加密程序库 OpenSSL
openkk 13年前
<div id="p_fullcontent" class="detail"> <p>OpenSSL包含一个命令行工具用来完成OpenSSL库中的所有功能,更好的是,它可能已经安装到你的系统中了。</p> <p>OpenSSL是一个强大的安全套接字层密码库,Apache使用它加密HTTPS,OpenSSH使用它加密SSH,但是,你不应该只将其作为一个库来使用,它还是一个多用途的、跨平台的密码工具。</p> <p>OpenSSL有许多的特征,而且还有SSL客户端和服务端特征,OpenSSL还有: <br /> <br /> ◆美国联邦政府NIST FIPS 140-2一级评估确认 <br /> ◆TLS,下一代SSL协议 <br /> ◆X.509密钥和证书的生成 <br /> ◆X.509证书权力 <br /> ◆S/MIME加密 <br /> ◆文件加密和粉碎 <br /> ◆打乱UNIX密码 <br /> ◆9个不同的商业密码<span class="article">硬件</span>设备 <br /> ◆密码性能测试 <br /> ◆36个命令 <br /> ◆6个消息摘要算法 <br /> ◆9个密码算法 <br /> ◆多个加密协议</p> <p>OpenSSL 1.0.0e 发布,更新如下;</p> <blockquote> <p>Initialization of X509_STORE_CTX was fixed to eliminate a case where CRLs with "nextUpdate" in the past were sometimes accepted. (This was reported as CVE-2011-3207.) An error in SSL memory handling for (EC)DH ciphersuites was fixed (CVE-2011-3210). A memory leak on bad inputs to x509_name_ex_d2i was fixed. Some ECC ciphersuites are no longer restricted to SHA1. Protection against ECDSA timing attacks was introduced.</p> </blockquote> 项目地址: <a href="/misc/goto?guid=4958189461960025895" target="_blank">http://www.openssl.org/<br /> </a> <p> </p> </div>