Network Security with OpenSSL (Paperback)

Most applications these days are at least somewhat network aware, but how do you protect those applications against common network security threats? Many developers are turning to OpenSSL, an open source version of SSL/TLS, which is the most widely used protocol for secure network communications.

The OpenSSL library is seeing widespread adoption for web sites that require cryptographic functions to protect a broad range of sensitive information, such as credit card numbers and other financial transactions. The library is the only free, full-featured SSL implementation for C and C++, and it can be used programmatically or from the command line to secure most TCP-based network protocols.

Network Security with OpenSSL enables developers to use this protocol much more effectively. Traditionally, getting something simple done in OpenSSL could easily take weeks. This concise book gives you the guidance you need to avoid pitfalls, while allowing you to take advantage of the library?s advanced features. And, instead of bogging you down in the technical details of how SSL works under the hood, this book provides only the information that is necessary to use OpenSSL safely and effectively. In step-by-step fashion, the book details the challenges in securing network communications, and shows you how to use OpenSSL tools to best meet those challenges.

As a system or network administrator, you will benefit from the thorough treatment of the OpenSSL command-line interface, as well as from step-by-step directions for obtaining certificates and setting up your own certification authority. As a developer, you will further benefit from the in-depth discussions and examples of how to use OpenSSL in your own programs. Although OpenSSL is written in C, information on how to use OpenSSL with Perl, Python and PHP is also included.

OpenSSL may well answer your need to protect sensitive data. If that?s the case, Network Security with OpenSSL is the only guide available on the subject.

Table of Contents

Preface 

1. Introduction
2. Command-Line Interface
3. Public Key Infrastructure (PKI)
4. Support Infrastructure
5. SSL/TLS Programming
6. Symmetric Cryptography
7. Hashes and MACs
8. Public Key Algorithms
9. OpenSSL in Other Languages
10. Advanced Programming Topics
Appendix: Command-Line Reference 
Index

現今大部分的應用程式都具備某種程度的網路功能，但如何保護這些應用程式免受常見的網路安全威脅呢？許多開發人員正轉向 OpenSSL，這是一個開放原始碼的 SSL/TLS 版本，也是目前最廣泛使用的安全網路通訊協定。OpenSSL 函式庫被廣泛應用於需要加密功能以保護各種敏感資訊（例如信用卡號碼和其他金融交易）的網站。該函式庫是唯一一個免費且功能完整的 C 和 C++ SSL 實作，可以以程式化或命令列方式來保護大多數基於 TCP 的網路協定。《使用 OpenSSL 進行網路安全》使開發人員能夠更有效地使用這個協定。傳統上，在 OpenSSL 中完成一些簡單的任務可能需要花費數週的時間。這本簡明的書籍提供了您避免陷阱的指導，同時讓您能夠充分利用該函式庫的高級功能。此外，本書並不深入探討 SSL 在底層的技術細節，而只提供使用 OpenSSL 安全且有效地所需的資訊。本書以逐步方式詳細介紹了保護網路通訊的挑戰，並展示了如何使用 OpenSSL 工具以最佳方式應對這些挑戰。作為系統或網路管理員，您將受益於對 OpenSSL 命令列介面的全面介紹，以及逐步指南以獲取憑證並建立自己的憑證機構。作為開發人員，您還可以從深入討論和示例中瞭解如何在自己的程式中使用 OpenSSL。儘管 OpenSSL 是用 C 語言編寫的，但本書還包含了如何在 Perl、Python 和 PHP 中使用 OpenSSL 的相關資訊。如果您需要保護敏感資料，OpenSSL 可能是您的答案。如果是這樣，那麼《使用 OpenSSL 進行網路安全》是唯一一本關於這個主題的指南。

目錄：
前言
1. 簡介
2. 命令列介面
3. 公開金鑰基礎建設（PKI）
4. 支援基礎建設
5. SSL/TLS 程式設計
6. 對稱式加密
7. 雜湊和訊息鑑別碼
8. 公開金鑰演算法
9. 其他語言中的 OpenSSL
10. 進階程式設計主題
附錄：命令列參考
索引