Install OpenSSL on Microsoft Windows 10/11

If you want to use OpenSSL on Microsoft Windows, there are a number of packages provided that allow you to do this, in this example we’ll use Shinning Light Production’s OpenSSL MSI Package. Step 1 – Download and Install OpenSSL Download the installer from: https://slproweb.com/products/Win32OpenSSL.html, I used Win64 OpenSSL v3.3.3 Light, but there may be … Read more

SSH Legacy Key Algorithms

Sometimes you have some kit that is just old and isn’t supporting the recent (and secure) key algorithms. If you connect from a client without the correct set of ciphers available, so the client and the server can come to some agreement on a mutually supported cipher set, you’ll see an error such as: If … Read more

SSLScan for Website SSL Diagnostics

Had an issue where we had a client that couldn’t access a particular site, in this case we wanted to determine what encryption ciphers a particular website was offering on its HTTPS server, SSLScan which is a Linux tool available on Ubuntu and other distributions can help, for example:

Firefox: SSL_ERROR_UNSUPPORTED_VERSION

Although you shouldn’t be working around certificates which are very old or no longer meet modern standards e.g. TLS 1.3 etc. if like me you need to access something using TLS 1, you can use Firefox and change the configuration. Use the URL: about:config Then set: security.tls.version.min (from 2/3 to 1), then attempt to access … Read more