Hot answers tagged

20 votes
Accepted

Why is Apple using an older version of OpenSSL?

Why is Apple using a vulnerable version of OpenSSL? It isn't. If you click on the link you posted in your question, you will see that this update patches a number of vulnerabilities which exist ...
user avatar
17 votes

Why is Apple using an older version of OpenSSL?

OpenSSL is deprecated officially. It exists (for what little time Apple allows going forward) to not break software that doesn't either migrate to Apple's alternative or bundle SSL internally with the ...
user avatar
  • 219k
8 votes

How "official" is libressl support in High Sierra?

MacOS provided openssl-0.9.8 (when the world was using 1.0.2, and contemplating 1.1 and 1.1.1) until High Sierra release. Now in MacOS 10.13.5 it's libressl-2.2.7, while the current libressl is 2.7.4. ...
user avatar
  • 189
6 votes

How to upgrade OpenSSL in OS X?

For resolving OCSP Status Request extension unbounded memory growth (CVE-2016-6304) on macOS Sierra using brew with System Integrity Protection enabled: Temporarily adjust permissions on /usr/local ...
user avatar
5 votes
Accepted

Homebrew: can't remove 'keg-only' OpenSSL application

As of Homebrew f4d2141 there is a --force option. brew cleanup --force openssl References: man brew
user avatar
  • 486
5 votes
Accepted

How "official" is libressl support in High Sierra?

To answer the question asked: How “official” is libreSSL support in High Sierra? There is no official support. Apple makes available all Open Source code that it uses in macOS/OS X. From the ...
user avatar
  • 81.7k
4 votes

Using MAMP 3.4, how do I upgrade to Apache 2.4 and OpenSSL 1.0.2 to meet the ATS iOS 9 requirements?

For Mac OS X Yosemite Update openssl by brew to version >= 1.0.2d TLS 1.2 works only with apache 2.4 and actually MAMP is still given with apache 2.2. SOLUTION: download and install the latest ...
user avatar
  • 175
3 votes

homebrew - trouble upgrading openssl?

solution to install from source and get around the homebrew error brew install openssl -> Warning: openssl-1.0.2j already installed, it's just not linked. brew link openssl ->Warning: Refusing to ...
user avatar
3 votes

Updating OpenSSL in OSX

OpenSSL 0.9.8zg 14 July 2015 is the version installed by OS X 10.9(.5) (Mavericks) and resides in /usr/bin/. MacPorts neither installs nor updates/upgrades genuine Apple (OK, OpenSSL is not Apple but ...
user avatar
  • 63.9k
3 votes
Accepted

How to update Server 5 to TLS 1.2?

Go to http://www.apple.com/feedback and send feedback demanding that they update Server and OS X to support TLS 1.2. It's ridiculous that they don't, especially considering that in iOS 9 and El ...
user avatar
3 votes

How to upgrade OpenSSL in OS X?

Whoever doesn't want to use brew or ports and just wants to replace the default OpenSSL 0.9.8 installation can always disable system integrity protection by rebooting into recovery mode (cmd+R) and ...
user avatar
3 votes

How "official" is libressl support in High Sierra?

The only officially supported TLS library on macOS is Apple Secure Transport: Secure Transport Secure network communication using standardized transport layer security mechanisms. The Security....
user avatar
  • 66.2k
2 votes

Will installation of macports automatically install or update OpenSSL?

MacPorts will not replace your system-provided version of OpenSSL. If you install OpenSSL using MacPorts, it will do so in a separate prefix (by default /opt/local). To check the version of the ...
user avatar
2 votes
Accepted

How to upgrade brew ssh after recent client exploit?

To be able to modify certain directories/files in OS X El Capitan you have to disable System Integrity Protection (SIP) AKA “rootless”: Reboot your Mac into Recovery Mode by restarting your computer ...
user avatar
  • 63.9k
2 votes
Accepted

How to make a clean install of OpenSSL on El Capitan

Not sure if this is a complete solution but OPENSSLDIR is pointing to the wrong place. Also various compilation instructions include the "shared" option. So try this and let us know how you get on. ....
user avatar
2 votes
Accepted

How do I install OpenSSL in ElCaptain if my HomeBrew it's broken?

You can curl without SSL by removing the ‘s’ from ‘https’: ruby -e "$(curl -fsSL http://raw.githubusercontent.com/Homebrew/install/master/install)" Additionally, you could just point a web browser ...
user avatar
  • 185k
2 votes
Accepted

Which alternatives to OpenSSL do I have to calculate a SHA-256 hash?

shasum You can just use shasum: shasum -a 256 FILE.txt The shasum is the name of the command. The -a option means algorithm. The 256 specifies use of the 256-bit algorithm.
user avatar
1 vote

High Sierra missing openssl manpages

These manpages are missing for me as well on macOS High Sierra 10.13.6 (17G65). I also noted that some manpages are outdated and incomplete (for example pmset is from 2012, lacking some details). ...
user avatar
  • 489
1 vote
Accepted

AppleScript - echo into openssl AES encryption - is there a way to crack/snoop thru logs?

I overcome the password issue in my bash scripts by sourcing (including) another file with a predetermined variable already set. For example. Say you have a "config" file ~/config.conf and in it ...
user avatar
  • 81.7k
1 vote
Accepted

Upgrading OpenSSL without linking and workarounds

You have two versions of OpenSSL installed. There is one that is distributed as part of the operating system, and one that Homebrew has installed. They live at different locations on your Mac. The ...
user avatar
1 vote

How do I upgrade my openssl? A symlink isn't working for /usr/local/bin/OpenSSL

If you run brew info openssl you will have the answer : This formula is keg-only, which means it was not symlinked into /usr/local, because Apple has deprecated use of OpenSSL in favor of its ...
user avatar
1 vote

OpenSSL not getting linked with homebrew on El Capitan 10.11.6

You'll need to make sure you open a new shell after performing the link. (I updated my medium article you linked for future reference: Openssl with El Capitan).
user avatar
1 vote

how to make Mac use latest openssl instead of /System/Library/OpenSSL

Determine where the binary file openssl is located. find /usr/local -name 'openssl*' -exec ls -lFd {} + The binary file should have /bin/openssl* at the end of the absolute path. Also open a Finder ...
user avatar
  • 9,329
1 vote
Accepted

OpenSSL encryption method doesn't work on El Capitan

You likely have a shell quoting problem. The command works just fine for me in 10.11.4: > which openssl /usr/bin/openssl > openssl version OpenSSL 0.9.8zh 14 Jan 2016 > openssl enc -aes-...
user avatar
  • 44.2k
1 vote

OpenSSL 0.9.8zg used by PHP does not support TLSv1.2 or TLSv1.1

OpenSSL 0.9.8zc or 0.9.8zg does not support TLSv1.1/1.2 which can cause vulnerabilities while downloading using HTTPS links. You should update OpenSSL to latest version from official site.
user avatar
1 vote

What determines the relevant version of OpenSSL in a given network connection?

Having done further research, I see the following appears to answer my questions: OpenSSL is just one of many SSL/TLS implementations OS X does not rely solely on OpenSSL (though the deprecated ...
user avatar
  • 21
1 vote
Accepted

Server.app "SSLProtocol: Illegal protocol 'TLSv1.2'"

This looks like a mismatch between the version of Server, where the apache config resides, and the version of apache which is delivered by the OS. Look at the .conf files in /Library/Server/Web/...
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible