An Introduction to OpenSSL Programming, Part I of II
In this article, we've only scratched the surface of the issues involved with using OpenSSL. Here's a (nonexhaustive) list of additional issues.
A more sophisticated approach to checking server certificates against the server hostname is to use the X.509 subjectAltName extension. In order to make this check, you would need to extract this extension from the certificate and then check it against the hostname. Additionally, it would be nice to be able to check hostnames against wild-carded names in certificates.
Note that these applications handle errors simply by exiting with an error. A real application would, of course, be able to recognize errors and signal them to the user or some audit log rather than just exiting.
In the next article, we'll be discussing a number of advanced OpenSSL features, including session resumption, multiplexed and nonblocking I/O and client authentication.
Thanks to Lisa Dusseault, Steve Henson, Lutz Jaenicke and Ben Laurie for help with OpenSSL and review of this article.
- Two Pi R
- Readers' Choice Awards 2013
- AIDE—Developing for Android on Android
- The Geek's Guide to the Coolest 2013 Holiday Gifts
- A Handy U-Boot Trick
- Sublime Text: One Editor to Rule Them All?
- Best. Cake. Ever.
- Raspberry Pi: the Perfect Home Server
- Tech Tip: Really Simple HTTP Server with Python
- RSS Feeds
- Reality is disapointing
9 hours 43 min ago
- Máy sấy quần áo
12 hours 29 min ago
- Services on GlusterFS
12 hours 39 min ago
- Reply to comment | Linux Journal
14 hours 19 min ago
- Definitely cool stuff here
15 hours 20 min ago
- thanks for the information
16 hours 31 min ago
- nice information thanks
17 hours 10 min ago
20 hours 6 min ago
- The lost opportunity of security
1 day 7 hours ago
- Andhra Pradesh has a variety
1 day 11 hours ago