Compile 32-bit Openssl 64 bit system

I had to compile a 32-bit version of openssl at a 64-bit server today. Took me a while to figure it out but you simple must use the configure script when you compile 32-bit at 64-bit. Example:

./Configure no-zlib no-krb5 enable-tlsext shared -m32 linux-generic32 --prefix=/home/peter/32bitopenssl-install

Converting .p12 file to a pem

In some cases you want to convert p12 certificate files (PingFederate uses p12 files for example) to PEM files instead. This is easily done with openssl commands:

Certificate conversion:
$ openssl pkcs12 -in certificateandkey.p12 -out server.crt -clcerts -nokeys -passin pass:YourSecretPassword
MAC verified OK

Key conversion:
$ openssl pkcs12 -in certificateandkey.p12 -out server.key -nocerts -nodes -passin pass:YourSecretPassword
MAC verified OK

Done!

Openssl, recompile with -fPIC

Today I got the following error when compiling Openssl 1.0.2d:

/usr/bin/ld: libcrypto.a(x86_64-gcc.o): relocation R_X86_64_32 against `a local symbol' can not be used when making a shared object; recompile with -fPIC

I simple solved this by compiling openssl this way:

./config -fPIC shared no-zlib no-krb5 no-mdc2 shared enable-tlsext --prefix=/usr/local/openssl-1.0.2d

However, important to make clean before compiling again.

Getting D-Link DWA-525 RT5360 working in Ubuntu 14.04, 14.10 and 15.04

I have been struggling a while with getting my D-Link DWA-525 with the chipset RT5360 working.

After quite a bite of investigation I found that there are many links to a ralink website where you should be able to download drivers and compile. However, you can no longer download that driver from the site. Thankfully there is now support for this device in Ubuntu with the rt2800pci module.

However, neither Ubuntu 14.04, 14.10 and 15.04 managed to get the wireless network up and running after the installation.

So I was have to do the following below. I have been running this solution for a couple of days and I find it stable.

iwconfig wlan0 power off

modprobe rt2800pci

wpa_passphrase wirelessnetwork password >> /etc/wpa_supplicant.conf

After that I edited the file and added some lines:

vi /etc/wpa_supplicant.conf

ctrl_interface=/var/run/wpa_supplicant

network={
        ssid="wirelessnetwork"
        scan_ssid=1
        proto=RSN
        key_mgmt=WPA-PSK
        pairwise=CCMP
        group=CCMP
         psk=a37cd5be4e6d5215d467d08e6bc08b6d179195ec973e8f23c8bbbfa000f8b768
}

wpa_supplicant -i wlan0 -c/etc/wpa_supplicant.conf -B

dhclient wlan0

ifconfig wlan0

wlan0     Link encap:Ethernet  HWaddr c8:be:19:14:70:25
          inet addr:192.168.1.187  Bcast:192.168.1.255  Mask:255.255.255.0
          inet6 addr: fe80::cabe:19ff:fe04:7025/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:3434 errors:0 dropped:32 overruns:0 frame:0
          TX packets:4544 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000
          RX bytes:7621658097 (0.1 GB)  TX bytes:1280056191 (0.1 GB)

Connect to a SSL protected site with openssl using tls

Since many have started removing SSLv3 many now receive this error when connecting to SSL sites using openssl:

# openssl s_client -connect www..example.com:443
CONNECTED(00000003)
25370:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

This is easily solved by forcing openssl to use tls instead:

# openssl s_client -connect www.example.com:443 -tls1