#openssl

[cyber-sec]

Dozen Hidden Flaws Found in OpenSSL

Researchers uncovered 12 previously unknown OpenSSL vulnerabilities, some buried in decades-old code, all fixed in a coordinated January release.

Source: AISLE

Read more: CyberSecBrief

[nixcraft]

Want to check TLS/SSL certificate expiration date from #Linux, macOS or UNIX command line? Try:

DOM="your-www-domain-name-here" PORT="443" echo | openssl s_client -servername "$DOM" -connect "$DOM:$PORT" | openssl x509 -noout -dates

-> See: How to check TLS/SSL certificate expiration date from command-line

[zzkt]

[df-h]

OpenSSL + GOST-engine

Debian 9:

echo “deb http://deb.debian.org/debian unstable main“ >> /etc/apt/sources.list

apt update

apt-get install openssl libssl-dev -t unstable -y

git clone https://github.com/gost-engine/engine

cd engine/

cmake . -DOPENSSL_ENGINES_DIR=`openssl version -e | awk '{print $2}' | sed 's/\"//g'`

make && make install

apt install curl

[socialtakeho]

PHPのTLS脆弱性でサイト停止の恐れ　CVE-2026-12184の影響と今すぐ確認すべき対策

https://blog.takeho.com/6nngoygijsmtalqzonbspu0u3humfl47/

PHPのTLS脆弱性でサイト停止の恐れ　CVE-2026-12184の影響と今すぐ確認すべき対策

PHPを利用してWebサイトや業務システムを運用している企業は、稼働中のバージョンを早急に確認する必要があります。 PHPのTLS通信処理に、外部のHTTPSサーバーとの接続失敗をきっかけとしてPHPプロセスが異常終了す […]

[myzanilred]

I'm going to have to sink my teeth into openssl. Not only do I need the hash algorithms, I also need TLS and certificate handling for when I get to the peering protocol that my BBS will use for federation.

After what notcurses has put me through, I actually look forward to working with something written and maintained somewhat competently, with real documentation.

The question is, do I dare consider using QUIC for the peering protocol?

[it4intserversworld]

iT4iNT SERVER ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ Stories http://dlvr.it/TR36Tx VDS VPS Cloud

[my-hostperl]

How to Fix SSL Handshake Failed Error - Hostperl

Learn what causes the SSL Handshake Failed error and how we fix it using verified OpenSSL commands, TLS checks, and certificate validation.