OpenSSL

From Free net encyclopedia

Image:Mergefrom.gif It has been suggested that SSLeay be merged into this article or section. ([[{{{2|: talk:OpenSSL}}}|Discuss]])

Image:Mergefrom.gif It has been suggested that OpenSSL exception be merged into this article or section. ([[{{{2|: talk:OpenSSL}}}|Discuss]])

Template:Infobox Software

OpenSSL is an open source implementation of the SSL and TLS protocols. The core library (written in the C programming language) implements the basic cryptographic functions and provides various utility functions. Wrappers allowing the use of the OpenSSL library in a variety of computer languages are available.

Versions are available for most Unix-like operating systems (including Linux, Mac OS X and the four open source BSD operating systems), and also for Microsoft Windows. OpenSSL is based on SSLeay by Eric Young and Tim Hudson.

1 Major version releases
2 FIPS compliance
3 Misconceptions
4 See also
5 External links

[edit]

Major version releases

OpenSSL 0.9.8 was released on July 5, 2005 announcement.
OpenSSL 0.9.7 was released on December 31, 2002.
OpenSSL 0.9.6 was released on September 25, 2000.
OpenSSL 0.9.5 was released on February 28, 2000.
OpenSSL 0.9.4 was released on August 9, 1999.
OpenSSL 0.9.3 was released on May 25, 1999.

[edit]

FIPS compliance

The Open Source Software Institute has secured a FIPS 140-2 validation (certificate number 642) for OpenSSL [1], for which the current status is also available. This is a precedent-setting validation which benefits the open source software community. The source code is openly available, and the validation results can be applied to properly ported and recompiled modules:

'The OpenSSL FIPS Cryptographic Module, when generated from the identical unmodified source code, is "Vendor Affirmed" to be FIPS 140 2 compliant when running on other supported computer systems provided the conditions described in the Security Policy are met.'

The validated OpenSSL FIPS source code and Object Module is available for download at the OpenSSL Project homepage[2]. The NIST validation certificate (642) can be found on the NIST FIPS 140-1 and -2 Validation List [3].

[edit]

Misconceptions

Because of the prefix Open- on its name, OpenSSL is often associated with OpenBSD; which distributes several programs using the naming style of Open*, like OpenSSH. This is however a mistake as OpenSSL is developed completely outside of the scope of OpenBSD by The OpenSSL Project, under a different license than is commonly used by OpenBSD. Like with FreeBSD's OpenBSM, the project simply shares the goal of having an open source implementation of a valuable asset for the common good.

[edit]