Skip to main content

Questions tagged [openssl]

OpenSSL: The Open Source Toolkit for SSL and TLS

0 votes
2 answers
326 views

Is it possible to hide a binary file from the system

A VPS on Centos 7 came with a very old version of openssl. I built and installed a newer version of openssl. (details below) This newer openssl was only installed in order to upgrade to a much newer ...
David C's user avatar
  • 103
3 votes
1 answer
954 views

OpenVPN Revoke a certificate without the CRT file with Easy RSA

I'm confused, I have an OpenVPN server on Debian. The previous system administrator who was in charge of this server deleted the user certificates (.crt file) with the command "rm -f example.crt&...
g1398's user avatar
  • 33
0 votes
0 answers
358 views

openssl crash on nginx building ubuntu 22.04

trying this on ubuntu 22.04 sudo ./configure --with-cc-opt='-g -O2 -ffile-prefix-map=/build/nginx-zctdR4/nginx-1.18.0=. -flto=auto -ffat-lto-objects -flto=auto -ffat-lto-objects -fstack-protector-...
konstantinos Dms's user avatar
2 votes
2 answers
8k views

How to restart openssl on debian

I have made some changes in openssl.cnf and wants to restart service. Normally I would just restart machine for changes to take effect but I don't want to restart machine. Tried sudo systemctl restart ...
Frank Martin's user avatar
4 votes
6 answers
16k views

HTTPS compatibility issue with Chrome 116/117 ERR_SSL_PROTOCOL_ERROR

I'm having error ERR_SSL_PROTOCOL_ERROR since 2 day on my website for some reason. Browsers tested Windows Chrome 117.0.5938.132 : ERR_SSL_PROTOCOL_ERROR Android Chrome 117.0.5938.61 : ...
Alexandre Lavoie's user avatar
1 vote
1 answer
264 views

Warning with sending emails from Thunderbird to Postfix using its own CA

I'm asking for help because I simply don't have the strength anymore, I've spent a lot of time and I'm still left with an unsolved puzzle. My problem: I keep getting "Wrong Site" warnings ...
lkuc18's user avatar
  • 31
0 votes
0 answers
108 views

Install old OpenSSL 0.9.8 on MacOS 13.2, make error

for compatibility purpose of some functionalities and old softwares I need to install OpenSSL0.9.8 on a modern MacOS machine. I downloaded the source archive from: https://www.openssl.org/source/old/0....
MonsieurMemons's user avatar
3 votes
1 answer
4k views

TLS 1.0 broken with newer Debian/OpenSSL

I'm migrating a server running Debian 10 to a server running Debian 12 (and a 6.x kernel), and the last thing that doesn't seem to be working is TLS 1.0, which I've been trying to figure out. I'm ...
InterLinked's user avatar
1 vote
0 answers
669 views

How to convert a DER private key to PEM

I have a private key that is in binary format. I'm not sure if this is DER format but I need to convert it to PEM. I'm using openssl with this command: openssl rsa -inform DER -outform PEM -in test....
dssof's user avatar
  • 111
0 votes
1 answer
189 views

Have you got a worked example of using Postgres through ODBC with openssl and the Progress DataDirect Linux driver?

I am new to openssl configuration, Postgres, and the Progress DataDirect ODBC driver, and I am trying to set this up. I have Postgres working in a container, set up with tjcw:~$ openssl req -new -x509 ...
Chris Ward's user avatar
1 vote
1 answer
2k views

Configure QUIC and HTTP/3 in Ubuntu

I want to install and configure nginx-1.19.0 with HTTP/3 support on Ubuntu 22.04. OpenSSL version is 3.0.2. I was surfing in internet but I didn't find something straight forward to guide me how to ...
Leotrim Lota's user avatar
1 vote
1 answer
189 views

AWX error X509 using custom EE image with pyopenssl

I'm currently setting up an AWX platform hosted on K8s cluster to get a proper UI + features for multi-user purpose. Context : I created an EE image pushed on a Nexus repository that AWX use in order ...
motorbass's user avatar
  • 373
0 votes
1 answer
486 views

SSL Certificate loading error in postgresql.conf file during restart

openssl genrsa -out root.key 2048 openssl req -new -key server.key -out server.csr openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt chown postgres:postgres server.* ...
Rajesh Maniyar's user avatar
0 votes
0 answers
486 views

CA-Certificate and Server Certificate are expired! - openVPN - Server <--> Client(x)

I am hosting an openVPN-Service to connect ~30 IoT-Clients directly to my Server. I have forgoten to extend the lifetime of the self-signed ca.cert and the server.crt. Now my openVPN-Clients could not ...
Mat's user avatar
  • 3
0 votes
0 answers
36 views

self signed for a site accessible through VPN

I'd like to know if what I'm doing is right or is there another way to do this? I have this site that is accessible through VPN and i'd like the end users not to see the "not secured" ...
Reefo Relaxo's user avatar

15 30 50 per page