20
votes
Accepted
Why is Apple using an older version of OpenSSL?
Why is Apple using a vulnerable version of OpenSSL?
It isn't.
If you click on the link you posted in your question, you will see that this update patches a number of vulnerabilities which exist ...
- 1,978
17
votes
Why is Apple using an older version of OpenSSL?
OpenSSL is deprecated officially. It exists (for what little time Apple allows going forward) to not break software that doesn't either migrate to Apple's alternative or bundle SSL internally with the ...
- 227k
8
votes
How "official" is libressl support in High Sierra?
MacOS provided openssl-0.9.8 (when the world was using 1.0.2, and contemplating 1.1 and 1.1.1) until High Sierra release. Now in MacOS 10.13.5 it's libressl-2.2.7, while the current libressl is 2.7.4.
...
- 189
6
votes
How to upgrade OpenSSL in OS X?
For resolving OCSP Status Request extension unbounded memory growth (CVE-2016-6304) on macOS Sierra using brew with System Integrity Protection enabled:
Temporarily adjust permissions on /usr/local ...
- 383
5
votes
Accepted
How "official" is libressl support in High Sierra?
To answer the question asked:
How “official” is libreSSL support in High Sierra?
There is no official support. Apple makes available all Open Source code that it uses in macOS/OS X. From the ...
- 88.7k
4
votes
Using MAMP 3.4, how do I upgrade to Apache 2.4 and OpenSSL 1.0.2 to meet the ATS iOS 9 requirements?
For Mac OS X Yosemite
Update openssl by brew to version >= 1.0.2d
TLS 1.2 works only with apache 2.4 and actually MAMP is still given with apache 2.2. SOLUTION: download and install the latest ...
- 175
3
votes
How "official" is libressl support in High Sierra?
The only officially supported TLS library on macOS is Apple Secure Transport:
Secure Transport
Secure network communication using standardized transport layer security mechanisms.
The Security....
- 72.3k
3
votes
Updating OpenSSL in OSX
OpenSSL 0.9.8zg 14 July 2015 is the version installed by OS X 10.9(.5) (Mavericks) and resides in /usr/bin/.
MacPorts neither installs nor updates/upgrades genuine Apple (OK, OpenSSL is not Apple but ...
- 65k
3
votes
homebrew - trouble upgrading openssl?
solution to install from source and get around the homebrew error
brew install openssl
-> Warning: openssl-1.0.2j already installed, it's just not linked.
brew link openssl
->Warning: Refusing to ...
- 569
3
votes
How to upgrade OpenSSL in OS X?
Whoever doesn't want to use brew or ports and just wants to replace the default OpenSSL 0.9.8 installation can always disable system integrity protection by rebooting into recovery mode (cmd+R) and ...
- 198
3
votes
Accepted
How to update Server 5 to TLS 1.2?
Go to http://www.apple.com/feedback and send feedback demanding that they update Server and OS X to support TLS 1.2. It's ridiculous that they don't, especially considering that in iOS 9 and El ...
- 719
2
votes
Accepted
How do I install OpenSSL in ElCaptain if my HomeBrew it's broken?
You can curl without SSL by removing the ‘s’ from ‘https’:
ruby -e "$(curl -fsSL http://raw.githubusercontent.com/Homebrew/install/master/install)"
Additionally, you could just point a web browser ...
grg♦
- 193k
2
votes
Accepted
How to upgrade brew ssh after recent client exploit?
To be able to modify certain directories/files in OS X El Capitan you have to disable System Integrity Protection (SIP) AKA “rootless”:
Reboot your Mac into Recovery Mode by restarting your computer ...
- 65k
2
votes
Accepted
How to make a clean install of OpenSSL on El Capitan
Not sure if this is a complete solution but OPENSSLDIR is pointing to the wrong place. Also various compilation instructions include the "shared" option.
So try this and let us know how you get on.
....
2
votes
Accepted
Which alternatives to OpenSSL do I have to calculate a SHA-256 hash?
shasum
You can just use shasum:
shasum -a 256 FILE.txt
The shasum is the name of the command.
The -a option means algorithm.
The 256 specifies use of the 256-bit algorithm.
- 911
1
vote
OpenSSL not getting linked with homebrew on El Capitan 10.11.6
You'll need to make sure you open a new shell after performing the link.
(I updated my medium article you linked for future reference: Openssl with El Capitan).
- 121
1
vote
Install Git on OSX 10.8
I had Homebrew installed already, so these four steps were enough:
brew install openssl
brew install git
mv /usr/bin/git /usr/bin/git.old
Add [http] sslVersion = tlsv1.2 to $HOME/.gitconfig
Note ...
- 151
1
vote
Update from Mac OS Sierra to High Sierra causes App to crash
An app terminating with signal 11 (SIGSEGV, segmentation fault) is usually an indication of bad memory access in the application code. It's very likely a bug. Your best bet is to file a bug with Apple ...
- 1,617
1
vote
High Sierra missing openssl manpages
These manpages are missing for me as well on macOS High Sierra 10.13.6 (17G65). I also noted that some manpages are outdated and incomplete (for example pmset is from 2012, lacking some details).
...
- 539
1
vote
Accepted
AppleScript - echo into openssl AES encryption - is there a way to crack/snoop thru logs?
I overcome the password issue in my bash scripts by sourcing (including) another file with a predetermined variable already set.
For example. Say you have a "config" file ~/config.conf and in it ...
- 88.7k
1
vote
Accepted
Upgrading OpenSSL without linking and workarounds
You have two versions of OpenSSL installed. There is one that is distributed as part of the operating system, and one that Homebrew has installed. They live at different locations on your Mac.
The ...
1
vote
How do I upgrade my openssl? A symlink isn't working for /usr/local/bin/OpenSSL
If you run
brew info openssl
you will have the answer :
This formula is keg-only, which means it was not symlinked into /usr/local,
because Apple has deprecated use of OpenSSL in favor of its ...
- 4,763
1
vote
how to make Mac use latest openssl instead of /System/Library/OpenSSL
Determine where the binary file openssl is located.
find /usr/local -name 'openssl*' -exec ls -lFd {} +
The binary file should have /bin/openssl* at the end of the absolute path. Also open a Finder ...
- 9,908
1
vote
Accepted
OpenSSL encryption method doesn't work on El Capitan
You likely have a shell quoting problem. The command works just fine for me in 10.11.4:
> which openssl
/usr/bin/openssl
> openssl version
OpenSSL 0.9.8zh 14 Jan 2016
> openssl enc -aes-...
- 45.2k
1
vote
OpenSSL 0.9.8zg used by PHP does not support TLSv1.2 or TLSv1.1
OpenSSL 0.9.8zc or 0.9.8zg does not support TLSv1.1/1.2 which can cause vulnerabilities while downloading using HTTPS links.
You should update OpenSSL to latest version from official site.
- 111
1
vote
What determines the relevant version of OpenSSL in a given network connection?
Having done further research, I see the following appears to answer my questions:
OpenSSL is just one of many SSL/TLS implementations
OS X does not rely solely on OpenSSL (though the deprecated ...
- 21
1
vote
Accepted
Server.app "SSLProtocol: Illegal protocol 'TLSv1.2'"
This looks like a mismatch between the version of Server, where the apache config resides, and the version of apache which is delivered by the OS.
Look at the .conf files in /Library/Server/Web/...
- 685
Only top scored, non community-wiki answers of a minimum length are eligible