Network Security with OpenSSL

by John Viega, Matt Messier, Pravir Chandra

Most applications these days are at least somewhat network aware, but how do you protect those applications against common network security threats? Many developers are turning to OpenSSL, an open source version of SSL/TLS, which is the most widely used protocol for secure network communications. The OpenSSL library is seeing widespread adoption for web sites that require cryptographic functions to protect a broad range of sensitive information, such as credit card numbers and other financial transactions. The library is the only free, full-featured SSL implementation for C and C++, and it can be used programmatically or from the command line to secure most TCP-based network protocols. Network Security with OpenSSL enables developers to use this protocol much more effectively. Traditionally, getting something simple done in OpenSSL could easily take weeks. This concise book gives you the guidance you need to avoid pitfalls, while allowing you to take advantage of the library?s advanced features. And, instead of bogging you down in the technical details of how SSL works under the hood, this book provides only the information that is necessary to use OpenSSL safely and effectively. In step-by-step fashion, the book details the challenges in securing network communications, and shows you how to use OpenSSL tools to best meet those challenges. As a system or network administrator, you will benefit from the thorough treatment of the OpenSSL command-line interface, as well as from step-by-step directions for obtaining certificates and setting up your own certification authority. As a developer, you will further benefit from the in-depth discussions and examples of how to use OpenSSL in your own programs. Although OpenSSL is written in C, information on how to use OpenSSL with Perl, Python and PHP is also included. OpenSSL may well answer your need to protect sensitive data. If that?s the case, Network Security with OpenSSL is the only guide available on the subject.

Genres: Programming, Reference, Technical, Computers, Nonfiction, Technology

384 pages, Paperback

First published June 15, 2002

Reviews

[Jared · Rating 3 out of 5]

This book unfortunately contains the best documentation I've been able to find on the OpenSSL cryptographic libraries and using many of the OpenSSL tools. I say "unfortunately", because the book was written in 2002, so it's pretty dated in the world of programming. OpenSSL has changed quite a bit since the time of writing.

Nevertheless, it's still better than the awful OpenSSL documentation online (including the documentation on the OpenSSL website). I have loaned it to several of the developers in my company, and they've found it useful, too. Just be prepared to search for code online that uses the OpenSSL libraries to figure out how the interface has changed when you try to compile the examples.

I would love to see an updated version of this book.

[Allyn · Rating 3 out of 5]

If you need to write OpenSSL code, this is a good start even if it's an older book. If the documentation for OpenSSL was ever finished this wouldn't be needed.

[Alex Ott · Rating 3 out of 5]

good (but outdated) overview of OpenSSL tools & library...

[Jorgon · Rating 4 out of 5]

An excellent collection of documentation--sadly, rather out of date now. Perhaps the best available book on the subject, but in dire need of an update.