16,626 questions
Score of 0
0 answers
42 views
How can I prevent stale CRL updates from triggering unintended certificate revocation in a distributed certificate management workflow?
I'm working on a RADIUS authentication service that receives certificates and CRLs from an external Credential Manager through RabbitMQ message queues. During testing, I observed that after a server ...
Score of 1
1 answer
133 views
JWT C++ OpenSSL RS256 Signature Verification
I am attempting to validate a JWT signature using C++, without using pre-existing cryptography helper libraries. Specifically, I am attempting to do this via the modulus and exponent of the RSA public ...
Score of -2
1 answer
64 views
Visual Studio 2017 Where to put SSLEAY32.DLL and LIBEAY32.DLL [closed]
When I run my program in Visual Studio 2017, I'm getting the errors:
Cannot find SSLEAY32.DLL
Cannot find LIBEAY32.DLL
I've got this files spread out all over my C: disk. (For example Adobe Acrobat ...
Score of 2
0 answers
94 views
Open62541 OPC UA library with OpenSSL
I am trying to build a new open62541.lib with OpenSSL support but am not sure my CMakeSettings.json file is correct when building the lib.
I am using Visual Studio 2019 on Windows 11 and have ...
Advice
0
votes
1
replies
44
views
MIP SDK (1.18.124) interaction with OpenSSL
I work on an application which uses C++ MIP SDK to read\write MIP labels on the documents. I recently upgraded to MIP SDK version 1.18.124 and observed that it now ships with its own OpenSSL libraries ...
Score of 1
1 answer
68 views
Is there a standard field/OID that exists for putting a human readable version string in an X509 certificate?
I have a custom SBL I wrote for a SoC. When I do my release builds I want to put the name of the release as a human readable string in the X.509 certificate that is attached to the release binary.
I ...
Advice
1
vote
0
replies
84
views
How to generate PKCS #7 signature in C# equivalent to openssl smime -sign -binary -noattr -nosmimecap -outform DER
My problem: I need to digitally sign RDP files before distribution since Microsoft change in April 2026.
I have an RSA code signing certificate stored in HSM (Azure Key Vault) and hence can't use ...
Score of 0
3 answers
173 views
openssl sha256sum hash contains output file as part of input when using find command to list the files
In the below shell script function I am calculating the SHA-256 hash values using combination of find and sha256sum commands. But, when I do cat of generated hash file hashedoutput.sha256 it contains ...
Advice
0
votes
0
replies
95
views
What OpenSSL API call will give me a list of key algorithms that could sign an X509 certificate?
The X509_get_signature_info() function allows the public/private key nid (pknid) to be returned for an X509 certificate, with examples like "RSA".
To be nice to people, we want to offer ...
Score of 2
0 answers
311 views
Indy 10 TCPServer and SSL certificate verifying issue (error 20, SSL alert number 48)
I am developing an application, which has a built-in TCP server. I want the server to be secure via OpenSSL. The server has to identify its clients and the clients must identify the server.
If I ...
Score of 2
0 answers
85 views
How to renegotiate over TLS 1.2 using OpenSSL 3?
Using OpenSSL 3.3.0, we are having trouble with TLS 1.2 renegotiation.
We implemented C++ applications on both the server and client sides, and configured options to enable renegotiation. In practice, ...
Score of 0
0 answers
63 views
gcc:internal compiler error:Segmentation fault signal terminated programcc1
I am trying to build OpenSSL from source inside a Docker container based on an Alpine Linux toolchain image (ghcr.io/nokia/corteca-toolchain). The target architecture is AArch64, and this environment ...
Score of 0
1 answer
145 views
Delphi 11+ 64-bit executable: How do I specify which DLLs to load when Indy 10 initializes OpenSSL?
I have a set of 64-bit DLLs, but the standard DLL names for the 64-bit DLL names clash with the 32-bit DLL names. We should probably not mix 32-bit and 64-bit and have their .exes and .dlls in ...
Score of 1
1 answer
355 views
How to build the Apache Tomcat Native Library?
I updated my Apache Tomcat installation from 9.0.57 to 9.0.127 on Ubuntu 22.04 (in other words I removed the apt version and manually installed the updated version). Everything works fine, except that ...
Score of 0
0 answers
73 views
Which certificate file for TaurusTLS RootKey property?
I've generated a domain certificate and it comes with three files: a certificate, a private key, and a CA bundle.
The TTaurusTLSServerIOHandler exposes three fields:
PrivateKey
PublicKey
Rootkey
I set ...