ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
OpenSSL 3.x moved algorithms into pluggable providers, which is why MD4 and Blowfish suddenly vanish after an upgrade. Here's how the provider model works, how to configure it, and how to verify what's loaded.
Enable FIPS 140-2 validated cryptography on Rocky Linux 9 by installing dracut-fips, rebuilding the initramfs, adding fips=1 to GRUB, and verifying with /proc/sys/crypto/fips_enabled.
OpenSSL 3.x moved algorithms into loadable providers, so calls that worked under 1.1.1 can fail with 'unsupported' at runtime. Here's how the provider model works and how to fix the common breakage.
A technical guide on deciding when and how to enable FIPS 140-2 mode in AlmaLinux, including algorithm restrictions, implementation steps, and verification methods.
Stop leaking keys in config files. Learn how to use the Vault Transit engine to offload cryptographic operations, ensuring plaintext keys never leave your secure vault.
Learn how to replace vulnerable password-based SSH access with Ed25519 public key authentication to secure your remote servers and streamline management.
Learn how to use OpenSSL to extract public key fingerprints for TLS pinning, mitigating MitM attacks by bypassing the system trust store.
A technical guide on choosing between AES-GCM and AES-CBC in OpenSSL, comparing AEAD security, hardware performance, and the risks of nonce reuse versus padding oracles.
Key Exchange Negotiation Failure During the initial SSH handshake, the client and server must agree on a mutually supported key exchange (KEX) algorithm. If the intersection of the supported algorithm lists is empty, the connection is aborted before authentication occurs. This behavior is common when connecting modern OpenSSH clients (version 8.8 or 9.0+) to
openssl
rockylinux
ssh