2021년 2월 17일 (수) 08:17에 Pythagoras0님의 편집

2021-02-17T08:17:17Z

Pythagoras0: /* 메타데이터 */ 새 문단

2020-12-26T12:22:37Z

메타데이터: 새 문단

Pythagoras0: /* 노트 */ 새 문단

2020-12-21T09:45:21Z

노트: 새 문단

새 문서

== 노트 ==

===위키데이터===
* ID : [https://www.wikidata.org/wiki/Q1052790 Q1052790]
===말뭉치===
# The authors of OpenSSL are not liable for any violations you make here.<ref name="ref_a5b9ef87">[https://www.openssl.org/ index.html]</ref>
# SSL Checker can help you diagnose problems with your OpenSSL installation.<ref name="ref_2be25328">[https://www.whoishostingthis.com/compare/ssl-certificates/resources/ OpenSSL: Here’s What You Need To Know About SSL and TLS Now.]</ref>
# OpenSSL is one of the most popular SSL/TLS libraries for server-side web security, and it serves as the default "reference implementation" for the SSL protocol.<ref name="ref_2be25328" />
# The most important thing to know about OpenSSL is that it isn't perfect, and never will be.<ref name="ref_2be25328" />
# The one thing that you can do to best ensure your websites are safe is to keep your OpenSSL installation up to date.<ref name="ref_2be25328" />
# We designed this quick reference guide to help you understand the most common OpenSSL commands and how to use them.<ref name="ref_65f20e4a">[https://www.digicert.com/kb/ssl-support/openssl-quick-reference-guide.htm OpenSSL Quick Reference Guide]</ref>
# If you're looking for a more in-depth and comprehensive look at OpenSSL, we recommend you check out the OpenSSL Cookbook by Ivan Ristić.<ref name="ref_65f20e4a" />
# Checking Your OpenSSL Version Identifying which version of OpenSSL you are using is an important first step when preparing to generate a private key or CSR.<ref name="ref_65f20e4a" />
# Your version of OpenSSL dictates which cryptographic algorithms can be used when generating keys as well as which protocols are supported.<ref name="ref_65f20e4a" />
# OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the Transport Layer Security (TLS) protocol formerly known as the Secure Sockets Layer (SSL) protocol.<ref name="ref_17e3affa">[https://github.com/openssl/openssl openssl/openssl: TLS/SSL and crypto library]</ref>
# openssl the OpenSSL command line tool, a swiss army knife for cryptographic tasks, testing and analyzing.<ref name="ref_17e3affa" />
# However, for a large variety of operating systems precompiled versions of the OpenSSL toolkit are available.<ref name="ref_17e3affa" />
# The official OpenSSL Git Repository is located at git.openssl.org.<ref name="ref_17e3affa" />
# OpenSSL contains an open-source implementation of the SSL and TLS protocols.<ref name="ref_d9ca0db2">[https://en.wikipedia.org/wiki/OpenSSL Wikipedia]</ref>
# The OpenSSL Software Foundation (OSF) represents the OpenSSL project in most legal capacities including contributor license agreements, managing donations, and so on.<ref name="ref_d9ca0db2" />
# The OpenSSL project was founded in 1998 to provide a free set of encryption tools for the code used on the Internet.<ref name="ref_d9ca0db2" />
# An early FIPS 140-1 certificate for OpenSSL's FOM 1.0 was revoked in July 2006 "when questions were raised about the validated module's interaction with outside software.<ref name="ref_d9ca0db2" />
# This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit.<ref name="ref_20294d89">[https://slproweb.com/products/Win32OpenSSL.html Win32/Win64 OpenSSL Installer for Windows]</ref>
# ( The Win32/Win64 OpenSSL Installation Project is dedicated to providing a simple installation of OpenSSL for Microsoft Windows.<ref name="ref_20294d89" />
# Note that these are default builds of OpenSSL and subject to local and state laws.<ref name="ref_20294d89" />
# April 21, 2020 - All users and applications should be using the OpenSSL 1.1.1 (LTS) series at this point.<ref name="ref_20294d89" />
# Bug is in the OpenSSL's implementation of the TLS/DTLS (transport layer security protocols) heartbeat extension (RFC6520).<ref name="ref_bcbbe9ce">[https://heartbleed.com/ Heartbleed Bug]</ref>
# OpenSSL is the most popular open source cryptographic library and TLS (transport layer security) implementation used to encrypt traffic on the Internet.<ref name="ref_bcbbe9ce" />
# Your popular social site, your company's site, commerce site, hobby site, site you install software from or even sites run by your government might be using vulnerable OpenSSL.<ref name="ref_bcbbe9ce" />
# The most notable software using OpenSSL are the open source web servers like Apache and nginx.<ref name="ref_bcbbe9ce" />
# The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to endorse or promote products derived from this software without prior written permission.<ref name="ref_e6f7e926">[https://spdx.org/licenses/OpenSSL.html Software Package Data Exchange (SPDX)]</ref>
# Products derived from this software may not be called "OpenSSL" nor may "OpenSSL" appear in their names without prior written permission of the OpenSSL Project.<ref name="ref_e6f7e926" />
# The openssl program is a command line tool for using the various cryptography functions of OpenSSL's crypto library from the shell.<ref name="ref_1036b806">[https://linux.die.net/man/1/openssl openssl(1): OpenSSL tool]</ref>
# Since for each cipher there is a command of the same name, this provides an easy way for shell scripts to test for the availability of ciphers in the openssl program.<ref name="ref_1036b806" />
# It's intended for testing purposes only and provides only rudimentary interface functionality but internally uses mostly all functionality of the OpenSSL ssl library.<ref name="ref_1036b806" />
# The list- XXX -commands pseudo-commands were added in OpenSSL 0.9.3; The list- XXX -algorithms pseudo-commands were added in OpenSSL 1.0.0; the no- XXX pseudo-commands were added in OpenSSL 0.9.5a.<ref name="ref_1036b806" />
# This PEP proposes for CPython’s standard library to support only OpenSSL 1.1.1 LTS or newer.<ref name="ref_642a3997">[https://www.python.org/dev/peps/pep-0644/ PEP 644 -- Require OpenSSL 1.1 or newer]</ref>
# Python makes use of OpenSSL in hashlib , hmac , and ssl modules.<ref name="ref_642a3997" />
# OpenSSL provides fast implementations of cryptographic primitives and a full TLS stack including handling of X.509 certificates.<ref name="ref_642a3997" />
# Over time OpenSSL's public API has evolved and changed.<ref name="ref_642a3997" />
# To start, generate a private key for the CA using the openssl genrsa command.<ref name="ref_40ea3cac">[https://mariadb.com/kb/en/certificate-creation-with-openssl/ Certificate Creation with OpenSSL]</ref>
# After that, you can use the private key to generate the X509 certificate for the CA using the openssl req command.<ref name="ref_40ea3cac" />
# To start, generate a private key and create a certificate request using the openssl req command.<ref name="ref_40ea3cac" />
# After that, process the key to remove the passphrase using the openssl rsa command.<ref name="ref_40ea3cac" />
# Bindings to OpenSSL libssl and libcrypto, plus custom SSH key parsers.<ref name="ref_cf8a35f7">[https://cran.r-project.org/package=openssl Package openssl]</ref>
# Wrappers allowing the use of the OpenSSL library in a variety of computer languages are available.<ref name="ref_9e3f11e6">[http://ftp.riken.jp/sagemath/spkg/upstream/openssl/index.html SageMath Download]</ref>
# * Fix issue with openssl libraries getting installed to lib64, as recommended by Mariah (the referee).<ref name="ref_9e3f11e6" />
# Sending push notifications with the EMS Server : You need to install the OpenSSL libraries in the system where the RAD Server Engine (EMS Server) runs to send push notifications.<ref name="ref_69ac5b0b">[http://docwiki.embarcadero.com/RADStudio/Sydney/en/OpenSSL RAD Studio]</ref>
# : You need to install the OpenSSL libraries in the system where the RAD Server Engine (EMS Server) runs to send push notifications.<ref name="ref_69ac5b0b" />
# InterBase uses OpenSSL for encryption and OTW/SSL features.<ref name="ref_69ac5b0b" />
# - Download the OpenSSL installer files and install them.<ref name="ref_69ac5b0b" />
# OpenSSL provides a function GENERAL_NAME_cmp which compares different instances of a GENERAL_NAME to see if they are equal or not.<ref name="ref_41701d4f">[https://www.securityweek.com/openssl-ships-%E2%80%98high-severity%E2%80%99-security-patch OpenSSL Ships ‘High Severity’ Security Patch]</ref>
# The Qt installation package comes with OpenSSL support but the OpenSSL libraries are not part of the package due to legal restrictions in some countries.<ref name="ref_943cd111">[https://doc.qt.io/qt-5/android-openssl-support.html Adding OpenSSL Support for Android]</ref>
# For more information, see OpenSSL for Android.<ref name="ref_943cd111" />
# Note: If your development platform is Windows, you need msys with perl v5.14 or later to build OpenSSL.<ref name="ref_943cd111" />
# For more information about the configurable features, see OpenSSL Configure Options.<ref name="ref_943cd111" />
# This section describes how to use the openssl command to set up SSL certificate and key files for use by MySQL servers and clients.<ref name="ref_3c56c94f">[https://dev.mysql.com/doc/refman/5.7/en/creating-ssl-files-using-openssl.html MySQL :: MySQL 5.7 Reference Manual :: 6.3.3.2 Creating SSL Certificates and Keys Using openssl]</ref>
# The first two examples are intended for use on Unix and both use the openssl command that is part of OpenSSL.<ref name="ref_3c56c94f" />
# Otherwise, the certificate and key files do not work for servers compiled using OpenSSL.<ref name="ref_3c56c94f" />
# You must respond to several prompts by the openssl commands.<ref name="ref_3c56c94f" />
# If you don't want to bother with OpenSSL, you can do many of the same things with our SSL Certificate Tools.<ref name="ref_8aa380b1">[https://www.sslshopper.com/article-most-common-openssl-commands.html The Most Common OpenSSL Commands]</ref>
# This cheat sheet style guide provides a quick reference to OpenSSL commands that are useful in common, everyday scenarios.<ref name="ref_bc71d1c2">[https://www.digitalocean.com/community/tutorials/openssl-essentials-working-with-ssl-certificates-private-keys-and-csrs OpenSSL Essentials: Working with SSL Certificates, Private Keys and CSRs]</ref>
# This includes OpenSSL examples of generating private keys, certificate signing requests, and certificate format conversion.<ref name="ref_bc71d1c2" />
# , you can do so by adding the -subj option to any OpenSSL commands that request CSR information.<ref name="ref_bc71d1c2" />
# This section covers OpenSSL commands that are related to generating CSRs (and private keys, if they do not already exist).<ref name="ref_bc71d1c2" />
# This article is the first of two on cryptography basics using OpenSSL, a production-grade library and toolkit popular on Linux and other systems.<ref name="ref_b0933f81">[https://opensource.com/article/19/6/cryptography-basics-openssl-part-1 Getting started with OpenSSL: Cryptography basics]</ref>
# utilities are available at the command line, and programs can call functions from the OpenSSL libraries.<ref name="ref_b0933f81" />
# The documentation for OpenSSL is spotty beyond the man pages, which become unwieldy given how big the OpenSSL toolkit is.<ref name="ref_b0933f81" />
# None of these relatively low-level constructs occurs in the client program, as the OpenSSL library wraps the socket infrastructure and address specification in high-level security constructs.<ref name="ref_b0933f81" />
# Backport additional patches merged into OpenSSL's master branch to support KTLS RX for TLS 1.1 and 1.2 as well as support for KTLS TX for TLS 1.3.<ref name="ref_5f2a3791">[https://www.freshports.org/security/openssl/ FreshPorts -- security/openssl: TLSv1.3 capable SSL and crypto library]</ref>
# XXX Move the openssl detection routine to bsd.default-version.mk.<ref name="ref_5f2a3791" />
# This page lists vulnerability statistics for all versions of Openssl Openssl.<ref name="ref_84ff6e63">[https://www.cvedetails.com/product/383/Openssl-Openssl.html?vendor_id=217 Openssl Openssl : CVE security vulnerabilities, versions and detailed reports]</ref>
# You can view versions of this product or security vulnerabilities related to Openssl Openssl.<ref name="ref_84ff6e63" />
# -v displays the current OpenSSL version.<ref name="ref_fb5dc30a">[https://www.mkssoftware.com/docs/man1/openssl_version.1.asp openssl version -- print OpenSSL version information]</ref>
# the current version of OpenSSL was built.<ref name="ref_fb5dc30a" />
# Licensed under the OpenSSL license (the "License").<ref name="ref_fb5dc30a" />
# Many people are curious about how wolfSSL compares to OpenSSL and what benefits there are to using an SSL/TLS library that has been optimized to minimize size and maximize speed.<ref name="ref_5eb8cd79">[https://www.wolfssl.com/docs/wolfssl-openssl/ WOLFSSL VERSUS OPENSSL]</ref>
# The OpenSSL checking code was written after the discovery of Lucky13, and Adam Langley wrote a long blog post explaining how the generic version works.<ref name="ref_b16f7066">[https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/ Yet Another Padding Oracle in OpenSSL CBC Ciphersuites]</ref>
# The patch for LuckyMinus20 is one line in the OpenSSL function that performs AES-CBC decryption and checks HMAC and padding.<ref name="ref_b16f7066" />
# Thanks to Anna Bernardi who helped with the analysis and the painful process of reading OpenSSL code.<ref name="ref_b16f7066" />
# In some situations, it can be useful to generate a CSR using OpenSSL.<ref name="ref_19352530">[https://www.xolphin.com/support/OpenSSL/OpenSSL_-_Installation_under_Windows OpenSSL - Installation under Windows]</ref>
# Download the OpenSSL for Windows installation package.<ref name="ref_19352530" />
# DESCRIPTION OpenSSL is a cryptography toolkit implementing the Transport Layer Security (TLS v1) network protocol, as well as related cryptography standards.<ref name="ref_283bc272">[https://man.openbsd.org/openssl.1 OpenBSD manual pages]</ref>
# The openssl program is a command line tool for using the various cryptography functions of openssl 's crypto library from the shell.<ref name="ref_283bc272" />
# If an OID (object identifier) is not part of openssl 's internal table it will be represented in numerical form (for example 1.2.3.4).<ref name="ref_283bc272" />
# If neither option is present, the format used in earlier versions of openssl is used.<ref name="ref_283bc272" />
# This guide is designed to introduce the reader to the Secure Sockets Layer (SSL) application-level protocol, and particularly the OpenSSL implementation of SSL.<ref name="ref_dc650b9a">[https://help.ubuntu.com/community/OpenSSL Community Help Wiki]</ref>
# OpenSSL is a robust, commercial-grade implementation of SSL tools, and related general purpose library based upon SSLeay, developed by Eric A. Young and Tim J. Hudson.<ref name="ref_dc650b9a" />
# In order to build software which requires the OpenSSL general-purpose library, you must first install the development instance of the OpenSSL library.<ref name="ref_dc650b9a" />
# Due to OpenSSL's license being incompatible with the GPL, linking the OpenSSL library with programs covered by GPL requires an explicit linking exception for packages present in the Ubuntu Archive.<ref name="ref_dc650b9a" />
===소스===
<references />

@@ 92번째 줄: / 92번째 줄: @@
   <references />
-== 메타데이터 ==
+==메타데이터==
 ===위키데이터===
 * ID :  [https://www.wikidata.org/wiki/Q1052790 Q1052790]

← 이전 판		2020년 12월 26일 (토) 12:22 판
91번째 줄:		91번째 줄:
	===소스===		===소스===
	<references />		<references />
		+
		+	== 메타데이터 ==
		+
		+	===위키데이터===
		+	* ID : [https://www.wikidata.org/wiki/Q1052790 Q1052790]

OpenSSL - 편집 역사

2021년 2월 17일 (수) 08:17에 Pythagoras0님의 편집

Pythagoras0: /* 메타데이터 */ 새 문단

Pythagoras0: /* 노트 */ 새 문단