Install OpenSSL on Microsoft Windows 10/11

If you want to use OpenSSL on Microsoft Windows, there are a number of packages provided that allow you to do this, in this example we’ll use Shinning Light Production’s OpenSSL MSI Package. Step 1 – Download and Install OpenSSL Download the installer from: https://slproweb.com/products/Win32OpenSSL.html, I used Win64 OpenSSL v3.3.3 Light, but there may be … Read more

SSH Legacy Key Algorithms

Sometimes you have some kit that is just old and isn’t supporting the recent (and secure) key algorithms, if you need to connect (with some consideration of the security implications) you can use something like the below. The “-v” means verbose, you can see when connecting what the end point is offering, then you can … Read more

SSLScan for Website SSL Diagnostics

Had an issue where we had a client that couldn’t access a particular site, in this case we wanted to determine what encryption ciphers a particular website was offering on its HTTPS server, SSLScan which is a Linux tool available on Ubuntu and other distributions can help, for example:

Firefox: SSL_ERROR_UNSUPPORTED_VERSION

Although you shouldn’t be working around certificates which are very old or no longer meet modern standards e.g. TLS 1.3 etc. if like me you need to access something using TLS 1, you can use Firefox and change the configuration. Use the URL: about:config Then set: security.tls.version.min (from 2/3 to 1), then attempt to access … Read more