Thursday, October 15, 2009

OpenSSL

OpenSSL is an open-source SSL and generic cryptographic toolkit. SSL v3.0 and TLS 1.0 are supported. The latest version can be downloaded from http://www.openssl.org/

OpenSSL Documentation / Tutorials:
http://tldp.org/HOWTO/SSL-Certificates-HOWTO/index.html
http://docs.sun.com/source/816-6156-10/contents.htm
http://docs.sun.com/source/816-6154-10/contents.htm
http://h71000.www7.hp.com/doc/83final/ba554_90007/ch04.html
http://sial.org/howto/openssl/
https://help.ubuntu.com/community/OpenSSL

For using OpenSSL in multithreaded applications see http://www.openssl.org/docs/crypto/threads.html

FIPS Support : OpenSSL provides FIPS OpenSSL v1.2 module which is FIPS 140-2 validated. It generates fipscanister.lib or fipscanister.o which can be used by latest OpenSSL distribution to build a FIPS capable OpenSSL.

FIPS mode can be enabled by calling FIPS_mode_set(1); A return value of 1 indicates successful enabling. When FIPS mode is set only FIPS approved security functions will get executed.

Build FIPS shared libraries containing embedded signatures:

Use fipsld script in case of Linux/Unix and fipslink.pl for Windows. Remember to use gcc -Bsymbolic option when building shared library under Linux/Unix. The Target name for using fipsld script must end with dll or lib or the fipsld script has to be modified.

No comments:

Post a Comment