An Introduction to OpenSSL Programming, Part I of II
In this article, we've only scratched the surface of the issues involved with using OpenSSL. Here's a (nonexhaustive) list of additional issues.
A more sophisticated approach to checking server certificates against the server hostname is to use the X.509 subjectAltName extension. In order to make this check, you would need to extract this extension from the certificate and then check it against the hostname. Additionally, it would be nice to be able to check hostnames against wild-carded names in certificates.
Note that these applications handle errors simply by exiting with an error. A real application would, of course, be able to recognize errors and signal them to the user or some audit log rather than just exiting.
In the next article, we'll be discussing a number of advanced OpenSSL features, including session resumption, multiplexed and nonblocking I/O and client authentication.
Thanks to Lisa Dusseault, Steve Henson, Lutz Jaenicke and Ben Laurie for help with OpenSSL and review of this article.
- Readers' Choice Awards 2013
- Linux Kernel News - November 2013
- Mars Needs Women
- RSS Feeds
- Sublime Text: One Editor to Rule Them All?
- December 2013 Issue of Linux Journal: Readers' Choice
- Raspberry Pi: the Perfect Home Server
- Advanced Hard Drive Caching Techniques
- New Products
- Web Administration Scripts
- There are factors which are
3 hours 10 min ago
- Gnome 3 ?
3 hours 55 min ago
- Reply to comment | Linux Journal
8 hours 2 min ago
- "Redis RethinkDB 4.5%" on Best NoSQL Databases
18 hours 8 min ago
- on the ground
1 day 30 min ago
- I was able to read the whole
1 day 1 hour ago
- since i have read the title i
1 day 5 hours ago
- Belanja Online Cari Voucher Diskon
1 day 5 hours ago
- The kernel doesn't really
1 day 17 hours ago
1 day 18 hours ago