Overview#

OpenSSL is a Cryptosystem which is implemented as an Open Source Software library

The OpenSSL Project is a collaborative effort to develop a robust, commercial-grade, full-featured, and Open Source toolkit implementing the Secure Socket Layer (SSL v2/v3) and Transport Layer Security (TLS v1) protocols as well as a full-strength general purpose cryptography Software library for managing Certificates, Certificate Formats and Certificate Keystores. The project is managed by a worldwide community of volunteers that use the Internet to communicate, plan, and develop the OpenSSL toolkit and its related documentation.[1]

OpenSSL Commands#

We have collected some useful OpenSSL Commands.

OpenSSL and TLS 1.3#

OpenSSL 1.1.1 release will include support for TLSv1.3. The new release will be binary and API compatible with OpenSSL 1.1.0. In theory, if your application supports OpenSSL 1.1.0, then all you need to do to upgrade is to drop in the new version of OpenSSL when it becomes available and you will automatically start being able to use TLSv1.3.

OpenSSL 1.1.1 will not be released until (at least) TLS 1.3 is finalized.

More Information#

There might be more information for this subject on one of the following:

• BoringSSL
• Certificate Fingerprint
• Certificate Keystores
• Certificate Validation
• Certificate Validation Tools
• Ciphers-Export
• Ciphers-Low
• Ciphers-SUITEB128ONLY
• Converting Certificate Formats
• Cryptographic Message Syntax
• EDirectory Version
• FLUSH+RELOAD
• FREAK
• Heartbleed
• How to get OpenSSL to recognise an Active Directory CA
• NICI 3.0
• Obtain a Certificate from Server
• OpenSSL Commands
• PKCS12
• Perl LDAPS and Certificates
• Privacy-Enhanced Mail
• Retrieving Edirectory Certificate OpenSSL Toolkit
• SUITEB128
• SUITEB192
• Tink

---

[#1] - Wikipedia:OpenSSL