Ask Ubuntu
Ask Ubuntu

Questions tagged [openssl]

Open source implementation of the Secure Socket Layer (SSL) and Transport Layer Security (TLS) protocols

400 questions
153
votes
6 answers

How to patch the Heartbleed bug (CVE-2014-0160) in OpenSSL?

As of today, a bug in OpenSSL has been found affecting versions 1.0.1 through 1.0.1f (inclusive) and 1.0.2-beta. Since Ubuntu 12.04, we are all vulnerable to this bug. In order to patch this vulnerability, affected users should update to OpenSSL…
Lucio
  • 19,191
  • 32
  • 112
  • 191
96
votes
7 answers

How do I quickly encrypt a file with AES?

I want to encrypt a file using AES-256. How can I do that quickly and easily, and how can I - or someone else -decrypt it again?
Stefano Palazzo
  • 88,393
72
votes
5 answers

Ubuntu 20.04 - how to set lower SSL security level?

I'd like to ask if there's a way to lower SSL security level to 1 on Ubuntu 20.04, since I'm receiving: 141A318A:SSL routines:tls_process_ske_dhe:dh key too small when trying to curl the website. Curl works if I add --ciphers 'DEFAULT:!DH'…
Łukasz Sypniewski
  • 855
54
votes
2 answers

How should I change encryption according to *** WARNING : deprecated key derivation used

When I encrypt or decrypt a file I get: *** WARNING : deprecated key derivation used. Using -iter or -pbkdf2 would be better. I do not understand what this means, and how I should change my procedure. Thus far, I encrypted with: openssl des3…
Tommy Pollák
  • 1,109
36
votes
3 answers

PHP OpenSSL extension has a package?

I know that OpenSSL extension is in PHP source, but I can't enable it when I perform apt-get install php5. There is not even a apt-get install php5-openssl. How I must proceed?
Tasso Evangelista
  • 588
  • 1
  • 6
  • 10
36
votes
4 answers

How do I use OpenSSL 1.1.1 in Ubuntu 22.04?

I understand that Ubuntu 22.04 upgraded to OpenSSL 3.0. This has broken my university's secure WiFi access point joining script because "some insecure algorithms have been disabled by default". I don't want to downgrade to version 1.1.1, but instead…
Keeley Hoek
  • 471
35
votes
1 answer

How to upgrade OpenSSL 1.1.0 to 1.1.1 in Ubuntu 18.04?

I have been running a production server with Ubuntu 18 installed. Recently, I found that my web application was not allowed on some of the firewalls installed at the customer location. I found that my server is communicating at TLSv1.0, TLSv1.1,…
dollar
  • 467
33
votes
14 answers

module 'lib' has no attribute 'X509_V_FLAG_CB_ISSUER_CHECK'

I was using python 3.6 on my ubuntu machine and faced this error when doing some testing: CryptographyDeprecationWarning: Python 3.6 is no longer supported by the Python core team. Therefore, support for it is deprecated in cryptography and will be…
snow
  • 433
32
votes
1 answer

How to install openssl 3.0.7 on Ubuntu 22.04?

There's a highest severity security hole in openssl v3.0.x where x<7. The patched version (3.0.7) has officially dropped on November 1, 2022. How to install/update openssl 3.0.7 on an Ubuntu 22.04 system? Update: The vulnerability has been…
Lexible
  • 1,557
30
votes
1 answer

What is "openssl binaries" and "openssl development package"?

Build it using general C development environment with bash, gcc (3 or 4 series), make, etc on a linux machine. Building pre-requirements are: ** 1. openssl binaries; 2. openssl development package with include files (on debian package…
PHANI
  • 541
26
votes
7 answers

Enabling SSL in MySQL

I'm running Ubuntu Server 12.04, and I want to enable SSL connections to MySQL. I've generated the following keys/certs files with OpenSSL: ca-cert.pem server-cert.pem server-key.pem I stored these at /etc/mysql, then added added the following…
visitor93746
  • 361
26
votes
4 answers

How to install OpenSSL 1.1.1 and libSSL package?

I want to use OpenSSL1.1.1 version for my code development. Currently I am working with Openssl 1.1.0g on Ubuntu 18.04 machine. If I download the package with the command sudo apt install libssl-dev, then I get OpenSSL 1.1.0g version, If I download…
Karma Yogi
  • 456
  • 2
  • 8
  • 19
25
votes
3 answers

Where are PEM files stored for validating SSL certificates?

I'm writing a SOAP client application on Ubuntu using OpenSSL and C++. I am having trouble getting my code to validate the server certificate even though I know has a valid certificate. Just to make sure I would like to check that it's the case and…
mathematician1975
  • 2,321
21
votes
3 answers

How to enable TLS 1.2 in Nginx?

How do I enable TLS 1.1 and 1.2 for SSL connections in my Ubuntu 12.04 server? I am using the following version of nginx and openssl library. $ ./nginx -v nginx version: nginx/1.2.3 $ openssl version -a OpenSSL 1.0.1 14 Mar 2012 built on: Tue Jun …
codefx
  • 393
  • 2
  • 3
  • 9
20
votes
3 answers

Why unattended-upgrades does not fix heartbleed bug?

I've followed the instruction to install unattended-upgrades to install automatic security updates on my server (ubuntu server 13.10). https://help.ubuntu.com/community/AutomaticSecurityUpdates Can you help me to understand why this morning I still…
Guillaume Vincent
  • 552
1
2 3
…
26 27