Keeping OpenSSL up to date is essential for security and for compatibility with the software that depends on it. This guide shows you how to check your OpenSSL version on Linux, Windows, and macOS, how to read the output, and how to update to the latest release.
OpenSSL is a widely used open-source toolkit for SSL/TLS. On Ubuntu it lets you manage SSL certificates, generate keys and CSRs, and enable encrypted communication. This guide shows you how to install OpenSSL on Ubuntu (via the package manager, from source, or in Docker) and how to fix common issues.
Installing OpenSSL on Windows lets developers and administrators use its encryption tools to generate keys and CSRs, inspect certificates, and secure data. This guide shows you how to install OpenSSL on Windows, add it to your PATH, verify it, and fix the issues that most often come up.
ERR_SSL_UNRECOGNIZED_NAME_ALERT is one of the few SSL errors that has nothing to do with your certificate. The connection fails so early that no certificate is ever examined, which is why the usual checklist of expiry dates, certificate authorities, and browser trust stores leads nowhere. This guide explains what the server is actually reporting when it […]
ERR_BAD_SSL_CLIENT_AUTH_CERT is one of the few Chrome errors that is about your certificate, not the website’s. Most SSL warnings appear because something is wrong with the certificate a server presents to you. This one appears because the server asked your browser to prove who it is, and the certificate your browser offered was missing, expired, […]
“Your connection is not private” is not an error. It is a screen. Chrome puts it in front of roughly a dozen different failures, and the only thing that identifies yours is a short line of grey text in the middle of the page, printed in capitals and smaller than everything around it.
SSL_ERROR_NO_CYPHER_OVERLAP is the message Firefox shows when it cannot complete a TLS handshake with a website. The page never loads, and the error points at cipher suites, the algorithms a browser and a server use to encrypt a connection between them. The name only tells half the story. Firefox reports this error in several situations […]
ERR_SSL_BAD_RECORD_MAC_ALERT is one of the less common Chrome SSL errors, and one of the most misread. It carries the letters “SSL”, so most troubleshooting guides treat it as a certificate problem. It is not one. By the time this error appears, the certificate has already been presented, checked, and accepted, and the connection is already […]
A code signing order placed against a YubiKey 5 FIPS you already own does not just need a CSR. It needs proof that the private key behind that CSR was created inside the token and has never existed anywhere else. That proof is the attestation package, and it is the part most people get wrong. […]
Your Certificate Authority has finished validation and sent you the issued code signing certificate. The private key never left your YubiKey 5 FIPS, and it never will. What is left is a small but easy to get wrong step: writing that certificate into the same PIV slot that holds the key which signed your Certificate […]
