openssl

How to configure 'TLS1.2 only' in OpenSSL 1.0.2 config file?

How to configure 'TLS1.2 only' in OpenSSL 1.0.2 config file? Question: I would like to update the configuration of OpenSSL 1.0.2 (specifically 1.0.2k-fips as found on AWS’s Amazon Linux 2 AMIs), so that any client using OpenSSL refuses TLSv1.1, TLSv1, or anything lower that is not TLSv1.2. I have learned that for OpenSSL 1.1+ the …

Total answers: 3

PackageNotFoundError even though required channel added to anaconda config?

PackageNotFoundError even though required channel added to anaconda config? Question: I am working with Ubuntu in WSL and tried to install the required packages for a repo with: $ conda install –file requirements.txt I got a PackageNotFoundError for a bunch of different packages. I search on anaconda.org for the required channels and added them. But …

Total answers: 1

TPM2.0 Secure Cert file and Private key generated by openssl

TPM2.0 Secure Cert file and Private key generated by openssl Question: I generated a Cert file and Private key using openssl. These files are used to connect MQTT with TLS. How do I store/secure these files in the TPM on a raspberry pi. Once stored/secured how do I use them again? Say in a command …

Total answers: 1

Adobe Acrobat Reader can't open PKCS#12 file with correct password

Adobe Acrobat Reader can't open PKCS#12 file with correct password Question: I’m using the cryptography library to generate certificates, but I’m having trouble with it, so let me explain the steps I take. The problem is that the final PKCS#12 file can’t be imported to Adobe Acrobat Reader even though I enter the correct password. …

Total answers: 1

How to encrypt a string using python Openssl public key?

How to encrypt a string using python Openssl public key? Question: My current code to generate an OpenSSL public-private key pair: import OpenSSL key = OpenSSL.crypto.PKey() key.generate_key(OpenSSL.crypto.TYPE_RSA, 2048) public_key = OpenSSL.crypto.dump_publickey(OpenSSL.crypto.FILETYPE_PEM, key) private_key = OpenSSL.crypto.dump_privatekey(OpenSSL.crypto.FILETYPE_PEM, key) print(public_key, private_key, sep="n") Asked By: Flow || Source Answers: The documentation recommends that you call key.to_cryptography_key() to get a …

Total answers: 1

Ubuntu 22.04 | libssl.so.1.1: cannot open shared object file: No such file or directory

libssl.so.1.1: cannot open shared object file: No such file or directory Question: I’ve just updated to Ubuntu 22.04 LTS and my libs using OpenSSL just stopped working. Looks like Ubuntu switched to the version 3.0 of OpenSSL. For example, poetry stopped working: Traceback (most recent call last): File "/home/robz/.local/bin/poetry", line 5, in <module> from poetry.console …

Total answers: 12

SSL error unsafe legacy renegotiation disabled

SSL error unsafe legacy renegotiation disabled Question: I am running a Python code where I have to get some data from HTTPSConnectionPool(host=’ssd.jpl.nasa.gov’, port=443). But every time I try to run the code I get the following error. I am on MAC OS 12.1 raise SSLError(e, request=request) requests.exceptions.SSLError: HTTPSConnectionPool(host=’ssd.jpl.nasa.gov’, port=443): Max retries exceeded with url: /api/horizons.api?format=text&EPHEM_TYPE=OBSERVER&QUANTITIES_[…]_ …

Total answers: 6

PyInstaller FATAL FIPS SELFTEST FAILURE

PyInstaller FATAL FIPS SELFTEST FAILURE Question: I have used PyInstaller to package up a python application. When I run the application I receive this error: crypto/fips/fips.c:154: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE Abort (core dumped) If I run the script via "python3 scriptname.py" it runs fine. I do not use OpenSSL in my python …

Total answers: 4

Python-3.8.2 installation from source causes undefined reference to `SSL_new' on python installation?

Python-3.8.2 installation from source causes undefined reference to `SSL_new' on python installation? Question: I am trying to install python3.8.2 from python source by following this link, everything works fine except ssl module. when i try command like below. ./configure –with-openssl=/usr –enable-optimizations config.log looks like below configure:17204: checking for openssl/ssl.h in /usr configure:17211: result: yes configure:17227: …

Total answers: 1

"ERROR:root:code for hash md5 was not found" when using any hg mercurial commands

"ERROR:root:code for hash md5 was not found" when using any hg mercurial commands Question: When trying to use any hg Mercurial commands on the console, I keep getting this error. I installed Python using Homebrew and I am running Mac OS Catalina v. 10.15.1. Any reference would be appreciated. Here is the error I’m getting: …

Total answers: 15