Openssl Unsupported


Officially UNSUPPORTED. Make sure the system is clean, secure, and patched with the latest updates and security fixes. Authorization from your department head naming you as a departmental OnGuard administrator. OpenVPN error=unsupported certificate purpose – mentallurg Aug 30 '20 at 15:29 @SteffenUllrich, agreed, this might be more helpful. After creating a new 'throw-away' certificate chain (without my personal stuff, OCSP, CRL, etc.) to publish here I found everything working with these certificates. SSL failed Unsupported OpenSSL version (0x0090812F) Hi guys - Maybe a long shot - Have tried to update a long standing website - But cannot load new changes - I get message below. It appears to be the FTP module with SSL version that needs updating. Create the OpenSSL Private Key and CSR with OpenSSL. 2 openssl commands in series openssl genrsa -out srvr1-example-com-2048.key 4096 openssl req -new -out srvr1-example-com-2048.csr -key srvr1-example-com-2048.key -config openssl-san.cnf; Check multiple SANs in your CSR with OpenSSL. The openssl command openssl req -text -noout -in. I'm trying to export a private key from a pfx-file using OpenSSL: openssl pkcs12 -in C: tmp pfxfile.pfx -nocerts -nodes -out C: tmp prvkey.pem I get the prompt to enter the password: Enter Import.

Subject Alternative Names are a X509 Version 3 (RFC 2459) extension to allow an SSL certificate to specify multiple names that the certificate should match. SubjectAltName can contain email addresses, IP addresses, regular DNS host names, etc. There’s a clean enough list of browser compatibility here.

Changing /etc/ssl/openssl.cnf isn’t too hard. Although most the documentation is hard to grasp, especially if you’re only trying to make requests. From this, I developed these changes to a standard config provided by debian/ubuntu. Edit openssl.cnf and uncomment “x509_extensions = v3_ca” in the [ req ] section.

Annoyingly, nobody appears to have figured out how to get openssl to ask you for this value.

Openssl Unsupported

I thought I was clever putting ‘subjectAltName=email:move’ in the v3_req section, which would put the email address you type in the subjectAltName field. I’d put in “[email protected],,” in the email field when ‘openssl req’ asked for it. Visually it worked, but the browsers didn’t like it. This appears to be functionality to deal with part of the RFC, moving email address into subjectAltName.

I thought about writing a script that would copy openssl.cnf, ask me for the value of SubjectAltName, run sed against it, then start openssl. It would appear seamless, but of course be a hack.

A better answer lies here, you can configure openssl to use environment variables. At the top of openssl.cnf under where it set’s HOME=”…” I added

And in [ v3_req ] I added:

So if you run openssl like this:

It will fill in subjectAltName with the contents of the SAN variable, otherwise will fill it with the contents specified at the top of the file. There’s no way to use conditionals (I assume).If you just leave it blank, or leave it out altogether, you get these errors:

and respectively,

Your Python installation does not support SSL? You need to compile it again after editing Setup.dist file located in the Python source directory. Let’s see how to do that.

Openssl Unsupported Arm Architecture

Before we begin, check if your existing Python installation supports OpenSSL as shown below:

In the python prompt, type ‘import ssl’

Psql Ssl Required

If you see error as below, then Python does not support SSL.

Note: In older versions of Python, you may try using ‘hasattr‘ function as shown below:

If you see “False“, then Python does not support SSL.

How to Compile Python from source with OpenSSL Support


OpenSSL should have been installed by default, but if you don’t have one, install it as shown below.

Install OpenSSL and its development packages as below:


Install OpenSSL from source:

Note: By default openssl will be installed under /usr/local/ssl. If you do not want to mess with existing SSL installation, then install it in a different directory.

OpenSSL installation is done. Let’s us now compile Python.

Download Python source:

Search for “SSL” and uncomment the code as shown below (in version 3.5, from line 203 to 210):

Note: In case, if you had installed OpenSSL in a non-standard location, then you need to change ‘SSL‘ to refer the correct path in the above code.

For e.g,

Once done,

Check Python for OpenSSL Support

In python prompt, type “import ssl

If you don’t see any error, then Python supports SSL. That’s it!

Updated on September 2, 2017TagTagged: LinuxpythonUnsupported

Was this article helpful?

I love bugs and I love fixing them!

Related Articles

pip freeze returns an error: Permission denied: hg[Ubuntu]: configure: Torque needs Boost, but it was not found on your system[PBS]: configure: error: TORQUE needs libxml2-devel in order to buildFix broken sudoers file – sudo: parse error in /etc/sudoers near line 21 [Ubuntu]Recover deleted files in Git [With example commands]How to Duplicate a Git Repository or Mirror a Repository