Questions tagged [openssl]

OpenSSL is an open source software toolkit that implements the SSL/TLS protocol, as well as a general cryptographic library.

OpenSSL is an open source software toolkit that implements the SSL/TLS protocol, as well as a general cryptographic library.

OpenSSL is maintained by the OpenSSL Project, which hosts several project mailing lists.

16384 questions
1907
votes
23 answers

How to generate a self-signed SSL certificate using OpenSSL?

I'm adding HTTPS support to an embedded Linux device. I have tried to generate a self-signed certificate with these steps: openssl req -new > cert.csr openssl rsa -in privkey.pem -out key.pem openssl x509 -in cert.csr -out cert.pem -req -signkey…
michelemarcon
  • 23,277
  • 17
  • 52
  • 68
781
votes
12 answers

How to get .pem file from .key and .crt files?

How can I create a PEM file from an SSL certificate? These are the files that I have available: .crt server.csr server.key
Sergio Rodriguez
  • 8,258
  • 3
  • 18
  • 25
552
votes
10 answers

Use RSA private key to generate public key?

I don't really understand this one: According to https://www.madboa.com/geek/openssl/#key-rsa, you can generate a public key from a private key. openssl genrsa -out mykey.pem 1024 openssl rsa -in mykey.pem -pubout > mykey.pub My initial thinking…
c2h2
  • 11,911
  • 13
  • 48
  • 60
518
votes
11 answers

How to determine SSL cert expiration date from a PEM encoded certificate?

If I have the actual file and a Bash shell in Mac or Linux, how can I query the cert file for when it will expire? Not a web site, but actually the certificate file itself, assuming I have the csr, key, pem and chain files.
GL2014
  • 6,016
  • 4
  • 15
  • 22
506
votes
15 answers

Using openssl to get the certificate from a server

I am trying to get the certificate of a remote server, which I can then use to add to my keystore and use within my Java application. A senior dev (who is on holidays :( ) informed me I can run this: openssl s_client -connect host.host:9999 to get…
nasty pasty
  • 6,584
  • 7
  • 24
  • 26
479
votes
37 answers

curl: (60) SSL certificate problem: unable to get local issuer certificate

root@sclrdev:/home/sclr/certs/FreshCerts# curl --ftp-ssl --verbose ftp://{abc}/ -u trup:trup --cacert /etc/ssl/certs/ca-certificates.crt * About to connect() to {abc} port 21 (#0) * Trying {abc}... * Connected to {abc} ({abc}) port 21 (#0) <…
user3812540
  • 4,815
  • 3
  • 12
  • 4
459
votes
42 answers

dyld: Library not loaded: /usr/local/opt/openssl/lib/libssl.1.0.0.dylib

I installed vapor via homebrew and then immediately wanted to jump into a project by executing vapor new Hello but then got the following message back in the terminal: dyld: Library not loaded:…
Cronay
  • 4,875
  • 3
  • 13
  • 18
436
votes
17 answers

How to install OpenSSL in windows 10?

I have a question about how and what is the version of OpenSSl that I must install in Windows to later create certificates. Install a one version (openssl-1.0.2d-fips-2.0.10) found in SourceForge but it does not generate the files correctly. There…
gemita
  • 2,686
  • 2
  • 10
  • 17
430
votes
9 answers

Using OpenSSL what does "unable to write 'random state'" mean?

I'm generating a self-signed SSL certificate to protect my server's admin section, and I keep getting this message from OpenSSL: unable to write 'random state' What does this mean? This is on an Ubuntu server. I have upgraded libssl to fix the…
Luke Francl
  • 31,028
  • 18
  • 69
  • 91
352
votes
10 answers

How do I install the OpenSSL libraries on Ubuntu?

I'm trying to build some code on Ubuntu 10.04 LTS that uses OpenSSL 1.0.0. When I run make, it invokes g++ with the "-lssl" option. The source includes: #include #include #include #include…
Daryl Spitzer
  • 143,156
  • 76
  • 154
  • 173
316
votes
17 answers

gem eventmachine fatal error: 'openssl/ssl.h' file not found

Just installed El Capitan and can't install gem eventmachine 1.0.7. openssl is at 1.0.2a-1. Tried to use --with-ssl-dir but it seems ignored. Reported it to their github repo as well. Any suggestions are really appreciated. Thanks. $ ls…
firedev
  • 20,898
  • 20
  • 64
  • 94
311
votes
6 answers

Converting PKCS#12 certificate into PEM using OpenSSL

I have OpenSSL x64 on Windows 7 which I downloaded from openssl-for-windows on Google Code. I'm attempting to run: openssl pkcs12 -export -in "path.p12" -out "newfile.pem" but I get an error. unable to load private key How do I extract the…
Dean MacGregor
  • 11,847
  • 9
  • 34
  • 72
306
votes
9 answers

How to use OpenSSL to encrypt/decrypt files?

I want to encrypt and decrypt one file using one password. How can I use OpenSSL to do that?
aF.
  • 64,980
  • 43
  • 135
  • 198
271
votes
4 answers

How do you sign a Certificate Signing Request with your Certification Authority?

During my search, I found several ways of signing a SSL Certificate Signing Request: Using the x509 module: openssl x509 -req -days 360 -in server.csr -CA ca.crt -CAkey ca.key -CAcreateserial -out server.crt Using the ca module: openssl ca -cert…
Bernard Rosset
  • 4,523
  • 6
  • 27
  • 29
258
votes
13 answers

curl : (1) Protocol https not supported or disabled in libcurl

I'm trying to install the Rails environments on Ubuntu 11.04. When I launch the command rvm install 1.9.2 --with-openssl-dir=/usr/local the following error is received: curl : (1) Protocol https not supported or disabled in libcurl How can this be…
Giuseppe Di Federico
  • 3,501
  • 4
  • 20
  • 19
1
2 3
99 100