An open source version of the SSL and TLS protocols.

learn more… | top users | synonyms

0
votes
0answers
52 views

OpenSSL 0.9.8zg

A week ago, as part of the installation a PHP 5.4 cartridge from openshift.com on my Mac with OS X v10.10.5 in the Terminal I noticed a message about it is loading OpenSSL 0.9.8?? for compatibilty ...
-1
votes
0answers
35 views

openssl version on OSX 10.11.3

I'm on OS X 10.11.3 El Capitan It seems that I am using openssl 0.9.8zg. Could that be right? ~ ❯❯❯ openssl version OpenSSL 0.9.8zg 14 July 2015 ~ ❯❯❯ whereis openssl /usr/bin/openssl ~ ❯❯❯ ...
1
vote
1answer
17 views

What determines the relevant version of OpenSSL in a given network connection?

My own system is I think fully "up to date" as far as Apple security updates through the App Store, but the version of OpenSSL installed on my system is 0.9.8zg, a version that was current during the ...
0
votes
0answers
28 views

Server.app “SSLProtocol: Illegal protocol 'TLSv1.2'”

With following versions installed: OS X 10.11.4 Beta (15E27e) Server.app 5.0.19(15s5065c) Apache/2.4.16 (Unix) OpenSSL/0.9.8zg I get: AH00526: Syntax error on line 581 of ...
1
vote
1answer
64 views

How to upgrade brew ssh after recent client exploit?

I'm running OS X El Capitan 10.11.1 Since the recently discovered SSH client exploit mentioned here I wanted to take action to secure myself. In the process I noticed I'm using Apple's ssh and not ...
1
vote
1answer
144 views

How to make a clean install of OpenSSL on El Capitan

I'm afraid I have made a mess with the version (0.9.8zg) of OpenSSL which was installed on my Mac. While I was trying to update it, now I have some error and for some reasons applications like Apache ...
0
votes
0answers
41 views

Mac OS X El Capitan: Symbol not found: _SSLv2_client_method

I was trying to update openssl so that it could use libssl.1.0.0 instead of libssl.0.9.8.dylib So I moved the two files /usr/lib/libssl.0.9.8.dylib and /usr/lib/libssl.0.9.7.dylib into my home and I ...
1
vote
0answers
56 views

Where to find OpenSSL devel package - can't seem to find it in Brew

I'm trying to install openssl-devel on OS X El Capitan, and I can't seem to find the package on Brew nor the source anywhere online. The application I'm installing (UnrealIRCd) requires both openssl ...
0
votes
0answers
95 views

Installing HTTrack error 'openssl/ssl.h file not found'

I'm trying to setup HTTrack on my Mac. ./configure is successful, but while compiling the package I'm getting the following error, and I'm not able to resolve it. In file included from htscore.c:40: ...
1
vote
0answers
66 views

Upgrade/Move OpenSSL in OS X to alternate Apache version/folder location

We are running a Mac Apache web server. It currently has OpenSSL/0.9.7l running on it which is not compatible with SHA2. OpenSSL is running within a special user-interface called iTools 9; iTools is ...
7
votes
1answer
462 views

How to update Server 5 to TLS 1.2?

In the latest version of Apple's Server app version 5.0.4 running on El Capitan (10.11.2), SSL websites use TLS version 1.0. But, as one Ivan Ristic says, « The bottom line is that TLS 1.0 is insecure ...
1
vote
1answer
72 views

Openssl on mac -In is not working

I am follow a tutorial guide from this link http://osxdaily.com/2012/01/30/encrypt-and-decrypt-files-with-openssl/ to try to produce -sha256 hash from an input file but when i type openssl dgst ...
2
votes
1answer
492 views

Using MAMP 3.4, how do I upgrade to Apache 2.4 and OpenSSL 1.0.2 to meet the ATS iOS 9 requirements?

I've just installed MAMP 3.4 on Yosemite but the Apache version inside is still 2.2. Is there a way to upgrade to Apache 2.4? Moreover I have installed through brew openssl 1.0.2 but MAMP Apache still ...
12
votes
2answers
3k views

Why is Apple using an older version of OpenSSL?

With the newest OS X Update (10.10.5), Apple is introducing OpenSSL 0.9.8. I browsed through the official OpenSSL page, and there I could get Version 1.0.2. My question is: Why is Apple using an ...
0
votes
0answers
294 views

How to compile PHP with OpenSSL on OS X 10.9?

So I'm while trying to compile PHP 5.6.10 from the source faced the following problem: Undefined symbols for architecture x86_64: "_PKCS5_PBKDF2_HMAC", referenced from: _zif_openssl_pbkdf2 in ...
1
vote
1answer
243 views

How do I determine what TLS ciphers are being used in OSX, Outlook 2011?

I just limited all my SSL ciphers to TLS 1.X and TLS1_RSA_AES and my up-to-date OSX machine is no longer able to connect to the server via Outlook 2011. I can use Safari to connect to the same ...
11
votes
1answer
655 views

In the light of the FREAK TLS vulnerability, how may I disable insecure cipher suites manually in Safari?

A research group named SMACK has released a vulnerability known as FREAK which can be used for man-in-the-middle (MITM) attack. The vulnerability is due to an old ghost created by USA Government (NSA, ...
0
votes
1answer
298 views

phpinfo() displays Wrong version openssl in OS X

I upgraded openssl from version 0.9.8zc to OpenSSL 1.0.2 version. I used this web page How to upgrade OpenSSL in OS X? to do this. The next step I upgraded php to 5.6 version from this web page ...
0
votes
1answer
191 views

Does default e-mail port behave differently than custom?

I'm trying to setup mail on Mavericks to talk directly to my mail server at an ISP. I use the ISP for my mail, but filter it through Gmail and that works. So, here's what I've tried... telnet to port ...
0
votes
1answer
480 views

How to create a self signed SSL server certificate on OS X 10.7 for HighPoint RAID management server?

When having multiple Mac machines running Highpoint RocketRaid controllers and the HPT Web RAID Management software v1.68, results in having multiple copies of an identical self-signed ...
1
vote
2answers
261 views

Will installation of macports automatically install or update OpenSSL?

I am a mac user and want to stay with the system-provided version of OpenSSL, which is OpenSSL 0.9.8y. I am wondering if installation of macports will automatically update my OpenSSL or install ...
0
votes
0answers
215 views

Want to Update OpenSSL with Ruby 2.0.0 Already Installed

I have Ruby 2.0.0-p451 installed via RVM. From what I have read online the newer versions of openssl need Ruby 2 installed. I'm running RVM 1.25.25. I currently host Ruby on Rails websites on my Mac ...
1
vote
1answer
847 views

Homebrew: can't remove 'keg-only' OpenSSL application

Given the recent OpenSSL scare I'm trying to clean out older versions from my machines but Homebrew won't let me: $ brew dirty openssl (1.0.1e, 1.0.1f, 1.0.1g) $ brew cleanup openssl Warning: ...
1
vote
2answers
273 views

'which openssl' returns nothing when trying to upgrade OpenSSL

I've been working the last day or so to get openssl upgraded on my machine. I've followed the answers here and here and now I've got some pretty funny results. When I type which openssl I get no ...
52
votes
3answers
21k views

What versions of OS X are affected by Heartbleed?

What versions of OS X come default with the affected versions of OpenSSL? All Internet traffic right now is clogged with the same generic information in regards to the Heartbleed bug, without any ...
62
votes
2answers
67k views

How to upgrade OpenSSL in OS X?

Today the heartbleed OpenSSL exploit was announced in the wild, which allows an attacker to surreptitiously detect and steal private server keys (allowing them to MitM and decrypt your encrypted data ...
2
votes
2answers
2k views

'No machine certificates found' when adding machine certificate into VPN

I've 2 certificates, one for user authentication and another for machine authentication. My user authentication includes certificate and private key based on which I've generated pkcs12 file using ...
3
votes
1answer
2k views

How do I view or verify signed .mobileconfig files using Terminal?

I need to troubleshoot problems with signed .mobileconfig profiles. How can I show the signature of a these files using Terminal? Is it also possible to verify the certificates that were used to sign ...
2
votes
1answer
4k views

Server certificates are not properly validated by subversion/openssl

I noticed that the svn cli fails to validate https certificates and always ask for manual validation using the certificate fingerprint: mbp:~ user$ svn co https://svn.mysite.com/svn/testrepo Error ...
8
votes
1answer
11k views

Ruby 2.0.0 install via RVM: errors surrounding openssl

Using: Mountain Lion 10.8.2, RVM 1.18.15 Having trouble with, apparently, openssl when trying to install Ruby 2.0.0 via RVM: $ rvm install 2.0.0 ... Extracting openssl to ...
1
vote
2answers
6k views

Ruby 2.0.0 fails to install because of openssl

I can't install ruby from source, on configuration (./configure) it states Ignore OpenSSL broken by Apple. Please use another openssl. (e.g. using `configure --with-openssl-dir=/path/to/openssl') ...
0
votes
0answers
25 views

Use OpenSSL in Automator Application? [duplicate]

I want to make an application that's in the same directory as a file: message.txt.enc If you open the app you should be prompted with a password dialogue. this should be used to decrypt the file AND ...
1
vote
3answers
8k views

how to install stunnel on mountain lion?

I currently bought an Mac, so I'm a noob :). I used to connect to my server using stunnel on windows & ubuntu. I'm also a noob in networking. I check website download section, and there's no mac ...
6
votes
2answers
6k views

where is Ruby looking for SSL_CERT_FILE?

I am trying to find out where Ruby expects to find its openssl CA list. My environment is: Mac OS 10.7.5 OpenSSL from homebrew Rbenv from homebrew Ruby 1.9.3, installed using rbenv and ...
3
votes
1answer
1k views

Ruby 1.9.3's infamous OS X OpenSSL segfault in http.rb:799

[Post shortened and updated with an answer.] Ruby 1.9.3 compiled on OS X 10.7.4 with MacPorts crashes in my Rails apps when using SSL in http.rb, e.g. when authenticating to Facebook: (facebook) ...
2
votes
2answers
3k views

Using Automator or AppleScript to encrypt/decrypt with OpenSSL

I would like to know how to use Automator or AppleScript to create a droplet that would compress/uncompress (tar.gz) and encrypt/decrypt with OpenSSL files and/or directories dropped in it. The ...