Shulou(Shulou.com)06/02 Report--

This article mainly analyzes the relevant knowledge points of how to install and use OpenSSL under Linux, the content is detailed and easy to understand, the operation details are reasonable, and has a certain reference value. If you are interested, you might as well follow the editor to have a look, and follow the editor to learn more about "how to install and use OpenSSL under Linux".

OpenSSL is an open source implementation of the SSL protocol, using C language as the development language, with cross-platform capabilities, supporting Unix/Linux, Windows, Mac OS and other platforms.

The earliest version of OpenSSL was released in 1995 and has been maintained and developed by the OpenSSL project team since 1998. The latest version is version 1.1.0 alpha, which fully supports SSLv1, SSLv2, SSLv3, and TLS. At present, OpenSSL has been widely used, and the security parts of many types of software use OpenSSL libraries, such as VOIP's OpenH323 protocol, Apache server, Linux security module and so on.

The entire OpenSSL package can be divided into three main functional parts:

Cryptographic algorithm library

SSL protocol library

Application program

The directory structure of OpenSSL source code is also planned around these three functional parts.

Cryptographic algorithm library is a powerful and complete cryptographic algorithm library. It is not only the basic part of OpenSSL, but also a part worthy of general cryptographic security technicians to study. It implements most of the mainstream cryptographic algorithms and standards at present. It mainly includes symmetric algorithm, asymmetric algorithm, hash algorithm, digital signature and authentication, X509 digital certificate standard, PKCS12, PKCS7 and other standards. The other two functional parts, the SSL protocol and applications, are developed based on this library.

Based on the cryptographic algorithm library, SSL protocol completely implements and encapsulates the three versions of SSL protocol and TLS protocol. With the protocol library, you can build a SSL server and a SSL client.

Applications are commands implemented based on the cryptographic algorithm library and the SSL protocol library, and familiarity with OpenSSL can start by using these applications. The application program covers the application of cryptographic technology, including encryption programs of various algorithms and key generation programs of various types (such as RSA, Md5, Enc, etc.), certificate issuance and verification programs (such as Ca, X509, Crl, etc.), SSL connection test programs (such as S_client and S_server, etc.) and other standard applications (such as Pkcs12 and Smime, etc.).

Installation of OpenSSL under Linux

Environment

Ubuntu 14.10

OpenSSL 1.1.0alpha

Installation process

Most applications under Linux can be used directly, or you can obtain the source code to compile and install it yourself. The installation process using the source code is generally as follows:

Configure

Make

Make install

The same is true for the installation of OpenSSL. First extract the source code:

Tar xzvf openssl-1.1.0-pre1.tar.gz

Then go to the source code directory:

Cd openssl-1.1.0-pre1

Then use the following command to compile the installation:

. / configuremakesudo make install

You can also use make test to test if there is a problem.

The use of OpenSSL under Linux

OpenSSL application

View the help documentation through man openssl.

OpenSSL cryptographic algorithm library

Write a test code called test_openssl.c:

# include#includeint main () {OpenSSL_add_all_algorithms (); return 0;}

Then compile with the following command:

Gcc-o to test_openssl.c-I / usr/local/ssl/inlcude-L / usr/local/ssl/lib-ldl-lpthread

Execute. / to;echo $?, and print 0.

This is the end of the introduction on "how to install and use OpenSSL under Linux". More related content can be searched for previous articles, hoping to help you answer questions and questions, please support the website!

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.