl/certs” failing on Ubuntu 14.04

Ubuntu 14.04's default wget cannot handle SSL. How can I fix this? I do not want to use --no-certificate-check. The certificate I want to authenticate is authenticated against the Root CA from Thawte.
user54883
0
votes
3 answers

Install godaddy ssl certificate on amazon ec2

I'm new to setting up ssl certificate and csr, i want to use public ip instead domain name in ssl. i created a csr file using following command and info openssl req -new -newkey rsa:2048 -nodes -keyout mydomain.key -out mydomain.csr Generating a…
Gabber
  • 179
  • 1
  • 2
  • 9
0
votes
1 answer

How to remove files from installation when used prefix in linux?

I was installing openssl library by hand using these commands: wget http://openssl.org/source/openssl-1.0.0.tar.gz tar -xvf openssl-1.0.0.tar.gz cd openssl-1.0.0 ./config --prefix=/home//.sys shared make make install Now I need to…
Byakugan
  • 141
  • 1
  • 3
  • 12
0
votes
1 answer

jenkins shuts down upon logoff from ssh session

I have setup two instances where (1) is running httpd to reverse proxy. (2) is running jenkins.war. [1st instance - ssl.conf] #ProxyPass /jenkins http://secondinstance:8081/ nocanon #ProxyPassReverse /jenkins …
user192756
0
votes
0 answers

How to solve multlib error?

I've been developing on a local Ubuntu Server, and moving dev files to production CentOS6 server. Working on installing node, The internet instructed to install the "development tools" group, so I did and later learned I could just yum install npm,…
0
votes
1 answer

Server suddenly stops responding and then resumes an hour later

My FreeBSD server had been perfectly working for over 2 years without any major changes to the system. Recently I installed SSL certificate using Apache's mod_ssl, and after 10 days of running fine the server suddenly started crashing. When the…
krn
  • 133
  • 1
  • 1
  • 5
0
votes
1 answer

openssl upgrade from 0.9.8w to 0.9.8y

I am trying to upgrade the openssl version from 0.9.8w to 0.9.8 y to address the following security vulnerabilities CVE-2012-2333, CVE-2013-0166 , CVE-2013-0169. While trying to upgrade I am facing following dependanices and any insight to this will…
0
votes
0 answers

Should I completely rebuild my server due to Heartbleed?

I have a CentOS 6.5 VPS server... $ uname -a Linux mary 3.14.4-x86_64-linode40 #1 SMP Tue May 13 12:25:05 EDT 2014 \ x86_64 x86_64 x86_64 GNU/Linux When the news about the Heartbleed vulnerability came out, I shut it down. It was running…
Agvorth
  • 2,459
  • 4
  • 29
  • 29
0
votes
2 answers

What do CAs (Certificate Authority) deliver from CSR?

I need an SSL certificate for an HTTPS server. I'd like to offer the choice between self-signed and CA-signed certificates. I can generate a self-signed SSL certificate with the following OpenSSL commands: openssl req -newkey rsa:512 -x509 -days…
philant
  • 109
  • 7
0
votes
1 answer

apache taking old openssl libraries when doing apachectl graceful

Due to heartbleed vulnerability I have recompiled apache with non vulnerable latest openssl(I had to keep old vulnerable openssl due to some dependency problem). It is running fine and when doing heartbleed test for mydomain.com it says 'seems fixed…
Harikrishnan
  • 1,159
  • 2
  • 14
  • 32
0
votes
1 answer

OpenSSL certificates

Since the recent surfacing of the heartbleed exploit, I have become curious as to how long openssl certificates are usually kept before they are regenerated? Is it days, weeks, months, years? I can't seem to find a definitive answer. I realize that…
ddaa
  • 1
0
votes
1 answer

https outbound connections work before creating AMI, but not on new instance using that AMI

On Amazon Web Services Launch an EC2 instance using Amazon Linux AMI 2014.03.1 - ami-fb8e9292 (64-bit) Run my ansible script to configure the server for baking into an AMI Run some Ruby that accesses an https:// url. It works fine. Create the AMI…
Jason Butler
  • 183
  • 1
  • 1
  • 5
0
votes
2 answers

I have OpenSSL 1.0.1g but my site is still vulnerable?

I've updated my Ubuntu server to use OpenSSL 1.0.1g and when I run sudo openssl version -a I get OpenSSL 1.0.1g 7 Apr 2014 built on: Sat Apr 19 14:15:45 UTC 2014 platform: linux-elf However, sites like https://filippo.io/Heartbleed/ are still…