Questions tagged [openssl]

OpenSSL is an open source software toolkit that implements the SSL/TLS protocol, as well as a general cryptographic library.

Filter by
Sorted by
Tagged with
0 votes
0 answers
13 views

Signature verification for JWT issued by Azure

Could you assist us with the next question related to JWT token verification: Recently we started writing functionality for Single Sign On for Microsoft users. We are guided by this documentation ...
apache_borys's user avatar
0 votes
0 answers
26 views

Intermittent OpenSSL Error 0A000126 running Mosquitto MQTT Broker

We have a customer using: OpenSSL 3.1.0 14 Mar 2023 (Library: OpenSSL 3.1.0 14 Mar 2023) TLS 1.2 Mosquitto MQTT Broker nginx is not being used Getting intermittent errors. Here's an example of the ...
user1375489's user avatar
0 votes
0 answers
33 views

Why does `openssl asnparse` not give an error but `openssl x509` does for a DER file?

I have a base64 encoded file (named bst) that after base 64 decoding (base64 -d bst > bst.der) becomes a DER encoded file (bst.der). Running the command openssl asn1parse -inform der -in bst.der ...
geckels1's user avatar
  • 430
0 votes
1 answer
21 views

Issue with ClickHouse Connection to Amazon MQ for RabbitMQ via AMQPS

I'm seeking assistance with a connection issue between ClickHouse (version 23.8.2.7) and Amazon MQ. We recently transitioned our RabbitMQ instance to Amazon MQ, which exclusively supports AMQPS. To ...
JacobMoon's user avatar
0 votes
0 answers
41 views

CMake OpenSSL trouble porting a cpp app from OSX to Ubuntu

As it says in the title, I'm porting an OSX C++ application to Ubuntu. This app works perfectly on OSX, but is failing to compile on Ubuntu. Here is my CMake - it is a little weird because I set up ...
Thomas Murphy's user avatar
0 votes
1 answer
33 views

Is server-side certificate mandatory for SSL connection using OpenSSL

I am having a C client-server model that established an SSL connection using openssl library. On the server-side, I have set the verification mode to SSL_VERIFY_PEER and hence, the client certificates ...
Cyborg's user avatar
  • 13
0 votes
1 answer
38 views

OPENSSL_CRYPTO_LIBRARY Crypto SSL error when trying to configure in CMake

This is my first time trying to install Azerothcore. I followed a few (I would say up to a year old) ways of installing Azerothcore but every time I seem to have a hiccup when it comes to the OpenSSL. ...
Stoz's user avatar
  • 1
0 votes
0 answers
23 views

Error starting postgres "could not load server certificate file "/etc/ssl/certs/ssl-cert-snakeoil.pem": ee key too small"

I am trying to start Postgres DB but it's failing. The log file /var/log/postgresql/postgresql-12-main.log is showing the following line: 2023-12-04 13:01:32.197 UTC [22573] FATAL: could not load ...
grouser's user avatar
  • 618
0 votes
0 answers
38 views

SSL certificates not being verified on client side

I have a simple client-server program in C, using the OpenSSL library, where I am establishing a TCP connection between the 2, followed by an SSL handshake. The client and server programs are as ...
Cyborg's user avatar
  • 13
0 votes
0 answers
70 views

Wrong X509IssuerName, X509SerialNumber Error in Zatca xml Validation

Wrong X509IssuerName, X509SerialNumber Error (Zatca FATOORA Simulation portal) I'm currently integrating KSA Zatca eInvoicing Phase 2 into my workflow and encountering an issue with the FATOORA ...
Byte_Box's user avatar
0 votes
0 answers
13 views

need hel with shell commands to python

I have this shell script that creates openssl signature with payload, date etc. I am trying to convert that into a python script. I could not get pass this section of bash script code. Can you please ...
anotheropsguy's user avatar
0 votes
0 answers
30 views

Error creating CSR with config.cnf openssl

I am trying to create a CSR using Openssl with predefined configuration. This is for the purpose of government E-Invoice recomendations in Saudi. I have successfully created Public and Private key. ...
FaheemMCFC's user avatar
0 votes
0 answers
29 views

ssl.SSLError: [SSL] PEM lib (_ssl.c:4044) while connecting through Python Code

I have received x509 certificate (certificate.pem file) containing Private Key and Certificate in same file. I am trying to establish the connection using Python code through SSL but unfortunately ...
Perl_Devloper's user avatar
0 votes
0 answers
16 views

Python error - sslv3 alert handshake failure

Doesn't works in Python but works in NodeJS Python code import requests certificado_pem = './ENBPAREquipamentoCCEEA1.pem' chave_privada = './chave_privada.key' url = "https://servicos.ccee.org....
Ruan Nawe's user avatar
  • 383
0 votes
1 answer
35 views

How to fix CMake Error Could NOT find OpenSSL missing: OPENSSL_CRYPTO_LIBRARY when configuring Azerothcore

When I'm trying to configure CMake in order to build Azerothcore I get the following error: CMake Error at C:/Program Files/CMake/share/cmake-3.27/Modules/FindPackageHandleStandardArgs.cmake:230 (...
Anton M's user avatar
-1 votes
0 answers
15 views

Password is invalid during import .pfx on MacOS

I have got such type of issue: .pfx file was generated from the Powershell, on Windows I can import it using password without any problem. I am trying to import it on MacOS but there is wrong password....
user23021985's user avatar
1 vote
0 answers
18 views

OpenSSL. Can not enable GOST engine

Due to installation guide(https://github.com/gost-engine/engine/blob/master/INSTALL.md). openssl version >> OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022) openssl version -e >...
haku's user avatar
  • 45
0 votes
1 answer
21 views

get0, set1 functions in openssl

In openssl we have functions with get0 for example X509_get0_subject_key_id, GENERAL_NAME_get0_value, SSL_CTX_set1_client_cert_type, SSL_CTX_set1_server_cert_type to name a few. Here we have get0, ...
venkysmarty's user avatar
  • 11.1k
0 votes
1 answer
153 views

.NET 8: SQL Server Pre-Login Handshake (error: 31 - Encryption(ssl/tls) handshake failed)

Describe the bug Same issue as described here. We need to upgrade from .NET 6 to .NET 8, needed for LTS, however, we cannot upgrade the database (yet). Stack trace: System.Data.SqlClient.SqlException (...
Diego Sanabria's user avatar
1 vote
1 answer
65 views

When using staticly linked OpenSSL 3.0.8 on some machine legacy provider can't be loaded

Background I have large C++ project which was using OpenSsl 1.1.1t and now I'm tweaking it to use OpenSsl 3.0.8. To resolve some problem with loading old pfx files I need legacy provider loaded. ...
Marek R's user avatar
  • 33.3k
0 votes
0 answers
28 views

While migrate the OpenLDAP and OpenSSL

While upgrading Openssl(1.1.1k) & openLDAP (2.4.47) to the version Openssl(3.0.10) & OpenLDAP(2.5.16) in windows server 2016 & 2019, I am getting an error which is posted below Note: ...
Maria's user avatar
  • 297
-1 votes
0 answers
30 views

Decrypting: "EVP_CIPHER_CTX_set_key_length:invalid key length" sometimes and i dont know why

I send from Android InitialVector(iv) "testtesttesttest" and php decrypt the message right, but "testtesttestitot" give me error. "GWS3eDKYYoaZISBxbUINjvhreiiYHSAg";//...
ProgTerracom's user avatar
1 vote
1 answer
71 views

openSSL CLI encryption using AES-256-CBC

Dear openSSL enthusiasts, I have questions about encryption using openSSL. Let's say I have "secret-password" and salt='00000000' (which is in hex equivalent to '3030303030303030') and I ...
paweljakubas's user avatar
0 votes
0 answers
15 views

Encountering Challenges in Mitigating OpenSSL Vulnerability on Ubuntu-22

Encountering Challenges in Mitigating openssl Vulnerability on Ubuntu Despite Upgrade Efforts. I had run the command docker run aquasec/trivy rootfs / to get vulnerabilities in Ubuntu-22, Output is ...
V S Supritha's user avatar
1 vote
1 answer
16 views

Dynamically openssl liked C++ application failing with error "version `OPENSSL_1_1_1' not found"

I have build my C++ application by dynamically linking the openssl library on SLES15 machine with openssl version OpenSSL 1.1.1d and running the application on SLES15SP1 with openssl version OpenSSL 1....
Niteen Ashok Chougule's user avatar
1 vote
0 answers
12 views

Why use a different certificate for trusted_ca_cert in Caddy and not just the client certificate?

I want to configure TLS client auth with Caddy. I tried the following steps I found on the internet: openssl req -x509 -newkey rsa:4096 -keyout cert_name.key -out cert_name.crt -days 900 openssl req -...
h_f's user avatar
  • 11
0 votes
0 answers
32 views

SSL Certificate can't be read by Python (SSLError PEM lib _ssl.c:3895)

I need to fetch data from https websites using python's urllib, and as I found out you have to create an SSL Certificate for doing that. When just opening the page via urlopen("https://...
axolotlKing0722's user avatar
0 votes
0 answers
17 views

Cannot return running IV from EVP_CIPHER_CTX_iv()

I'm using Openssl 1.1.1 for some of my work which involved sending encryption data using AES 256 GCM mode. And as an example , I've created a sample struct and then encrypted the data using AES 256 ...
cule's user avatar
  • 21
0 votes
0 answers
23 views

OpenSSL Convert PFX to PEM

I have been using OpenSSL 3.1.4 on windows server 2022. c:\OpenSSL-Win64\bin>openssl pkcs12 -in wildcard.pfx -out wildcart.cer -nodes Enter Import Password: Error outputting keys and certificates ...
Arbelac's user avatar
  • 1,756
0 votes
0 answers
34 views

What is the cause of "SSL Library Error: error:0A000076:SSL routines::no suitable signature algorithm" from upgrading Apache24 from 2.4.55 to 2.4.58?

This is my first question here so apologies if I lack any details. I have a web app that is running on Apache 2.4.55 and OpenSSL 1.1.1t. I made a backup of the Apache24 folder, downloaded the binary ...
MatChaね's user avatar
0 votes
0 answers
149 views

Problem validating a certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

A site my application submits requests to recently updated their SSL certificate and since that change, our requests have been failing with the well know certificate exception: requests.exceptions....
Michael C. O'Connor's user avatar
0 votes
0 answers
13 views

Code Igniter 3 - SSL operation failed with code 1. OpenSSL Error messages: error:0A00010B:SSL routines::wrong version number

I've updated a server from PHP 5.6 and Code Igniter 2.5 to PHP 8.1 and Code Igniter 3 Everything seems to work except for the Email sending module. The error says: A PHP Error was encountered Severity:...
Aritz Barrondo's user avatar
1 vote
2 answers
72 views

Using cURL & OpenSSL to thoroughly test certificate validity of all websites

I have a large number of websites I need to test the SSL/TLS setups for. Some tests I need to perform are: Is the server cert expired? Is old encryption (i.e. SSLv2, SSLv3, TLS 1.0) being used? Is ...
Eric Smith's user avatar
0 votes
0 answers
30 views

problems handling padding while decrypting a file using OpenSSL BIO

I am having problems dealing with padding, which was added to the file during encryption. I wrote a program in c, which uses the aes_256_cbc algorithm that encrypts a 128byte file, to which 16 bytes ...
rguibuesretpo's user avatar
0 votes
0 answers
18 views

Run fastapi with gunicorn causes segmentation fault

Trying to deploy a model on Vertex ai with gunicorn running a fasapi app i get the following error: ERROR 2023-11-28T16:04:40.775271177Z E1128 16:04:40.775010808 42 ssl_transport_security_utils.cc:...
Tsvi Sabo's user avatar
  • 585
2 votes
1 answer
45 views

Decrypt zip encrypted with ruby using the mac command line

I'm facing an issue where I'm unable to decrypt a file encrypted in Ruby on my Mac. Using the following Ruby code, I encrypted a zip file using AES encryption: require 'openssl' key = OpenSSL::Cipher....
bluecat's user avatar
  • 23
1 vote
1 answer
31 views

Validate RSA key against password without PHPSeclib

I try to validate if a passphrase works with a private key in PHP. Right now the solution is simply to use phpseclib and do this: $rsa = new \phpseclib\Crypt\RSA(); $rsa->setPassword($passphrase); $...
4thfloorstudios's user avatar
0 votes
0 answers
15 views

OpenSSL::SSL target is missing when find_package(OpenSSL) suceed

Unfortunately didn't find answer to this question... I have very simple CMake code: find_package(OpenSSL REQUIRED) message("OpenSSL include dir: ${OPENSSL_INCLUDE_DIR}") message("...
Andrey Honich's user avatar
0 votes
1 answer
80 views

Generate PKCS#10 CSR from RSA Private & Public Keys. How?

I am new to Rust and have finally found something to learn from that keeps me interested throughout the steep learning curve; encryption. I was wondering if Rust is mature enough to produce the same ...
suchislife's user avatar
1 vote
0 answers
20 views

How can I make ntpd work with FIPS openssl3?

I have a kirkstone yocto linux build with ntpd [email protected] Tue 23 Jun 2020 09:22:22 AM UTC (1) and OpenSSL 3.0.5 5 Jul 2022 (Library: OpenSSL 3.0.5 5 Jul 2022). I have enabled FIPS for openssl, ...
Dave's user avatar
  • 11
0 votes
0 answers
38 views

Disable IPv6 caused Tomcat startup failure

Recently, I updated my website by installing Tomcat 8.0.3 on Ubuntu 22.04. I was only having trouble sending emails with Spring Boot. I tried Gmail, Outlook and Yandex to send via SMTP and encountered ...
OzanD's user avatar
  • 1
0 votes
0 answers
46 views

Indy 10 OpenSSL load library error on MacOS

I'm using Delphi Alexandria on Windows 11 to develop a MacOS application in FMX. I'm trying to use OpenSSl; I have libssl.1.0.0.dylib and libcrypto.1.0.0.dylib in the directory. But I always have an ...
Hassan's user avatar
  • 3
0 votes
0 answers
12 views

How to get Dynamic SSL on Node JS for local network [closed]

I want to run a node.js server on a computer, and serve a webpage that can be connected from mobile devices in the local network. However I want to serve this webpage with SSL. I'm having trouble ...
Dinura Imesh's user avatar
0 votes
0 answers
64 views

generate ECDSA P384 digest in Go fully compatible with openssl

I need to sign data using ECDSA P384 algorithm in Go. When I use native Go crypto/ecdsa to sign and verify, it works, but openssl cannot verify created signature. If I run openssl.exe as os.exec ...
M. Glushkin's user avatar
-2 votes
1 answer
83 views

PHP: Decrypt string received from Kotlin encryption

I encrypted a string in Kotlin using the following code private fun encrypt(context: Context, strToEncrypt: String, encryptKey : String): ByteArray { val plainText = strToEncrypt....
user2959923's user avatar
0 votes
0 answers
66 views

In openssl, if I decrypt using a wrong password it just tells "bad decrypt" without showing the output. Is there a way to show it anyway?

I encrypted a sample test file using: openssl enc -aes-128-cbc -in test -nosalt -out encprova.aes128 Then, to decrypt: openssl enc -aes-128-cbc -d -in encprova.aes128 -nosalt and if I write the ...
Allexj's user avatar
  • 1,397
-1 votes
0 answers
25 views

open ssl p12 certificate : Enter Import Password, what is the "import password"?

run:openssl pkcs12 -in elastic-certificates.p12 -nocerts -nodes > client.key then terminal ask me to "enter import password", what is the "import password" run:openssl pkcs12 -...
Martin Zheng's user avatar
0 votes
0 answers
106 views

OpenSSL cryptolib AES 256 CTR decryption returns randomly appearing different plaintext in C

I am currently trying to decrypt a message encrypted in AES_256_CTR using the OpenSSL C library. Somehow my code behaves unwanted, and the resulting plaintext is first wrong, but also, after every ...
Genfood's user avatar
  • 1,446
0 votes
0 answers
39 views

VS Code and snap apps in ubuntu are not working after downgrading openssl version

i downgraded the version of openssl from version 3.0 to 1.1 to solve some issues. For that I first uninstall the openssl and then install the specific version again. After that, many of the apps were ...
Muhammad Hasnain Tariq's user avatar
0 votes
1 answer
16 views

Error trying to verify CMS signature with pkijs

I'm trying to veryfy a CMS signature created with open ssl like this: $ openssl cms -sign -signer domain.pem -inkey domain.key -binary -in README.md -outform der -out signature Here is my code using ...
lviggiani's user avatar
  • 5,864

1
2 3 4 5
331