Questions tagged [openssl]
OpenSSL is an open source software toolkit that implements the SSL/TLS protocol, as well as a general cryptographic library.
44 questions
7
votes
1
answer
917
views
C++ program to encrypt hardcoded text
This code takes in a hardcoded input buffer, maximum 64 chars, encrypts, decrypts and outputs decrypted buffer using AES CBC mechanism. Entered password is converted to a SHA256 digest and copied into ...
2
votes
1
answer
158
views
bash script to setup a digitalocean webserver (apache2, nginx, PHP7.4, fastcgi, SSL)
The following bash script is intended to be run on a freshly installed digitaloceans ubuntu 20.04 droplet by root in its home dir.
The purpose is to setup a ready to use webserver with SSL (certbot), ...
1
vote
1
answer
2k
views
.Net BouncyCastle - PKCS#3, PKCS#8 & PKCS#10 Generation as base64
Reaserching BouncyCastle for C# is not for the faint of heart. After navigating an ocean of Java dead ends, I have arrived at the following code.
I believe it's very useful for someone who wants to ...
4
votes
5
answers
7k
views
C++ AES Encryption Class
I am working with OpenSSL and writing an AES256 encryption module. My knowledge of cybersecurity is not vast and I would like to know whether there are any obvious holes I'm leaving. The intent is for ...
4
votes
1
answer
341
views
Cryptographic hashing class using OpenSSL's EVP interface
I have written a cryptographic hashing class named Ccksum::DigestHasher that allows the caller to select a hashing algorithm by name via OpenSSL's EVP interface. ...
2
votes
0
answers
349
views
Use OpenSSL and Qt to build the correct X509 certificate chain based on a pool and a leaf
This is my solution to a question I asked on stackoverflow.
The scenario is as follows: I got my X509 certificate and a pool of other X509 certificates. Now I want to calculate the chain of trust, ...
5
votes
2
answers
995
views
Securing my password wallet
I am currently learning C++, so I made this basic password wallet for Ubuntu.
Its source code is in the /opt directory and it has a symlink so i can launch it from ...
5
votes
1
answer
5k
views
Secure socket programming with OpenSSL and C
Background
Lately, I found OpenSSL to be difficult to learn as a beginner, while it can be implemented inside beginner-friendly projects like socket programming. ...
4
votes
2
answers
237
views
Automatic CRL files converter
In my job we use our internal CA, which runs on a Windows server. When I want to use its CRL on a Linux machine I have to do these steps:
download root CA and intermediate CAs
covert them to x509
...
3
votes
0
answers
711
views
Verify OpenSSL RSA signature (PHP) with .NET (VB)
I would like to achieve something I believe is pretty standard:
A) My VB.NET client (ideally targetting Framework 4.0) sends a text string to my Apache/PHP Server via an HTTPS POST request.
B) My ...
1
vote
1
answer
75
views
Shell POSIX OpenSSL file decryption script follow-up #3 (final)
From original very simplistic code: Shell POSIX OpenSSL file decryption script
I learned a lot both from the first follow-up review, and the second one as well, many thanks!
I just need one final ...
8
votes
1
answer
33k
views
A Simple C++ Client That Sends Data Over TLS Using OpenSSL
I am learning C++ and socket programming and OpenSSL. As such, I decided to make a simple client that opens a TLS connection and writes some data as practice. It also serves as a base for more complex ...
1
vote
1
answer
97
views
Shell POSIX OpenSSL file decryption script follow-up #2
This question is the second follow-up of: Shell POSIX OpenSSL file decryption script
The first follow-up was: Shell POSIX OpenSSL file decryption script follow-up #1
Both of which have proven very ...
0
votes
1
answer
8k
views
changing root password with an ansible playbook
It is with great difficulty that I resolved to solve my problem, so I allow myself to submit here the solution.
I wanted a playbook that could replace on all hosts the root password with a string ...
2
votes
2
answers
244
views
Long-term archiving + encrypting shell script
Yesterday, I very quickly, in an hour, wrote the very first version of my long-term archiving + encrypting shell script.
I am aware it may have too many flaws, but none of them really prevent it from ...