Collaborate Disseminate
I created a signature with:
openssl pkeyutl -sign -inkey rsa.key.bob -in plain -out plain.sig.bob
and to verify, Alice just needs to use Bob public key to check the authenticity of the message.
So why I have to use this (which require th… Continue reading Why in "openssl pkeyutl -verify" is needed both public and private keys? Why isn’t public key enough?
I’ve been looking around for smart cards with support for Ed25519. More specifically, I’d like to have a TLS CA with the private key on a YubiKey. The latest YubiKey 5 supports secp256k1, secp384r1, and RSA 2048 in the PIV tool for storing… Continue reading Can I Use an OpenPGP Smart Card to Sign a TLS Certificate?
I Have a confusion here.
From what I know, in TLS1.2, the Client sends Client Hello and then the Server Sends a Server Hello, Certificate(with its public key) and Certificate chain, and then a Server Hello Done.
Then, the Client sends a Cl… Continue reading TLS session keys [duplicate]
Is openssl enc considered secure enough to protect a bitcoin recovery passphrase?
An attacker might get the encrypted text and invest several thousand dollars in computing power trying to decrypt it.
The password is about 15 characters lon… Continue reading Is openssl enc safe enough for securing a Bitcoin recovery phrase?
When I try to connect to the site https://api-mte.itespp.org with OpenSSL (openssl s_client -connect api-mte.itespp.org:443 -brief), it complains that the DH key is too small. But when I analyze its certificate, it says the RSA key is 2048… Continue reading Why do I get the error "dh key too small" when the RSA key is 2048 bits?
I have my own CA root certificate and I’ve been signing CSR (with this certificate) directly with openssl x509 -req (internal https, mqtts, etc). For a project I need to have revocation lists of the signed certificates and so I googled how… Continue reading The current crlnumber file is not being created [closed]
I’m trying to understand the difference between generating a private key using openssl genrsa and adding -newkey to req.
I found a 2014 answer saying the underlying code is the same, one from 2015 saying the encryption is different, and a … Continue reading openssl: genrsa vs req -newkey private keys. What’s the difference?
I’m trying to set positive trust attributes to a certificate, however, in openssl’s documenation there is no information about how to set them:
From the OpenSSL perspective, a trust anchor is a certificate that should be augmented with an… Continue reading How to set/modify "positive trust attributes" in a certificate for openssl
We have a service running as a container for which there some reported vulnerabilities in OpenSSL. Our service is behind the Application Load Balancer, which ideally should terminate the traffic at the load balancer before decrypting the t… Continue reading Can OpenSSL vulnerabilities be mitigated by Load Balancer service from Cloud Providers
I read a lot of articles about self signed certificates and I’m not exactly sure if I’m getting near to what I want to actually achieve.
I’m trying to implement a self signed certificate so that the end users will not be seeing the "n… Continue reading self signed certificate