Q1052790
Sign in to saveOpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end. It is widely used by Internet servers, including the majority of HTTPS websites.
Key facts
- Software.name
- OpenSSL
- Software.logo
- OpenSSL logo.svg
- Software.screenshot
- UEFI Secure Boot DB certificate.png
- Software.caption
- openssl showing a X.509 certificate for UEFI Secure Boot
- Software.developer
- The OpenSSL Project
- Software.programming language
- C, Assembly, Perl
- Software.genre
- Cryptography library
- Software.license
- 3.0 and later: Apache-2.01.x and earlier: OpenSSL
via Wikipedia infobox
Article
30 sectionsContents
- Project history
- Major version releases
- Algorithms
- FIPS 140 validation
- Licensing
- Notable vulnerabilities
- Denial of service (DOS): ASN.1 parsing
- OCSP stapling vulnerability
- ASN.1 BIO vulnerability
- SSL, TLS and DTLS plaintext recovery attack
- Predictable private keys (Debian-specific)
- {{anchor|Heartbleed bug}}Heartbleed
- {{anchor|CVE-2014-0224}}CCS injection vulnerability
- {{anchor|CVE-2015-0291}}ClientHello sigalgs DoS
- {{anchor|CVE-2016-0701}}Key recovery attack on Diffie–Hellman small subgroups
- Forks
- {{Anchor|assl}}Agglomerated SSL
- LibreSSL
- {{Anchor|BORINGSSL}}BoringSSL
- {{Anchor|AWS-LC}}AWS-LC
- {{Anchor|QuicTLS}}QuicTLS
- Criticisms
- Backwards compatibility
- Delay between releases
- Significant performance regressions
- Consideration for users' requirements
- See also
- Notes
- References
- External links
OpenSSL is a software library for applications that provide secure communications over computer networks against eavesdropping, and identify the party at the other end. It is widely used by Internet servers, including the majority of HTTPS websites.
OpenSSL contains an open-source implementation of the SSL and TLS protocols. The core library, written in the C programming language, implements basic cryptographic functions and provides various utility functions. Wrappers allowing the use of the OpenSSL library in a variety of computer languages are available.