16,695 questions
0
votes
1
answer
41
views
Ruby SSL_connect certificate verify failed: unable to get certificate CRL on macOS
m getting an SSL error when making an HTTPS request in a Rails controller (Ruby 3.1.6):
OpenSSL::SSL::SSLError in PurchaseAttemptsController#create
SSL_connect returned=1 errno=0 peeraddr=3.175.45.47:...
- 7,776
0
votes
0
answers
78
views
How do I use Openssl 3 with Qt 5.15.19?
I have an application that still uses Openssl 1.1.1w. I need to update that to an OpenSsl 3 version. Switching to Qt6 seems like the best way to do that, however due to the nature of the codebase we ...
- 17
1
vote
1
answer
108
views
How to compile 64-bit binaries for latest versions of OpenSSL (3.5.x) on the Windows 10
I am trying to compile latest version of the OpenSSL on Windows 10 machine (version 3.5.4).
Prerequisites are:
I ran x64 Native Tools Command Prompt for Visual Studio 2022 Community Edition
I ...
- 1,867
1
vote
1
answer
134
views
Migrating from OpenSSL 1.1 to 3.0: How to generate DH key pair with 32-byte prime using EVP_PKEY-DH interface?
I'm migrating my Diffie-Hellman (DH) implementation from OpenSSL 1.1 to OpenSSL 3.0. Previously, I used APIs like DH_set0_pqg, but these are now deprecated. I am switching to the EVP_PKEY-DH interface ...
- 637
1
vote
1
answer
63
views
Mise tells me openssl is not found event if it's installed on my computer [closed]
I'm trying to install PHP 8.4 with mise, but I've got an error saying that I'm missing OpenSSL.
configure: error: Package requirements (openssl >= 1.1.1) were not met:
No package 'openssl' found
...
- 2,129
0
votes
0
answers
68
views
Laravel 12 public and private key VAPID OpenSSl error
I'm trying to implement notifications on my system (with Laravel 12 and PHP 8.3.16) using composer require laravel-notification-channels/webpush. Everything installs correctly, but when running php ...
3
votes
3
answers
290
views
+200
No rule to make target '/opt/homebrew/Cellar/openssl@3/3.4.1/include/openssl/opensslv.h' installing php 8.4.11
Mon 17 Nov 2025 Update
I have implemented @kakaiikaka's and @orbanbalage's suggestions individually and one a time to no avail--I got same error message I've been receiving from the beginning:
make: **...
- 388
0
votes
1
answer
58
views
Getting "FATAL FIPS SELFTEST FAILURE" when importing qwen-vl-utils
When I run
from qwen_vl_utils import process_vision_info
in my Python environment, I get
crypto/fips/fips.c:154: OpenSSL internal error: FATAL FIPS SELFTEST FAILURE
Aborted
I'm using
OpenSSL 3.3.2
...
- 351
2
votes
1
answer
85
views
Load X509 from PEM with OpenSSL 3 and a dedicated OSSL_LIB_CTX
For many methods in OpenSSL 3 there is an _ex version to create/load something with a provided OSSL_LIB_CTX*. Why is there no PEM_read_bio_X509_ex that accepts this ctx?
I don't know why, but every AI ...
- 911
0
votes
1
answer
171
views
encrypt using OpenSSL and RSA_public_encrypt
I need to encrypt strings using a public key contained in an X509 certificate using Delphi 10.3 and OpenSSL. The certificate is already loaded in memory using the BIO routines:
var
ptrX509: pX509;
...
- 481
4
votes
1
answer
178
views
Difference in flushing behavior in OpenSSL and Apple Secure Transport
I'm a volunteer for The Tor Project contributing to Arti (a Rust implementation for Tor).
In this project we implement Rust crates native-tls and tokio-native-tls. We encounter a very persistent issue ...
- 1,683
1
vote
0
answers
63
views
Why does a PKCS12 truststore generated with OpenSSL (-nokeys) not work in Java, but keytool-generated one does?
I am trying to configure SSL in my Java (Thrift) client. (mTLS)
I need a truststore that contains my CA certificate, so that the client can trust the server certificate.
First I'm try to use openssl ...
- 21
0
votes
0
answers
37
views
OpenSSL loading fips.dll from two separate location in same exe
I have App.exe that loads A.dll & B.dll. A.dll loads fips.dll from space c:/App/A/fips.dll B.dll loads Fips.dll from space c:/App/B/fips.dll. I see App.exe is loading both fips.dll from both ...
1
vote
1
answer
121
views
How to close a Python TLS 1.3 socket cleanly (send close_notify) without unwrap()?
I’m starting with Python and I’m trying to make a simple TLS 1.3 socket, but I’m having an issue.
When the session is closed, I get a TLS error :
Alert (Level: Fatal, Description: Decode Error)
Which ...
- 21
0
votes
0
answers
105
views
Using SSL certificate failed with OpenSSL error - ca md too weak. .NET 9 Docker
From MacOS everything is fine, but in docker exceptions is thrown
Unhandled exception occurred
System.Net.Http.HttpRequestException: The SSL connection could not be established, see inner ...
-1
votes
1
answer
153
views
Calling PEM_read_PrivateKey causes program to crash in OpenSSL 3.x
I call PEM_read_PrivateKey to read the private key using the following code, however after calling PEM_read_PrivateKey the program crashes (exists with error code 1) on Windows 11.
std::string pem = ...
- 1,349
0
votes
0
answers
114
views
Python library dependency issue when trying to upgrade openssl due to Cryptography
I want to upgrade to the latest OpenSSL package 3.5.1 in a Miniconda Python virtual environment in CentOS OS. So I tried the below command:
conda update openssl
output for the above cmd:
conda update ...
- 99
0
votes
0
answers
51
views
SSL: A super strange question：'error:1408F10B:SSL routines:ssl3_get_record:wrong version number'
I encountered a strange SSL issue that is completely different from common problems. I have consulted a lot of information, and almost all of the errors are caused by SSL version mismatch or HTTPS ...
- 33
1
vote
1
answer
218
views
Why WebTransport cannot connect to my server?
When I'm trying to make a simple QUIC connection via new WebTransport('https://localhost') this request never reaches my server and immediately terminating in Chrome with Failed to establish a ...
0
votes
0
answers
64
views
Unable to load tcnatve openssl in native image
I have a Spring Boot webflux app, running Netty. When enabling SSL performance hurts more than expected, and I want to check if using native OpenSSL (netty-tcnative) helps.
I think I have everything ...
- 1
0
votes
0
answers
104
views
How to create a x509 certificate without Subject name but with Subject Alternative Name?
I read that a machine certificate can be created without a subject name if it has a subject alternative name. My use case is to generate such a certificate and use it for certificate chain ...
1
vote
1
answer
100
views
python can't connect, but openssl can
I am trying to connect to a legacy (windows server 2008R2) server using python / winrm. I am seeing an issue where openssl can establish the ssl socket cleanly, but python and winrm can't. I am ...
- 16k
0
votes
0
answers
38
views
Openssl 1.1.1k build failures while building client code using libssl.so object
Compiler : gcc-toolset-9
OS : 5.15.0-306.177.4.el8uek.aarch64 (Centos 8) ARM
Version : Openssl 1.1.1k
Build Issue : Yes
This is not a build issue with openssl source itself but when we are using built ...
-1
votes
1
answer
86
views
OpenSSL x509 certificate chain verification fails with error 53
I have three certificates, rootca.pem, intermediate.pem and VPN_Client_Test_Certificate.pem. OpenSSL verification fails with error 53. Not sure what syntax error is happening. Kindly help. Certs are ...
0
votes
0
answers
43
views
Running openssl on multiple files located within multiple directories
My controller runs a fetch that reaches out to 500 hosts and retries a cert-status-request (CSR) and puts them in directories named for the host the CSRs came from. How can I run the openssl command ...
