16,692 questions
0
votes
0
answers
57
views
How to call SHA3 API's using Openssl Assembly?
I am trying to develop SHA3 support using the assembly support available in below link: https://github.com/openssl/openssl/blob/master/crypto/sha/asm/keccak1600p8-ppc.pl
Am able to generate .s file ...
- 63
0
votes
1
answer
276
views
Compass won't connect to MongoDB over TLS using OpenSSL certificates
Trying the tried and tested method of connecting Compass to MongoDB instance on VPS over TLS. If the certificates were from LetsEnctrypt CA (generated with CertBot), 2 files are needed:
CertAndKey....
- 37
0
votes
0
answers
63
views
Kafka not recognizing key
I'm trying to set SSL in a broker that I'm running locally for testing setting this up. This broker will be running with Kraft, and SSL will be set up using PEMs (not keystores or truststores).
I've ...
- 1,875
0
votes
0
answers
17
views
Facing this error while building a component name data storage backup redis
i tried building aws-sdk-cpp multiple times but still facing issue.
I am using openssl 3.0.2 and curl 7.88 along with ubuntu 20.04.
the errors are related to aws-sdk-cpp and openssl. i need the ...
0
votes
2
answers
399
views
How to change the format that Java+BouncyCastle writes my private key?
I have a pkcs12 file that contains a public and private key pair that I created using openssl. My Java program reads in the pcks12 file and saves the public and private keys separately for use by the ...
- 1
11
votes
8
answers
8k
views
Prisma openssl version issue
I’m encountering an issue while trying to compose Docker instances in my local environment. When I run the docker-compose up command, I get the following error:
> 2024-12-10 12:46:12 > laredo-...
- 900
0
votes
0
answers
379
views
Openssl ssl_connect() fails with unexpected eof while reading
I have a class using Openssl. It works 99.99% of the time but occasionally I keep getting an error inside SSL_connect():
errno details: 40D6FFD6FF7F0000:error:0A000126:SSL
routines:ssl3_read_n:...
- 17.6k
0
votes
1
answer
116
views
Prototyping IMAP connection to outlook365 server using openssl
I am trying to test connection to Outlook365 IMAP server.
As I understood. The first step should be to obtain access_token using my client_id and client_secret.
I got it using Postman
access_token ...
0
votes
1
answer
757
views
Updating an old version of the OpenSSL library for Windows
On a Windows 32-bit program written in Delphi 7 and not updated since 2015 by its author, an error is returned after enabling an option to establish an SSL encrypted connection.
In the root folder of ...
- 69
0
votes
1
answer
97
views
OpenSSL server is not picking the right cipher
I've written an https server in C++ using cpp-httplib (https://github.com/yhirose/cpp-httplib). My requirement is that it needs to work with pre-shared key and cipher DHE-PSK-AES256-CBC-SHA or DHE-PSK-...
- 163
0
votes
1
answer
62
views
PowerPC for 440fp CPU openssl support
I noticed support for powerpc in openssl in the below link:
https://github.com/openssl/openssl/blob/master/crypto/sha/asm/keccak1600-ppc64.pl
However, the hardware I am using , the source of that are ...
- 63
1
vote
1
answer
152
views
signature generated using openssl C++ API does not match with same code in python
I have a python code which generates signature based on hash string as data. It uses cryptography library to calculate singature based on hash. It uses private key file .pem which contains private key ...
- 93
0
votes
1
answer
261
views
MongoDB and Compass won't TLS with Custom CA certs made with OpenSSL
This is a connected to previous question I asked:
Compass and MongoDB VPS instance won't establish TLS connection
where Wernfried Domscheit provided the solution, which raised further question.
...
- 37
0
votes
1
answer
1k
views
How to convert a PEM PKCS#8 public key into DER/Raw-Binary
I have an EC Public Key (i think it is pkcs#8 PEM but not really sure because i am not much familiar with these terms):
-----BEGIN PUBLIC KEY-----
...
-3
votes
1
answer
198
views
Verifying a signature with OpenSSL
Based on an older post, I am using Azure Key Vault to sign something with an EC Key created in Azure Key Vault. In the C# snippet everything works well and both signatures (IEEE P1363 and RFC 3279 Der ...
- 27
0
votes
1
answer
86
views
how to resolve the issue "Error message "error:0308010C:digital envelope routines::unsupported""
Trying to build a pipeline using Azure devops pipeline but ran into the issue
Error : 0308010C:digital envelope routines::unsupported.
npm version: 10.8.2
node version: v18.20.5
openssl version: ...
- 21
0
votes
0
answers
30
views
Lexical or Preprocessor Issue (Xcode): 'openssl/asn1t.h' file not found Lexical or Preprocessor Issue (Xcode): 'openssl/evp.h' file not found
I am getting this error while building my flutter app in iPhone 16 pro,
please tell me how to fix this issue.
I have tried adding openssl paths to the header search paths in xcode and library search ...
- 1
1
vote
0
answers
33
views
Does using the OpenSSL library create a process? Or did 360 give me a bad report?
I copied a code example using OpenSSL from the web to learn how to use the OpenSSL library (I haven't used the OpenSSL library before)
code:
#include <stdio.h>
#include <stdlib.h>
#...
- 35
0
votes
1
answer
503
views
Repl + Node + Prisma ORM OpenSSL issue
I am experiencing issues related to usage of Prisma ORM with Replit to seed my db, whenever I run the command npm run dev , I get the following error.
Prisma cannot find the required libssl system ...
0
votes
0
answers
42
views
Openssl Assembly file for SHA3 in powerPC
I am new to openssl & working on powerpc architecture device and want to integrate SHA3 from openssl in assembly format. I came across the below link for this:
Source file : https://github.com/...
- 63
0
votes
1
answer
140
views
How to use openssl with distant keys, accessible via KMIP or REST API?
I need to use openssl with keys stored on a distant KMS.
How can I do this?
I've seen specific projects about openssl using AWS keys (1) or Google cloud keys (2).
Stil I found no KMIP-generic solution....
- 818
1
vote
1
answer
74
views
mosquitto_pub reset communication because Alert (Level: Fatal, Description: Unknown CA)
I tried to connect for remote MQTTS server (port 8883), that not mine using mosquitto_pub .
mosquitto_pub -h example.com -p 8883 -t "TOPIC" -m "message" -u "USER" -P &...
- 345
1
vote
0
answers
131
views
HMAC-SHA256 hash using OpenSSL does not match hash from online tools
I am trying to use OpenSSL 3.4.0 to generate an HMAC hash EVP_sha256. However, I am not able to match my generated hash to online tools (tried: base32 encoded key for each side).
Here is my source ...
- 11
0
votes
0
answers
93
views
How to Include OpenSSL in an iOS Framework While Keeping Framework Size Small? (Swift, iOS)
I am working on an iOS framework that requires OpenSSL for certain functionalities. To keep the framework’s size minimal, I included only the iphoneos version of OpenSSL by compiling it specifically ...
- 57
0
votes
0
answers
355
views
How can I do an ECDH key exchange with OpenSSL 3.0
Most of the API that EC_KEY* functions like EC_KEY_get0_public_key have been deprecated in OpenSSL 3.0, so as far as I know there's no way but to use the EVP interface. I want to export the public key ...
- 57
1
vote
1
answer
82
views
Program Fails to Run After Adding OpenSSL Code (SSL_library_init)
I compile for WIndows10, using gcc for Cygwin64
openssl is installed through cygwin's installer
Add SSL_library_init();
Before and after the code and compile and run results compared:
test.c
#include &...
- 35
0
votes
0
answers
84
views
How should I fix the openssl wrong for buildozer
This is the wrong
[INFO]: # Installing pure Python modules
[INFO]: *** PYTHON PACKAGE / PROJECT INSTALL STAGE FOR ARCH: arm64-v8a ***
[INFO]: The requirements (kivmob, kivy_garden, kivymd) ...
2
votes
0
answers
74
views
Importing C libraries into Swift Framework
I have written some cryptography code built on top of OpenSSL, and added additional logic calling it in C functions and bridging to Swift to use in my iOS application. I have had no problems with ...
0
votes
0
answers
113
views
How can I correctly decrypt AES 256 CBC in c?
I am trying to decrypt some of a zlib compressed file. I can decrypt it online using CyberChef. I am trying to write a c program to do the same thing.
The following is the simplified program.
#include ...
- 539
0
votes
1
answer
147
views
Python ssl SSLV3_ALERT_HANDSHAKE_FAILURE error with aws.amazon.com
I'm trying to create a secure connection to aws.amazon.com and I'm getting an ssl SSLV3_ALERT_HANDSHAKE_FAILURE error. This makes no sense to me, as there does not appear to be anything wrong on the ...
2
votes
2
answers
50
views
How can I print data received by OpenSSL SSL_read() in LLDB?
Printing outgoing data sent with SSL_write() on ARM64 is quite simple:
break set --auto-continue true -n SSL_write
break command add
memory read -f Y -c `$x2` $x1
DONE
The signature of SSL_write()...
- 135k
0
votes
0
answers
86
views
PHP openssl_decrypt Occasionally Returns Unexpected Value Instead of False
I am trying to rotate our encryption keys and encountered the following problem - I expected openssl_decrypt() to always return false when when using an invalid encryption key, but it occasionally ...
2
votes
0
answers
70
views
SSL/TLS Handshake configuration on python-requests
So, I've been webscraping a page for about a year now, and since last week I started to get HTTP code 403 everytime I try connecting to it using python-requests.
From my web browser and curl there is ...
2
votes
1
answer
122
views
creating JWT packet with C that JWT.io and google can accept
I'm looking for a native openssl solution to this and all the other suggestions did NOT help. I'm trying to make a JWT packet I can use to login to google services from within C code as I wish to ...
- 27
0
votes
1
answer
187
views
Ubuntu24.04 SSL handshake failed when use self-signed cert
There is a server(java spring) running in HTTP, I want to switch to HTTPS. So I use openssl to generate self-signed cert and key, and test them like below:
Curl verison:
curl 8.5.0 (x86_64-pc-linux-...
0
votes
0
answers
809
views
SSL: SSLV3_ALERT_HANDSHAKE_FAILURE (_ssl.c:1000) and (_ssl.c:1006)
I'm encountering an SSL handshake failure when upgrading my Python application from versions 3.8 and 3.9 to 3.11 or 3.12.
Python 3.12: [SSL: SSLV3_ALERT_HANDSHAKE_FAILURE] sslv3 alert handshake ...
0
votes
0
answers
95
views
Linker Error and wrong target architecture while building OpenSSL for Android
I want to build OpenSSL for Android, as a dependency of my C++-application which is built via Conan. The conan build (conan install /.../my_project -pr:h android34-armv8-clang-17-c++_shared -pr:b ...
- 101
2
votes
1
answer
299
views
Delphi How to Decrypt data with public key
In my VCL application I send a request to server and receive a data that encrypted with private key using php openssl_private_encrypt. Now I want to decrypt it with a public key. I have the public key....
- 171
1
vote
1
answer
96
views
Different symbols in openssl static and shared library
I configured and built openssl 3.0.15 on Windows, and it works fine. I have the static libraries and the shared too. When I tried to link my application to one of these I noticed that it works with ...
- 13
0
votes
2
answers
290
views
cmake Link to OpenSSL failing undefined reference to openssl functions
I'm trying to build a project which links to openssl Using CMake. I'm getting errors at the linking stage. One of the shared libraries cannot find certain openssl functions even tho that shared ...
- 77
0
votes
0
answers
148
views
Error 'Could not load certificate' when load a self-signed certificate into a Indy web server
I want to get a token from a desktop app that calls an OAuth2 authentication server that requires an HTTPS connection for the callback.
For this, I created a local Indy web server and use a self-...
- 13
0
votes
0
answers
88
views
try to understand OpenSSL EVP_DigestSign functions
I am still learning to use EVP_DigestSign functions (https://docs.openssl.org/master/man3/EVP_DigestSignInit/#description). One thing I feel puzzled is that the digest type is somehow restricted to ...
- 6,244
-2
votes
1
answer
139
views
Access Violation when call X509_new in Indy
I use the following procedure:
procedure TForm2.Label1DblClick(Sender: TObject);
procedure GenerateSelfSignedCertificate(const AFileName: string);
procedure GenerateRandomSerialNumber(...
- 13
-1
votes
1
answer
175
views
CrowCPP refusing to compile when enabling SSL [duplicate]
I'm having this really weird issue where when I try to compile my Crow project, which I just added SSL support to, it just straight up rejects to compile. This only happens when I add SSL support, ...
- 11
1
vote
0
answers
119
views
Flutter Error Invalid argument(s): Input data length must be a multiple of cipher's block size when decrypting from encryption in PHP
I have an error when trying to decrypt in dart language. with message:
Invalid argument(s): Input data length must be a multiple of cipher's
block size
Here is sample PHP code
function ...
- 71
0
votes
1
answer
61
views
Strange behavior during encryption of ASiC ZIP archive
I'm currently implementing feature which is creating ASiC-E with XAdES container for storing information regarding certain files along with their signatures (e.g. mimetype, file1.xml, META-INF/...
- 59
0
votes
0
answers
141
views
In connecting to Github via https, I'm getting the following SSL error
git pull
fatal: unable to access 'https://github.com/highperformancecoder/civita.git/': OpenSSL/3.0.1: error:16000069:STORE routines::unregistered scheme
I have been working around it by adding the ...
1
vote
1
answer
728
views
LOG: 08P01: could not accept SSL connection: EOF detected
I'm setting up post-quantum cryptography (PQC)-based self-signed certificates for PostgreSQL-16.4, aiming to use PQC KEM and DSA algorithms (specifically Kyber768 for KEM and Dilithium3 for digital ...
1
vote
1
answer
715
views
OpenSSL 1.1.1 | enable-deprecated not working as intented
My existing code is complined with OpenSSL 1.0.2, and I am migration this to OpenSSL 1.1.1. During this I came accross OpenSSL Guide at https://wiki.openssl.org/index.php/OpenSSL_1.1.0_Changes
As a ...
- 2,218
1
vote
0
answers
63
views
How to use SSPI to authenticate with tcp server using openssl?
I am self-studying SSPI and how to program a client for secure connections, I am using a linux based openssl tcp server written in C and for the windows client.
So far I know that TLS handshake ...
- 77