Related Links

From OpenSSLWiki
Revision as of 18:13, 6 July 2015 by Jwalton (talk | contribs) (Tweaked mbed description.)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to navigationJump to search

Please feel free to edit this page and add your own OpenSSL-based project or product. This is the one place where otherwise extraneous mention of commercial products is appropriate. Note such mention does not constitute endorsement per our Commercial Product Disclaimer.

Open Source Cryptographic Libraries[edit]

Products which are available under some form of Open Source license, and which may also be available under some form of commercial license.

Open Source Cryptographic Libraries
Library Description
AmiSSL an OpenSSL port to AmigaOS
Botan a C++ cryptography library which includes a TLS implementation
BoringSSL a Google fork of OpenSSL (Announcement ) (Press coverage: ycombinator, Ars Technica, PC World, ZDNet )
Bouncy Castle cryptography API for Java and C# (Wikipedia: Bouncy Castle (cryptography))
Cryptlib a security toolkit that allows one to easily add encryption and authentication services to software
Crypto++ a free C++ class library of cryptographic schemes
GnuTLS an LGPL-licensed TLS library with substantial documentation
LibreSSL an OpenBSD fork of OpenSSL (Press coverage: ZDNet, Ars Technica)
LibTomCrypt public domain open source crypto library written in C
libtlssep A simplified TLS library based on OpenSSL that decomposes socket operations from private key operations by providing two processes
mbed TLS TLS library that handles the complexities of the Secure Sockets Layer (SSL) protocol for applications (formerly PolarSSL)
miTLS a verified reference implementation of the TLS protocol. ("reddit: miTLS - A verified reference TLS implementation")
NaCl NaCl (pronounced "salt") is a easy-to-use high-speed software library for network communication, encryption, decryption, and signatures
NSS a set of libraries designed to support cross-platform development of security-enabled client and server applications
Poco Modern open source C++ class libraries for building network-based applications that run on desktop, server, mobile and embedded systems.
s2n Amazon's open source implementation of the TLS/SSL protocols.
XySSL a C library providing a very small footprint crypto library and SSL implementation.

Open Source Products Using OpenSSL[edit]

Products which are available under some form of Open Source License, and which may also be available under some form of commercial license.

Open Source Products Using OpenSSL
Product Description
libevent an event driven library which can optionally use OpenSSL
mod_ssl SSL/TLS module for the Apache HTTP Server
Stunnel an SSL encryption wrapper between remote client and local (inetd-startable) or remote server

Languages libraries/Wrappers relying on openssl[edit]

Closed Source Cryptographic Libraries[edit]

Closed Source Cryptographic Libraries
Library Description
No Entry This is a placeholder

Closed Source Products Using OpenSSL[edit]

Closed Source Products Using OpenSSL
Product Description
Stonesoft Firewall Appliances [1] Stonesoft (now McAfee) Appliances uses openssl as SSL/TLS communication library, license advertised [2]
No Entry This is a placeholder

Even if this section is empty now, it exist a numerous number of closed source products using OpenSSL.

Books and Documentation[edit]

Books and Documentation
Title Description
Comparison of TLS implementations Wikipedia article comparing various TLS libraries site which summarizes various key length recommendations
OpenSSL Cookbook A free ebook that covers configuration and command-line usage (first

published in 2013; continuously updated)

Network Security with OpenSSL O'Reilly book from 2002

Testing Resources[edit]

Testing Resources
Title Description
TLS-O-MATIC A set of tests for TLS clients
SSL Labs server test Probes any HTTPS server on the Internet and assigns it a letter grade
SSL Labs client test Tests the TLS capabilities of your browser
TLSPretense A test framework for testing SSL/TLS client certificate validation Test for Server Name Indication