Ubuntu Security :: Compiling Programs Using OpenSSL Libraries
Mar 30, 2010I tried to compile C program that uses Openssl libraries on shell but got this error. I guess libraries are not linked properly.
undefined reference to SSL_library_init()
I tried to compile C program that uses Openssl libraries on shell but got this error. I guess libraries are not linked properly.
undefined reference to SSL_library_init()
I'm on F13 and I'm trying to compile a package from the source. The package is delasa (www.dalesa.lk) and when I ./configure. I get 'configure: error: openssl development libraries not found'. This is the output of 'yum search openssl | grep dev'
openssl-devel.i686 : Files for development of applications which will use
globus-gsi-openssl-error-devel.i686 : Globus Toolkit - Globus OpenSSL Error
globus-openssl-devel.i686 : Globus Toolkit - Openssl Library Development Files
globus-openssl-module-devel.i686 : Globus Toolkit - Globus OpenSSL Module
[Code]....
i ve been trying to compile rtorrent from source and while configuring i run to this: Code: checking for OPENSSL. configure: error: Package requirements (openssl) were not met: No package 'openssl' found Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables OPENSSL_CFLAGS and OPENSSL_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. i tried to install openssl and than i came up to this:
[Code]....
what system variables should I set to what and what options do I pass to ./configure so it builds and install libraries in */lib64 come on a 64bit system should be native 64bit not guest 64bit the guest should be 32bit as in /lib32 for multilib
View 8 Replies View RelatedI'm compiling a project that uses boost libraries (1.45.0) for a MIPS target, and when trying to compile with bjam I get the following error:
Code:
libboost_system-mt.a(error_code.o): In function `(anonymous namespace)::generic_error_category::message(int) const':
error_code.cpp:(.text+0x55c): undefined reference to `__glibc_strerror_r'
collect2: ld returned 1 exit status
Basically, I'm trying to compile program A, which depends on LibA and LibB. LibA would not build with my version of G++ 4.4.3 due to a bug, so I've compiled the latest G++ 4.5 (installed in /opt directory) and built that library successfully (also installed in /opt).
I have LibB on my system already, but it was built with the 4.4.3 version. When compiling my final program, am I going to have issues because the .so files were built with different versions of gcc/g++? Or should I just rebuild a special version of LibB with the later version of the compiler just for that program? I can proceed and just see what happens, but I'm a little confused about how things work in a situation like this.
i have a encrypted file using .aes256. I'm trying to decrypt but it fails. This is the command i used
Quote: openssl enc -d -aes256 -in insurance.aes256 > /media/DATA/out.dec And here's the error:Quote: enter aes-256-cbc decryption password: bad decrypt13930:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:330:
i need to know more about openssl.In particular i'm having problems with some basic coammand-line stuff to do with signing and base64 encoding.You'll have to excuse me but i'm a security n00b. What is the command for signing some text file with a given private key and then after that base64 encoding the same file.Can this be done with a single command? what's wrong with:
Code:
openssl rsautl -sign -in textfile -inkey privatekey.pem enc -base64 -in textfile
or should that be:
Code:
openssl rsautl -sign -in textfile -inkey privatekey.pem | openssl enc -base64 -
I just installed it by following steps in [URL]
but when I run "msfconsole", I got the following error messages telling me that ruby-openssl is not installed. I installed it "apt-get install libopenssl-ruby" but same message still comes again. I'm running Ubuntu 9.10.
root@qa-ud910-32-1:/opt/metasploit3/msf3/external/ruby-lorcon2# msfconsole
*** The ruby-openssl library is not installed, many features will be disabled!
*** Examples: Meterpreter, SSL Sockets, SMB/NTLM Authentication, and more
[-] ***
[Code]....
As title says, running unetbootin throws this error [URL]...... I can easily find the files myself (go to synaptic > look at installed files > scroll down) and I can't remove/purge because they would require me to remove some important software (XFCE).
FIX: Required some more 32 libraries.
so i've just been sitting here, compiling and running some c++ programs (with g++ from the terminal), I looked away for one minute to open a file that had just been written out (opened it with gedit if that makes a difference), now my terminal says:kbuildsyscoca4 running...so I'm wondering if anyone knows what this is about?hy it suddenly started running and why it has appeared on my terminal. I'm basically just curious as I though bash shells were entirely separate virtualizations of shells, and unrepresentative of other processes. i'm also wondering what kbuildsyscoca4 is/does (i've got gnome going on and generally gnome varieties of programs). I found a post from about a year ago mentioning the same thing, though no replies.
View 1 Replies View RelatedWhen I do a "openssl x509 -in server1.pem -issuer -noout" after I've supposedly signed it with the CA, the issuer is, for some reason, the DN string of server1. If server1 generated the CSR, and it is coming up as issued by server1, doesn't that indicate a self signed cert? How could the CA be producing a cert that has an issuer of another server? Am I just completely off base? Sorry, I'm a bit of a newb with the SSL pieces.
I hope this is the right place for this, but I'm having some difficulty using the java keytool and OpenSSL tool on a Solaris system.
I have a server (CA server) with OpenSSL installed that I would like to use as a Certificate Authority. The second server (server1) is a WebLogic server with JDK 1.6.0_21. I'm trying to configure it to use a certificate that has been signed by server1.
For some reason it keeps giving me this error when I try to import the signed SSL certificate: keytool error: java.lang.Exception: Public keys in reply and keystore don't match
Am I doing something wrong in this whole process?
1) Generate the Private Key for the CA server
openssl genrsa -out CA.key -des 2048
2) Generate the CSR on the CA
openssl req -new -key CA.key -out CA.csr
3) Sign the new CSR so that it can be used as the root certificate openssl x509 -extensions v3_ca -trustout -signkey CA.key -days 730 -req -in CA.csr -out CA.pem -extfile /usr/local/ssl/openssl.cnf
4) On server1, create Server Private Key KeyStore keytool -genkey -alias server1 -keysize 2048 -keyalg RSA keystore server1.jks -dname "CN=server1.domain.com,OU=Organization,O=Company,L=City,ST=State,C=US"
5) On server1, create a CSR from the recently created Private Key
keytool -certreq -alias server1 -sigalg SHA1WithRSA -keystore server1.jks -file server1.csr
6) Transfer the CSR over to the CA (server1) so that it can be signed openssl x509 -extensions v3_ca -trustout -signkey CA.key -days 365 -req -in server1.csr -out server1.pem -extfile /usr/local/ssl/openssl.cnf
7) Transfer CA Public Cert to server1 and Import into keytool keytool -import -trustcacerts -alias CA_Public -file CA.pem -keystore server1.jks
8) Import recently signed CSR to app server keystore (This is where I receive the error) keytool -import -trustcacerts -alias server1 -file server1.pem -keystore server1.jks
Quote: Security expert Georgi Guninski has pointed out a security issue in the 1.0 branch of OpenSSL that potentially allows SSL servers to compromise clients. Apparently the hole can be exploited simply by sending a specially crafted certificate to the client, causing deallocated memory to be accessed in the ssl3_get_key_exchange function (in ssls3_clnt.c). While this usually only causes an application to crash, it can potentially also be exploited to execute injected code.
View 1 Replies View RelatedI am new to C programming and I need a way to compile and run my code. I've made a little research and I found that eclipse is a nice IDE. But I don't know how to configure it and generally. What do I need to download and install to make it work. I've also tried downloading easy eclipse that doesn't need any configuration or extra files but the link on the site was broken. Is there any other C IDE like easy eclipse available?
View 5 Replies View RelatedI am trying to study gtk programming and get stucked before some errors in compiling them. Iam using ubuntu 9.10 and i didnt installed any additional libraries or packages for running these gtk programs assuming gtk is already installed in ubuntu. I am newbie to gtk I tried compiling some example programs from my tutorial and it ended up in errors. So do I need any additional packages to run these programs.when compiling it shows package config cannot find any gtk+-2.0 packages and to try specifying .pc in environment path. I don't know how to set these path stuff.
View 1 Replies View RelatedI am doing my project which detects and displays the error message along line number when compiling c programs under Linux. Using gcc command..cc command which we generally use. For which my program must act as a compiler and generate error messages when user program is written and compiled. My idea was to develop a shell script program using name suppose ncc that would be..
$ vi ncc.sh
echo "compiling program $1"
$cc MyPgm.c
$.a/.out
<esc>
:wq
Now user program pgm1.c can be compiled using
$ sh ncc.sh pgm1.c
This will invoke my compiler program. But the thing is how to pass user program pgm1.c as input to my compiler program...
I want to compile program. "./configure" giving :
Code:
[kuba@Kuba-fedora uget-1.8.0]$ ./configure
checking for a BSD-compatible install... /usr/bin/install -c
checking whether build environment is sane... yes
checking for a thread-safe mkdir -p... /bin/mkdir -p
checking for gawk... gawk
checking whether make sets $(MAKE)... yes
checking for style of include used by make... GNU
checking for gcc... gcc
checking whether the C compiler works... yes
checking for C compiler default output file name... a.out
checking for suffix of executable .....
Configure: error: Package requirements (libnotify) were not met:
No package 'libnotify' found
Consider adjusting the PKG_CONFIG_PATH environment variable if you installed software in a non-standard prefix. Alternatively, you may set the environment variables LIBNOTIFY_CFLAGS
and LIBNOTIFY_LIBS to avoid the need to call pkg-config. See the pkg-config man page for more details. But I have the newest version of libnotify.
I'm trying to compile programs under Solaris in my Home directory.
Ive had experience with simple installs which work with just
But with more involved programs, with dependencies on special libraries, how do I have the system look into my home directory for these? and how would I compile them into my home dir?
I am new to Slackware and I am wondering how you set the ARCH variable. On the multilib wiki page it says:
"Rather than editing the script and change/remove CFLAGS definitions, you can set the ARCH to 'x86_64' and save yourself some time."
So from this I understand that they advise against editing the Slackbuild script. How do I set the ARCH variable on the command line or is it a configuration file I need to edit? I am running Slackware 13.1 64.
# Filename: makefile2
# Usage: make-f makefile2
# Description: Maintains all the dependencies between modules using the
# Agenda1.
CC=g++
CFLAGS=-c -Wall
LDFLAGS=
SOURCE_MODULES=main.cpp factorial.cpp hello.cpp
OBJECT_MODULES=$(SOURCE_MODULES:.cpp=.o)
EXECUTABLE=programa1
all: $(OBJECT_MODULES) $(EXECUTABLE)
$(EXECUTABLE): $(OBJECT_MODULES)
$(CC) $(LDFLAGS) $^ -o $@
.o: .cpp
$(CC) $(CFLAGS) $< -o $@
I am suppose to explain the dependencies that exist and each of the following lines of makefile. Lists orders to be executed as a result of running the make utility on it.
I'm trying to get my head around compiling programs, and need some things clarified. Can anyone confirm or deny my understanding so far:
1) Program is written in high level language, such as C. File(s) of the program are the 'source code'.
2) Program is then 'compiled' to turn it into low-level code that is both hardware - i.e. Intel/AMD/ARM processor specific, and also Linux distribution specific. This resulting files are called the binaries.
3) I can go from source code to installed and usable program by doing these steps:
./configure
make
make install
I am trying to write modular program but when I try to compile I come to know I don't have any files in /usr/src/linux. I have installed fedora 12 which has 2.6.31.5-127.fc12.i686.PAE. I am including in my code:
linux/kernel.h
linux/module.h
Those are not present directory in /usr/src/linux is not present. My goal is to compile modular programs.
Why many Linux distros are trying to use always the latest versions of the libraries and don't save the old libraries for compatibility? I mean, I can see libtiff for example, i can found a libtiff.so.5 on my /usr/lib, but doesn't store a libtiff.so.4 or 3 just for binary applications or games. For this example, I need libtiff.so.4 for uplink.
That should happen too on the old version of sims for linux, some ID games or others.What's wrong with storing old libraries? PD: Yay, my first post on 3 years!
I recently installed mplayer I compiled from svn, and now Ubuntu's package manager is showing security patches. If I install these patches, will it mess up the version I compiled and installed?
View 5 Replies View RelatedAfter reading Bodhi's Ubuntu security sticky, I removed the links between WINE and the various folders. However, I've lost the menu items for my programs.
The menu no longer has MS Office in there and the only way to launch these is to do into .wine and launch it from there.
How can I bring back these links?
Is there any way to use a dynamic libraries as a static libraries instead when compiling, so that my resulting executable won't have them as dependencies?
View 3 Replies View RelatedHow do you open a program, in this instance "Zenmap", from the desktop in a user account when it requires root privileges? Is there a way to be prompted for the password, the same way, for instance, you're prompted when mounting a new file system or making a change to the system? I tried entering 'sudo /usr/bin/zenmap' when creating the shortcut, however that didn't work.
View 3 Replies View RelatedI used my printer without any problems using ubuntu os. As the day went surfing got slower. I lost ability to print. Went into windows os, which I haven't used for a few day, and scanned with superantispyware. A Trojan virus was found. Went back to ubuntu os and found that all printer programs had been removed.
View 9 Replies View RelatedI have ubuntu 11.04 installed along side windows. And I often share files with windows computers. If I am installing a new package from ubuntu software center, and consquently I have to log in as root to do so, which means I have given the system 'privileges' as the program is being installed, I decide to go open mozilla, and surf suspicious sites on the net. Is it possible in that case for me to get a virus?
When we enter the password for the root user in order to run one program such as ubuntu software center, does that mean that all programs have root privileges for the time being (as the software center is installing the program)?
What the most harmful thing can malware program started as separate limited user account do if it has access to the X server? Network and filesystem things are already considered by chroot and netfilter.
It obviously can lock the screen and I will need to switch to other vt and kill it manually. Can it for example disrupt other GUI programs on the same X server (access a root terminal in nearby window)?
I know that it is safer to run it in separate X server, for example, in Xtightvnc or even some virtual machine, but how dangerous is to just run it like other programs?