Today is a free download without charge Download

Ivan Ristić - OpenSSL Cookbook, SECOND EDITION [2015, PDF/EPUB/MOBI, ENG]

Reply to topic
 
Author
Message

Omen ®

Longevity: 8 years 3 months

Posts: 181087

Торрент-статистика

Post 09-Jan-2017 01:00

[Quote]

OpenSSL Cookbook, SECOND EDITION
Год издания: 2016
Автор: Ivan Ristić
Жанр или тематика: Хакинг и безопасность
Издательство: Feisty Duck
Язык: Английский
Формат: PDF/EPUB/MOBI
Качество: Издательский макет или текст (eBook)
Интерактивное оглавление: Да
Количество страниц: 90
Описание: A short book that covers the most frequently used OpenSSL
features and commands, by Ivan Ristić
Provides OpenSSL documentation that covers installation, configuration,
and key and certificate management
Includes SSL/TLS Deployment Best Practices, a design and deployment guide
Written by the author of SSL Labs and the SSL/TLS configuration assessment tool
Available in a variety of digital formats (PDF, EPUB, Mobi/Kindle); no DRM

Примеры страниц

Оглавление

Preface vii
Feedback viii
About Bulletproof SSL and TLS viii
About the Author viii
1. OpenSSL 1
Getting Started 2
Determine OpenSSL Version and Configuration 2
Building OpenSSL 3
Examine Available Commands 5
Building a Trust Store 6
Key and Certificate Management 8
Key Generation 8
Creating Certificate Signing Requests 12
Creating CSRs from Existing Certificates 14
Unattended CSR Generation 14
Signing Your Own Certificates 15
Creating Certificates Valid for Multiple Hostnames 15
Examining Certificates 16
Key and Certificate Conversion 19
Configuration 22
Cipher Suite Selection 22
Performance 34
Creating a Private Certification Authority 38
Features and Limitations 38
Creating a Root CA 38
Creating a Subordinate CA 45
2. Testing with OpenSSL 49
Connecting to SSL Services 49
Testing Protocols that Upgrade to SSL 54
Using Different Handshake Formats 54
Extracting Remote Certificates 55
Testing Protocol Support 55
Testing Cipher Suite Support 56
Testing Servers that Require SNI 57
Testing Session Reuse 58
Checking OCSP Revocation 59
Testing OCSP Stapling 61
Checking CRL Revocation 62
Testing Renegotiation 64
Testing for the BEAST Vulnerability 66
Testing for Heartbleed 67
Determining the Strength of Diffie-Hellman Parameters 70
A. SSL/TLS Deployment Best Practices 73
1 Private Key and Certificate 73
1.1 Use 2048-Bit Private Keys 73
1.2 Protect Private Keys 74
1.3 Ensure Sufficient Hostname Coverage 74
1.4 Obtain Certificates from a Reliable CA 75
1.5 Use Strong Certificate Signature Algorithms 76
2 Configuration 76
2.1 Use Complete Certificate Chains 76
2.2 Use Secure Protocols 76
2.3 Use Secure Cipher Suites 77
2.4 Select Best Cipher Suites 78
2.5 Use Forward Secrecy 78
2.6 Use Strong Key Exchange 79
2.7 Mitigate Known Problems 79
3 Performance 79
3.1 Avoid Too Much Security 80
3.2 Use Session Resumption 80
3.3 Use WAN Optimization and HTTP/2 80
3.4 Cache Public Content 80
3.5 Use OCSP Stapling 80
3.6 Use Fast Cryptographic Primitives 81
4 HTTP and Application Security 81
4.1 Encrypt Everything 81
4.2 Eliminate Mixed Content 81
4.3 Understand and Acknowledge Third-Party Trust 82
4.4 Secure Cookies 82
4.5 Secure HTTP Compression 82
4.6 Deploy HTTP Strict Transport Security 83
4.7 Deploy Content Security Policy 83
4.8 Do Not Cache Sensitive Content 84
4.9 Consider Other Threats 84
5 Validation 84
6 Advanced Topics 84
7 Changes 85
Version 1.3 (17 September 2013) 85
Version 1.4 (8 December 2014) 86
Version 1.5 (8 June 2016) 86
Acknowledgments 87
About SSL Labs 87
About Qualys 87
B. Changes 89
v1.0 (May 2013) 89
v1.1 (October 2013) 89
v2.0 (March 2015) 90
v2.1 (March 2016) 90
Доп. информация: First published in May 2013. Second edition published in March 2015. Last update: March 2016
Other forum [Profile] [PM]
Display posts from previous:    
Reply to topic

The time now is: Today 10:33

All times are GMT + 3 Hours



You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You cannot download files in this forum