OpenSSL
Sign in to saveOpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end. It is widely used by Internet servers, including the majority of HTTPS websites.
Key facts
- Software.name
- OpenSSL
- Software.logo
- OpenSSL logo.svg
- Software.screenshot
- UEFI Secure Boot DB certificate.png
- Software.caption
- openssl showing a X.509 certificate for UEFI Secure Boot
- Software.developer
- The OpenSSL Project
- Software.programming language
- C, Assembly, Perl
- Software.genre
- Cryptography library
- Software.license
- 3.0 and later: Apache-2.01.x and earlier: OpenSSL
via Wikipedia infobox
Wikidata facts
- Instance of
- utility software
- Based on
- SSLeay
- Official website
- openssl-library.org
- Image
- UEFI Secure Boot DB certificate.png
- Significant event
- Heartbleed
- Has use
- cryptography
Show 15 more facts
- implementation of
- Transport Layer Security
- software version identifier
- 4.0.0
- programmed in
- Perl
- operating system
- GNU/Linux
- described at URL
- www.feistyduck.com/books/openssl-cookbook
- software quality assurance
- continuous integration
- Stack Exchange tag
- unix.stackexchange.com/tags/openssl
- issue tracker URL
- github.com/openssl/openssl/issues
- user manual URL
- docs.openssl.org/master
- Commons category
- OpenSSL
- source code repository URL
- git://git.openssl.org/openssl.git
- different from
- OpenSSH
- replaces
- SSLeay
- mailing list archive URL
- mta.openssl.org/pipermail/openssl-announce
- inception
- 1998-00-00
Sources (15)
via Wikidata · CC0
~22 min read
Encyclopedic overview
30 sectionsContents
- Project history
- Major version releases
- Algorithms
- FIPS 140 validation
- Licensing
- Notable vulnerabilities
- Denial of service (DOS): ASN.1 parsing
- OCSP stapling vulnerability
- ASN.1 BIO vulnerability
- SSL, TLS and DTLS plaintext recovery attack
- Predictable private keys (Debian-specific)
- {{anchor|Heartbleed bug}}Heartbleed
- {{anchor|CVE-2014-0224}}CCS injection vulnerability
- {{anchor|CVE-2015-0291}}ClientHello sigalgs DoS
- {{anchor|CVE-2016-0701}}Key recovery attack on Diffie–Hellman small subgroups
- Forks
- {{Anchor|assl}}Agglomerated SSL
- LibreSSL
- {{Anchor|BORINGSSL}}BoringSSL
- {{Anchor|AWS-LC}}AWS-LC
- {{Anchor|QuicTLS}}QuicTLS
- Criticisms
- Backwards compatibility
- Delay between releases
- Significant performance regressions
- Consideration for users' requirements
- See also
- Notes
- References
- External links
OpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end. It is widely used by Internet servers, including the majority of HTTPS websites.
OpenSSL contains an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements basic cryptographic functions and provides various utility functions. Wrappers allowing the use of the OpenSSL library in a variety of computer languages are available.
Excerpted from Wikipedia’s “OpenSSL” article, available under the CC BY-SA 4.0 licence.