Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

OpenSSL is an open source project which develops software for Secure Sockets Layer (SSL v2/v3), Transport Layer Security (TLS v1), as well being a full-strength general purpose cryptography library.

OpenSSL provides both a library (for use within your own program), and a series of command line tools for common tasks.

1601 questions
0
votes
1 answer

server SSL Certificate validation

This may seem rather trivial, but Im' not good with tls. I have an openvpn server that does mutual tls auth. my vpn client has a ca.crt file of: root CA intermediate CA issuing CA my server has a server.crt of: server certificate # which is signed…
sebastian
  • 133
  • 6
0
votes
1 answer

How to confirm openssl is reading its config file

Is there a simple way of changing the openssl config file and confirming with openssl command line parameters to confirm that it is reading the configuration file? (I'm trying to confirm that the openssl command is reading the file from the…
Brian
  • 1
0
votes
1 answer

OpenSSL Does not Create Subject Alternative Name (SAN)

I have been trying to create a self-signed certificate with subject alternative name; however, although the cretifcate was created successfully, SAN was not added to its details. Here's the command I used to create singing request. openssl req…
Scarnet
  • 101
  • 3
0
votes
0 answers

Reading openssl s_client output

I am trying to read the openssl s_client command output, specifically the topmost section about depth and verify information. Need some help understanding how to read the output and verify information. Tried the below command with…
Pratyush
  • 1
0
votes
0 answers

how to add Certificate Sign on .pem file under x509v3 Basic constraints

Could anyone please suggest me to add or remove Certificate Sign parameter which I marked in the below-mentioned picture? I know it can be done on openssl.cnf file but couldn't able to identify the correct name and format. Thanks
ram ajay
  • 11
  • 2
0
votes
1 answer

What does "priv" in a encrypted ECC key mean?

I generated a password protected key by command openssl genpkey -algorithm ec -pkeyopt ec_paramgen_curve:P-256 --out ca.key -text -aes-256-cbc. The passphrase is "rrrr" (this example is a throwaway), and the output is: -----BEGIN ENCRYPTED PRIVATE…
Siyuan Ren
  • 103
  • 2
0
votes
1 answer

TLS: could not load verify locations

I am trying to contact the organization's OpenLDAP server over SSL. I am not sure if I am trying with the correct certificate, but I am using a .pfx file I found. It is located at C:/cert/mycert.pfx On my ldap.conf file I have the…
pileup
  • 229
  • 2
  • 9
0
votes
2 answers

Stunnel Server On CentOS 7 - TLS options: 0x2100000 (+0x0, -0x0) Error

I am using CentOS Linux release v7.9.2009 (Core) with latest update. First of all i installed latest version of OpenSSL there. Here is the commands for that installation : cd ~ wget https://www.openssl.org/source/openssl-3.0.7.tar.gz tar -zxvf…
helius.dev
  • 15
  • 5
0
votes
0 answers

Nginx SSL private key error

I'm configuring Nginx with self-signed SSL certificate. Nginx fails to start due to the following error [emerg] cannot load certificate key "/path/to/my.key": PEM_read_bio_PrivateKey() failed (SSL: error:0D0680A8:asn1 encoding…
kebugcheck
  • 1
  • 1
0
votes
1 answer

Import Custom SSL Certificate in Zyxel GS1920-8HPv2

I have a problem with importing a server ssl cert for https web connection on myZyxel GS1920-8HPv2. On the WebGui of the Switch, there is an information, that the cert and key has to be in a pkcs12 container. I did the following things to create the…
sangul
  • 1
  • 2
0
votes
0 answers

How to download the SSL certificate from a website using PowerShell?

I want to download an SSL certificate using PowerShell I glad for any help
netanel shteren
  • 1
0
votes
0 answers

Network error: sslv3 alert handshake failure

I can't perform yum update/install new software using yum it always say: Network error: sslv3 alert handshake failure Here is error example: [root@static ~]# yum update Loaded plugins: fastestmirror, rhnplugin, universal-hooks Network error: sslv3…
Riad Ahmed
  • 1
  • 2
0
votes
0 answers

MySQL have_ssl and have_openssl DISABLED but certificates installed - Windows Server 2012

I want to enable an SSL certificate in MySQL Server for some users. I tried following this tutorial - the one that is below Best Answer. I installed OpenSSL, created all certificates and edited the my.ini. Then, after running SHOW global variables…
Arnau Serra
  • 1
  • 1
0
votes
1 answer

How to tell which versions of TLS MYSQL (windows) is using?

I have another question about a pair of servers that I cannot turn off TLS 1.0/1.1. Even though IISCrypto showing them off and made right reg entries. The servers run an IIS10/PHP7.4/MySQL8 stack. (I am not the person who set up the server…
blankip
  • 129
  • 7
0
votes
1 answer

How to convert .cer and .key file to .pem?

I have a .cer certificate, .key file and I would like to convert it to the .pem format. How do I convert them to .pem?
Wassim BEN FATMA
  • 1
  • 1
  • 1
1 2 3
…
99 100