16,686 questions
-3
votes
0
answers
102
views
How does TLS 1.3 derive a shared secret? [closed]
I am writing a bare minimum HTTPS/TLS 1.3 server in C. Currently I want it to work an just the bare minimum spec:
X22519 key establishment
AES 128 GCM encryption
Self signed certificate
I find ...
- 33
1
vote
1
answer
47
views
How do I specify that CN=<container_name> and localhost at the same time for openssl self signed certificates between postgres and express?
Postgres is running inside a docker container named postgres_server.development.ch_api
Express is running inside another docker container named express_server.development.ch_api
I am trying to setup ...
- 6,391
-1
votes
1
answer
40
views
Error 20 at 0 depth lookup: unable to get local issuer certificate for self signed PostgreSQL when run from outside docker [closed]
I am getting an error when verifying certificates generated using openssl outside docker but it works perfectly when verified from within docker
openssl verify -CAfile ./certs/docker/development/...
- 6,391
4
votes
1
answer
271
views
How to FIX printf resulted SIGSEGV when compiled with openssl?
I am trying to compile my code with openssl library. My code is printf then the program received SIGSEGV signal.
Code of test.c:
#include <winsock2.h>
#include <openssl/ssl.h>
#include <...
- 65
1
vote
0
answers
92
views
Using boost::asio::async_wait with Native recvfrom() Calls: Is It Correct?
Suppose we are waiting for incoming data on a socket using the call socket::async_wait(socket::wait_read, callback). After the callback notifies us that data is available, is it possible to read the ...
- 1,401
0
votes
0
answers
159
views
Weird linker error "undefined reference to `__imp__vsnprintf'" in "libcrypto.a" in C++ Windows project?
I've been working on a C++ project. I have been using 2 Windows PCs for building it and both worked fine with the same (kinda janky) setup. I recently got a new computer and I get a linker error. My ...
- 122
6
votes
2
answers
2k
views
Ruby SSL_connect certificate verify failed: unable to get certificate CRL on macOS
m getting an SSL error when making an HTTPS request in a Rails controller (Ruby 3.1.6):
OpenSSL::SSL::SSLError in PurchaseAttemptsController#create
SSL_connect returned=1 errno=0 peeraddr=3.175.45.47:...
- 7,836
-1
votes
0
answers
127
views
How do I use Openssl 3 with Qt 5.15.19?
I have an application that still uses Openssl 1.1.1w. I need to update that to an OpenSsl 3 version. Switching to Qt6 seems like the best way to do that, however due to the nature of the codebase we ...
- 15
1
vote
1
answer
194
views
How to compile 64-bit binaries for latest versions of OpenSSL (3.5.x) on the Windows 10
I am trying to compile latest version of the OpenSSL on Windows 10 machine (version 3.5.4).
Prerequisites are:
I ran x64 Native Tools Command Prompt for Visual Studio 2022 Community Edition
I ...
- 1,867
0
votes
0
answers
44
views
How to achieve complete read/write thread separation for BoringSSL using BIO APIs
I'm integrating BoringSSL into my networking library for secure communication. I've observed that both SSL_read() and SSL_write() operations can potentially trigger both read and write activities on ...
- 373
1
vote
1
answer
163
views
Migrating from OpenSSL 1.1 to 3.0: How to generate DH key pair with 32-byte prime using EVP_PKEY-DH interface?
I'm migrating my Diffie-Hellman (DH) implementation from OpenSSL 1.1 to OpenSSL 3.0. Previously, I used APIs like DH_set0_pqg, but these are now deprecated. I am switching to the EVP_PKEY-DH interface ...
- 637
1
vote
0
answers
146
views
Why does EVP_PKEY_derive_set_peer cause a segmentation fault when using a peer public key reconstructed from BIGNUM in OpenSSL 3?
I'm using OpenSSL 3.0 EVP_PKEY in C to perform Diffie-Hellman key exchange. I generate Alice's and Bob's key pairs. I extract Bob's public key as a BIGNUM and try to reconstruct an EVP_PKEY for Bob's ...
- 637
1
vote
1
answer
81
views
Mise tells me openssl is not found event if it's installed on my computer [closed]
I'm trying to install PHP 8.4 with mise, but I've got an error saying that I'm missing OpenSSL.
configure: error: Package requirements (openssl >= 1.1.1) were not met:
No package 'openssl' found
...
- 2,129
1
vote
0
answers
93
views
RSA based certs failing during TLS after removal of RSA-PSS ciphers from ClientSignatureAlgorithm
For FIPS mode, I added ClientSignatureAlgorithm in opensslcnf.txt. This change was done for FIPS mode using the crypto-policies package.
The support ciphers for ClientSignatureAlgorithms are same as ...
0
votes
0
answers
93
views
Laravel 12 public and private key VAPID OpenSSl error
I'm trying to implement notifications on my system (with Laravel 12 and PHP 8.3.16) using composer require laravel-notification-channels/webpush. Everything installs correctly, but when running php ...
