openssl

TechRepublic Resources

• sort by:
• Relevance
• Date
• Popularity

Finding weak OpenSSL/OpenSSH keys

Vincent Danen reports on a recent vulnerability that affects Debian-based systems, including Ubuntu. This vulnerability caused OpenSSL to generate weak keys for anything relying on OpenSSL, including SSL certificates, OpenSSH keys, and OpenVPN keys. Here's what you need to do to protect your system.

Tags: OpenSSL, OpenSSH, Vincent Danen, Ssl/Tls, Security

Download resources 2008-05-19

Not Invented Here has no place in open source development

Last week, many Debian users got something of a shock when they realized that encryption keys for OpenSSH, OpenSSL, and OpenVPN have all been vulnerable to relatively easy compromise for a while. Previously, I discussed how you can detect and replace vulnerable SSH keys on Debian, and Vincent Danen...

Tags: Software, OpenSSL, Developer, Team, Problem, Debian, Tool, Ssl/Tls, Tools & Techniques, Open Source, Security, Management, Chad Perrin

Blog posts 2008-05-22

Find and fix weak OpenSSL/OpenSSH keys: Debian-based Linux vulnerability

A recent vulnerability was found in the OpenSSL package as provided by Debian and Debian-based Linux distributions, such as Ubuntu, that broke the effectiveness of the OpenSSL PRNG Predictable Random Number Generator. This vulnerability caused OpenSSL to generate weak keys for anything relying on OpenSSL, including SSL certificates, OpenSSH keys,...

Tags: OpenSSL, Linux, Perl, Vulnerability, Debian, OpenSSH, Debian Team, Ssl/Tls, Operating Systems, Open Source, Security, Software, Vincent Danen

Blog posts 2008-05-19

Using the openssl command-line program

OpenSSL can be used to create, request, sign, and revoke certificates and can also be used to perform other cryptographic operations such as creating hashes for files, testing SSL connections, and more.

Tags: OpenSSL, Vincent Danen, Ssl/Tls, Authentication/Encryption, Network Security, Security, Networking

Download resources 2008-04-30

Easiest way to encrypt file to CD

I have a need to encrypt a file on Windows 2000/XP, burn the encrypted file to CDROM, and to send the private key via email to the intended recipient.I am working in a Windows 2000 AD domain.what is the easiest way of accomplishing this? Is it po

Tags: alanb@..., CD, it management, networking, openSSL, security, software

Discussion threads 2006-11-02

Guard against this OpenSSL vulnerability

The overwhelming number of open source Web sites and the widespread use of OpenSSL to secure connections create a tremendous problem when vulnerabilities emerge. Case in point: In October 2005, the OpenSSL.org Project released a patch to fix a vulnerability in all previously released versions of OpenSSL. Get the details...

Tags: OpenSSL, Web, Microsoft Corp., SSL, Patches, SSL/TLS, Web site development, Authentication/Encryption, SECURITY, Michael Mullins CCNA, MCP, vulnerability, open source, Web site, SSL 2.0, patch management, software, Security Solutions Newsletter, Mike Mullins, SSL_OP_MSIE_SSLV2_RSA_PADDING Option, OpenSSL Project, Internet, Michael \"Mullins CCNA, MCP\"

Technical articles 2005-11-17

Guard against this OpenSSL vulnerability

Hooray for Gentoo LinuxThe Gentoo Linux Portage package management system and the Gentoo community, has made handling these updates almost automatic for me.I only run Apache for my own development use. It is not visible outside my test network; so vulnerabilities such as this are not high on my list...

Tags: gentoo, Linux, OpenSSL, patch management, Rh, RJRM, security

Discussion threads 2005-11-18

Apache SSL flaw opens Linux to Slapper Worm and DDoS

See how a vulnerability in the OpenSSL package opens Apache servers to hackers and the Slapper worm.The combination of a known vulnerability in the OpenSSL protocol implementation and a new worm that exploits this vulnerability is wreaking havoc for Apache Web server administrators. In the worst-case scenario, the worm takes...

Tags: Cyberthreats, SSL/TLS, SECURITY, Viruses and worms, OPEN SOURCE, John McCormick, SSL, Linux, worm, vulnerability, OpenSSL, Apache Software Foundation, server, distributed denial of service

Technical articles 2002-09-30

E-commerce on the e-cheap: Apache and OpenSSL

Software has finally progressed to the point where it's easy to install and configure everything to ensure a secure Web site. Vincent Danen explains how Apache and OpenSSL can help you meet your secure Web site needs.The Internet is a budding marketplace of information and e-commerce. In the last few...

Tags: SSL/TLS, Authentication/Encryption, Network security, OPEN SOURCE, SECURITY, software, Internet, Vincent Danen, e-business, SSL, Apache Software Foundation, OpenSSL

Technical articles 2000-06-15

Additional Resources

Learn to use the openssl command-line program

OpenSSL is more than just an open source SSL library implementation. It can be used to create, request, sign, and revoke certificates and can also be used to perform other cryptographic operations such as creating hashes for files, testing SSL connections, and more. This week, we'll take a look at...

Tags: Password, SSL, Ssl/Tls, Authentication/Encryption, Network Security, Security, Networking, Vincent Danen

Blog posts 2008-04-28

LightCA (zip)

A simple Certification Authority. You can create the certification authority key pair, other certificates, requests and revocations lists. This program needs the openssl package for Windows, downloadable at this address.

Tags: Microsoft Windows, Operating Systems, Software

Software downloads 2006-08-07

Apple Security Update 2005-007 (Mac OS X 10.3.9 Client) (dmg)

Security Update 2005-007 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components:AppKit, CoreFoundation, cups, Directory Services, HIToolbox, Kerberos, OpenSSL, ping, Safari, traceroute.

Tags: Apple Macintosh, Apple Inc., Kerberos, Apple Mac OS X, Ssl/Tls, Apple Mac OS, Desktops, Security, Operating Systems, Software, Hardware

Software downloads 2005-08-16

Apple Security Update 2005-007 (Mac OS X 10.4.2 Client) (dmg)

Security Update 2005-007 delivers a number of security enhancements and is recommended for all Macintosh users. This update includes the following components: AppKit, BlueTooth, CoreFoundation, cups, Directory Services, HIToolBox, Kerberos, loginwindow, Mail, OpenSSL, QuartzComposerScreenSaver, Security Interface, Safari, X11, zlib.

Tags: Apple Macintosh, Apple Inc., Kerberos, Apple Mac OS X, Security, Operating Systems, Software, Apple Mac OS

Software downloads 2005-08-16

S-IMessenger (exe)

With S-IMessenger you can be sure that all your communication is secure. S-IMessenger is capable of using TLSV1 , SSLV3, SSLV2 not recommended protocols. For all the TLS/SSL communication, S-IMessenger uses the industry standard tool-kit OpenSSL. Besides all the communication that takes place between the client & the server being...

Tags: Communication, S-IMessenger, Ssl/Tls, Network Security, Authentication/Encryption, Security, Networking

Software downloads 2007-05-24

Weezo (exe)

Weezo turns your computer into a secure Web server, thus enabling you both to access your PC for personal use, and instantly share your content (photos, music, videos, Web cam, Web TV) with whoever you want. All of this - as Weezo can be extended - can be accessed through...

Tags: Peer 2 World, Weezo, Remote Administration, Ssl/Tls, Web Servers, TVs, Tv & Home Theater, Open Source, Security, Internet, Personal Technology, Home Entertainment

Software downloads 2008-07-09

Text Encrypter (dmg)

Text Encrypter is a powerful text encryption program that may be used to encrypt blocks of arbitrary text or files. Text Encrypter uses OpenSSL and RC-4 (128-bit) encryption technology, which is the method primarily used on most secure Web sites. Encrypted files will have the .crypt suffix appended to the...

Tags: Sequence, Text Encrypter, Ssl/Tls, Security

Software downloads 2008-02-20

Email Encryption

Is anyone aware of an email encryption solution that doesn't cost a million dollars or require a monthly subscription?herehttp://www.thawte.com/email/free for personal use.annual cost for corporate use.sign or encrypt email.TrySteganos...........I don't have the link but just google for it.We use Entrust & it doesn't cost a million bucks.....but it will buckle...

Tags: E-mail, Computer Associates International Inc., certification

Discussion threads 2005-03-11

Creating a Centralized Secure Log Server With syslog-ng and Stunnel

This paper covers the installation and configuration of syslog-ng and Stunnel on machines running the Solaris 8 Operating System SPARC Platform Edition, but the procedure also generally applies to older and newer versions of the Solaris OS on both SPARC and x86 platforms. Each of the reference machines discussed comes...

Tags: Sun Solaris 8, Sun Solaris, Tcp/Ip, UNIX, Operating Systems, Servers, Processors, Networking, Software, Hardware, Semiconductors, Components

White papers 2004-09-01

XAMPP (exe)

Many people know from their own experience that it's not easy to install an Apache web server and it gets harder if you want to add MySQL, PHP and Perl. XAMPP is an easy to install Apache distribution containing MySQL, PHP and Perl. XAMPP is really very easy to install...

Tags: Perl, MySQL, PHP, Apache Software Foundation, XAMPP, Open Source, Scripting Languages, Software/Web Development, Web Development

Software downloads 2007-06-27

Are you encrypting data?

There is many ways of encryptingA cheap solution to encryption of backups is to use what is installed by default on most lynix/unix systems. And if not installed, is free to install.I developed some in house backup procedures of various code directories. During that time, I investigated various...

Tags: Sarbanes-Oxley, Regulatory compliance, SECURITY, Regulations, droolin, encryption

Discussion threads 2007-03-14