Questions tagged [openssl]
OpenSSL is an open source software toolkit that implements the SSL/TLS protocol, as well as a general cryptographic library.
16,545
questions
0
votes
0
answers
13
views
Signature verification for JWT issued by Azure
Could you assist us with the next question related to JWT token verification:
Recently we started writing functionality for Single Sign On for Microsoft users. We are guided by this documentation ...
0
votes
0
answers
26
views
Intermittent OpenSSL Error 0A000126 running Mosquitto MQTT Broker
We have a customer using:
OpenSSL 3.1.0 14 Mar 2023 (Library: OpenSSL 3.1.0 14 Mar 2023)
TLS 1.2
Mosquitto MQTT Broker
nginx is not being used
Getting intermittent errors. Here's an example of the ...
0
votes
0
answers
33
views
Why does `openssl asnparse` not give an error but `openssl x509` does for a DER file?
I have a base64 encoded file (named bst) that after base 64 decoding (base64 -d bst > bst.der) becomes a DER encoded file (bst.der). Running the command openssl asn1parse -inform der -in bst.der ...
0
votes
1
answer
21
views
Issue with ClickHouse Connection to Amazon MQ for RabbitMQ via AMQPS
I'm seeking assistance with a connection issue between ClickHouse (version 23.8.2.7) and Amazon MQ. We recently transitioned our RabbitMQ instance to Amazon MQ, which exclusively supports AMQPS. To ...
0
votes
0
answers
41
views
CMake OpenSSL trouble porting a cpp app from OSX to Ubuntu
As it says in the title, I'm porting an OSX C++ application to Ubuntu. This app works perfectly on OSX, but is failing to compile on Ubuntu. Here is my CMake - it is a little weird because I set up ...
0
votes
1
answer
33
views
Is server-side certificate mandatory for SSL connection using OpenSSL
I am having a C client-server model that established an SSL connection using openssl library. On the server-side, I have set the verification mode to SSL_VERIFY_PEER and hence, the client certificates ...
0
votes
1
answer
38
views
OPENSSL_CRYPTO_LIBRARY Crypto SSL error when trying to configure in CMake
This is my first time trying to install Azerothcore. I followed a few (I would say up to a year old) ways of installing Azerothcore but every time I seem to have a hiccup when it comes to the OpenSSL. ...
0
votes
0
answers
23
views
Error starting postgres "could not load server certificate file "/etc/ssl/certs/ssl-cert-snakeoil.pem": ee key too small"
I am trying to start Postgres DB but it's failing. The log file /var/log/postgresql/postgresql-12-main.log is showing the following line:
2023-12-04 13:01:32.197 UTC [22573] FATAL: could not load ...
0
votes
0
answers
38
views
SSL certificates not being verified on client side
I have a simple client-server program in C, using the OpenSSL library, where I am establishing a TCP connection between the 2, followed by an SSL handshake. The client and server programs are as ...
0
votes
0
answers
70
views
Wrong X509IssuerName, X509SerialNumber Error in Zatca xml Validation
Wrong X509IssuerName, X509SerialNumber Error (Zatca FATOORA Simulation portal)
I'm currently integrating KSA Zatca eInvoicing Phase 2 into my workflow and encountering an issue with the FATOORA ...
0
votes
0
answers
13
views
need hel with shell commands to python
I have this shell script that creates openssl signature with payload, date etc. I am trying to convert that into a python script. I could not get pass this section of bash script code. Can you please ...
0
votes
0
answers
30
views
Error creating CSR with config.cnf openssl
I am trying to create a CSR using Openssl with predefined configuration. This is for the purpose of government E-Invoice recomendations in Saudi. I have successfully created Public and Private key. ...
0
votes
0
answers
29
views
ssl.SSLError: [SSL] PEM lib (_ssl.c:4044) while connecting through Python Code
I have received x509 certificate (certificate.pem file) containing Private Key and Certificate in same file. I am trying to establish the connection using Python code through SSL but unfortunately ...
0
votes
0
answers
16
views
Python error - sslv3 alert handshake failure
Doesn't works in Python but works in NodeJS
Python code
import requests
certificado_pem = './ENBPAREquipamentoCCEEA1.pem'
chave_privada = './chave_privada.key'
url = "https://servicos.ccee.org....
0
votes
1
answer
35
views
How to fix CMake Error Could NOT find OpenSSL missing: OPENSSL_CRYPTO_LIBRARY when configuring Azerothcore
When I'm trying to configure CMake in order to build Azerothcore I get the following error:
CMake Error at C:/Program Files/CMake/share/cmake-3.27/Modules/FindPackageHandleStandardArgs.cmake:230 (...
-1
votes
0
answers
15
views
Password is invalid during import .pfx on MacOS
I have got such type of issue: .pfx file was generated from the Powershell, on Windows I can import it using password without any problem. I am trying to import it on MacOS but there is wrong password....
1
vote
0
answers
18
views
OpenSSL. Can not enable GOST engine
Due to installation guide(https://github.com/gost-engine/engine/blob/master/INSTALL.md).
openssl version
>> OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
openssl version -e
>...
0
votes
1
answer
21
views
get0, set1 functions in openssl
In openssl we have functions with get0 for example X509_get0_subject_key_id, GENERAL_NAME_get0_value, SSL_CTX_set1_client_cert_type, SSL_CTX_set1_server_cert_type to name a few. Here we have get0, ...
0
votes
1
answer
153
views
.NET 8: SQL Server Pre-Login Handshake (error: 31 - Encryption(ssl/tls) handshake failed)
Describe the bug
Same issue as described here. We need to upgrade from .NET 6 to .NET 8, needed for LTS, however, we cannot upgrade the database (yet).
Stack trace:
System.Data.SqlClient.SqlException (...
1
vote
1
answer
65
views
When using staticly linked OpenSSL 3.0.8 on some machine legacy provider can't be loaded
Background
I have large C++ project which was using OpenSsl 1.1.1t and now I'm tweaking it to use OpenSsl 3.0.8.
To resolve some problem with loading old pfx files I need legacy provider loaded.
...
0
votes
0
answers
28
views
While migrate the OpenLDAP and OpenSSL
While upgrading Openssl(1.1.1k) & openLDAP (2.4.47) to the version Openssl(3.0.10) & OpenLDAP(2.5.16) in windows server 2016 & 2019,
I am getting an error which is posted below
Note: ...
-1
votes
0
answers
30
views
Decrypting: "EVP_CIPHER_CTX_set_key_length:invalid key length" sometimes and i dont know why
I send from Android InitialVector(iv) "testtesttesttest" and php decrypt the message right, but "testtesttestitot" give me error.
"GWS3eDKYYoaZISBxbUINjvhreiiYHSAg";//...
1
vote
1
answer
71
views
openSSL CLI encryption using AES-256-CBC
Dear openSSL enthusiasts,
I have questions about encryption using openSSL.
Let's say I have "secret-password" and salt='00000000' (which is in hex equivalent to '3030303030303030') and I ...
0
votes
0
answers
15
views
Encountering Challenges in Mitigating OpenSSL Vulnerability on Ubuntu-22
Encountering Challenges in Mitigating openssl Vulnerability on Ubuntu Despite Upgrade Efforts.
I had run the command docker run aquasec/trivy rootfs / to get vulnerabilities in Ubuntu-22,
Output is ...
1
vote
1
answer
16
views
Dynamically openssl liked C++ application failing with error "version `OPENSSL_1_1_1' not found"
I have build my C++ application by dynamically linking the openssl library on SLES15 machine with openssl version OpenSSL 1.1.1d and running the application on SLES15SP1 with openssl version OpenSSL 1....
1
vote
0
answers
12
views
Why use a different certificate for trusted_ca_cert in Caddy and not just the client certificate?
I want to configure TLS client auth with Caddy.
I tried the following steps I found on the internet:
openssl req -x509 -newkey rsa:4096 -keyout cert_name.key -out cert_name.crt -days 900
openssl req -...
0
votes
0
answers
32
views
SSL Certificate can't be read by Python (SSLError PEM lib _ssl.c:3895)
I need to fetch data from https websites using python's urllib, and as I found out you have to create an SSL Certificate for doing that.
When just opening the page via urlopen("https://...
0
votes
0
answers
17
views
Cannot return running IV from EVP_CIPHER_CTX_iv()
I'm using Openssl 1.1.1 for some of my work which involved sending encryption data using AES 256 GCM mode. And as an example , I've created a sample struct and then encrypted the data using AES 256 ...
0
votes
0
answers
23
views
OpenSSL Convert PFX to PEM
I have been using OpenSSL 3.1.4 on windows server 2022.
c:\OpenSSL-Win64\bin>openssl pkcs12 -in wildcard.pfx -out wildcart.cer -nodes
Enter Import Password:
Error outputting keys and certificates
...
0
votes
0
answers
34
views
What is the cause of "SSL Library Error: error:0A000076:SSL routines::no suitable signature algorithm" from upgrading Apache24 from 2.4.55 to 2.4.58?
This is my first question here so apologies if I lack any details.
I have a web app that is running on Apache 2.4.55 and OpenSSL 1.1.1t. I made a backup of the Apache24 folder, downloaded the binary ...
0
votes
0
answers
149
views
Problem validating a certificate: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate
A site my application submits requests to recently updated their SSL certificate and since that change, our requests have been failing with the well know certificate exception:
requests.exceptions....
0
votes
0
answers
13
views
Code Igniter 3 - SSL operation failed with code 1. OpenSSL Error messages: error:0A00010B:SSL routines::wrong version number
I've updated a server from PHP 5.6 and Code Igniter 2.5 to PHP 8.1 and Code Igniter 3
Everything seems to work except for the Email sending module.
The error says:
A PHP Error was encountered
Severity:...
1
vote
2
answers
72
views
Using cURL & OpenSSL to thoroughly test certificate validity of all websites
I have a large number of websites I need to test the SSL/TLS setups for. Some tests I need to perform are:
Is the server cert expired?
Is old encryption (i.e. SSLv2, SSLv3, TLS 1.0) being used?
Is ...
0
votes
0
answers
30
views
problems handling padding while decrypting a file using OpenSSL BIO
I am having problems dealing with padding, which was added to the file during encryption. I wrote a program in c, which uses the aes_256_cbc algorithm that encrypts a 128byte file, to which 16 bytes ...
0
votes
0
answers
18
views
Run fastapi with gunicorn causes segmentation fault
Trying to deploy a model on Vertex ai with gunicorn running a fasapi app i get the following error:
ERROR 2023-11-28T16:04:40.775271177Z E1128 16:04:40.775010808 42
ssl_transport_security_utils.cc:...
2
votes
1
answer
45
views
Decrypt zip encrypted with ruby using the mac command line
I'm facing an issue where I'm unable to decrypt a file encrypted in Ruby on my Mac.
Using the following Ruby code, I encrypted a zip file using AES encryption:
require 'openssl'
key = OpenSSL::Cipher....
1
vote
1
answer
31
views
Validate RSA key against password without PHPSeclib
I try to validate if a passphrase works with a private key in PHP.
Right now the solution is simply to use phpseclib and do this:
$rsa = new \phpseclib\Crypt\RSA();
$rsa->setPassword($passphrase);
$...
0
votes
0
answers
15
views
OpenSSL::SSL target is missing when find_package(OpenSSL) suceed
Unfortunately didn't find answer to this question...
I have very simple CMake code:
find_package(OpenSSL REQUIRED)
message("OpenSSL include dir: ${OPENSSL_INCLUDE_DIR}")
message("...
0
votes
1
answer
80
views
Generate PKCS#10 CSR from RSA Private & Public Keys. How?
I am new to Rust and have finally found something to learn from that keeps me interested throughout the steep learning curve; encryption.
I was wondering if Rust is mature enough to produce the same ...
1
vote
0
answers
20
views
How can I make ntpd work with FIPS openssl3?
I have a kirkstone yocto linux build with ntpd [email protected] Tue 23 Jun 2020 09:22:22 AM UTC (1) and OpenSSL 3.0.5 5 Jul 2022 (Library: OpenSSL 3.0.5 5 Jul 2022). I have enabled FIPS for openssl, ...
0
votes
0
answers
38
views
Disable IPv6 caused Tomcat startup failure
Recently, I updated my website by installing Tomcat 8.0.3 on Ubuntu 22.04. I was only having trouble sending emails with Spring Boot. I tried Gmail, Outlook and Yandex to send via SMTP and encountered ...
0
votes
0
answers
46
views
Indy 10 OpenSSL load library error on MacOS
I'm using Delphi Alexandria on Windows 11 to develop a MacOS application in FMX.
I'm trying to use OpenSSl; I have libssl.1.0.0.dylib and libcrypto.1.0.0.dylib in the directory.
But I always have an ...
0
votes
0
answers
12
views
How to get Dynamic SSL on Node JS for local network [closed]
I want to run a node.js server on a computer, and serve a webpage that can be connected from mobile devices in the local network. However I want to serve this webpage with SSL. I'm having trouble ...
0
votes
0
answers
64
views
generate ECDSA P384 digest in Go fully compatible with openssl
I need to sign data using ECDSA P384 algorithm in Go. When I use native Go crypto/ecdsa to sign and verify, it works, but openssl cannot verify created signature. If I run openssl.exe as os.exec ...
-2
votes
1
answer
83
views
PHP: Decrypt string received from Kotlin encryption
I encrypted a string in Kotlin using the following code
private fun encrypt(context: Context, strToEncrypt: String, encryptKey : String): ByteArray {
val plainText = strToEncrypt....
0
votes
0
answers
66
views
In openssl, if I decrypt using a wrong password it just tells "bad decrypt" without showing the output. Is there a way to show it anyway?
I encrypted a sample test file using:
openssl enc -aes-128-cbc -in test -nosalt -out encprova.aes128
Then, to decrypt:
openssl enc -aes-128-cbc -d -in encprova.aes128 -nosalt
and if I write the ...
-1
votes
0
answers
25
views
open ssl p12 certificate : Enter Import Password, what is the "import password"?
run:openssl pkcs12 -in elastic-certificates.p12 -nocerts -nodes > client.key
then terminal ask me to "enter import password", what is the "import password"
run:openssl pkcs12 -...
0
votes
0
answers
106
views
OpenSSL cryptolib AES 256 CTR decryption returns randomly appearing different plaintext in C
I am currently trying to decrypt a message encrypted in AES_256_CTR using the OpenSSL C library.
Somehow my code behaves unwanted, and the resulting plaintext is first wrong, but also, after every ...
0
votes
0
answers
39
views
VS Code and snap apps in ubuntu are not working after downgrading openssl version
i downgraded the version of openssl from version 3.0 to 1.1 to solve some issues. For that I first uninstall the openssl and then install the specific version again.
After that, many of the apps were ...
0
votes
1
answer
16
views
Error trying to verify CMS signature with pkijs
I'm trying to veryfy a CMS signature created with open ssl like this:
$ openssl cms -sign -signer domain.pem -inkey domain.key -binary -in README.md -outform der -out signature
Here is my code using ...