TLS/SSL and crypto library https://www.openssl.org

Guido Vranken 514c9da48b Enforce a strict output length check in CRYPTO_ccm128_tag 3 days ago
.github 7dc6875c55 Remove markdown links from HTML comments in issue templates 5 months ago
Configurations 72eb100f8a Don't use '-z defs' with Clang's sanitizers 1 week ago
VMS 402dd5585e Following the license change, modify the boilerplates in last few 4 months ago
apps c54492ecf8 Added app for EVP_KDF 2 days ago
boringssl @ 2070f8ad91 4b5f7e7555 Update ossl_config.json for later BoringSSL commit 2 years ago
crypto 514c9da48b Enforce a strict output length check in CRYPTO_ccm128_tag 1 day ago
demos 81cd023f1d Fix memory leaks in pkread.c demo file 1 month ago
doc 87930507ff doc: Get rid of unrelated reference to DSA_new() 1 day ago
engines 22b414672d Build cleanup: don't use SHARED_SOURCE with modules 3 weeks ago
external 4569ff3257 Following the license change, modify the boilerplates in external/ 4 months ago
fuzz 8267becb8b Support SM2 certificate verification 1 month ago
include 0109e030db Add a way for the application to get OpenSSL configuration data 2 days ago
krb5 @ b9ad6c4950 0fef74486e [extended tests] Enable krb5 tests in Travis 2 years ago
ms 9257959950 Windows: Call TerminateProcess, not ExitProcess 2 months ago
os-dep 6c4be50a5d Move Haiku configuration to separate config file to denote 2 years ago
providers 6caf7f3aec Create provider errors and use them 1 week ago
pyca-cryptography @ 09403100de 7a8f6cad82 Update the pyca-cryptography submodule 7 months ago
ssl 6fda11ae5a Check if num is 0 before trying to malloc memory. Otherwise for client hellos without extensions SSL_client_hello_get1_extensions_present will return MALLOC_FAILURE. 1 week ago
test c54492ecf8 Added app for EVP_KDF 2 days ago
tools 9059ab425a Following the license change, modify the boilerplates in util/, tools/ 4 months ago
util 0109e030db Add a way for the application to get OpenSSL configuration data 2 days ago
.gitattributes 76bc401cc6 Don't export the submodules 'boringssl', 'krb5' and 'pyca-cryptography' 5 months ago
.gitignore 6d872a838d Add test for the provider configuration module 3 weeks ago
.gitmodules 0fef74486e [extended tests] Enable krb5 tests in Travis 2 years ago
.travis-apt-pin.preferences 404c76f4ee Fix travis clang-3.9 builds 1 year ago
.travis-create-release.sh 8d9535ec3e Remove all 'make dist' artifacts 5 months ago
.travis.yml 16161a30f2 Update to xenial 1 month ago
ACKNOWLEDGEMENTS ab29c82a55 Refer to website for acknowledgements. 3 years ago
AUTHORS b7b13c7ac8 Update AUTHORS list, add commentary 9 months ago
CHANGES 07822c5155 added openssl app 'kdf' and 'mac' to the NEWS and CHANGES docs 2 days ago
CONTRIBUTING df4439186f Remove unnecessary trailing whitespace 2 months ago
Configure bacc308130 Recognise clang -fsanitize options and translate them 2 days ago
FAQ 4f46473a86 Move FAQ to the web. 3 years ago
INSTALL d030892312 Add a legacy provider and put MD2 in it 2 weeks ago
LICENSE 151333164e Change license to the Apache License v2.0 4 months ago
NEWS 07822c5155 added openssl app 'kdf' and 'mac' to the NEWS and CHANGES docs 2 days ago
NOTES.ANDROID df4439186f Remove unnecessary trailing whitespace 2 months ago
NOTES.DJGPP df4439186f Remove unnecessary trailing whitespace 2 months ago
NOTES.PERL 073b1b72f6 Tweaks to NOTES.PERL 2 years ago
NOTES.UNIX 2c879241ba NOTES.UNIX: add "Linking your application" paragraph 10 months ago
NOTES.VMS df4439186f Remove unnecessary trailing whitespace 2 months ago
NOTES.WIN f529b5cf05 INSTALL,NOTES.WIN: classify no-asm as non-production option. 9 months ago
README 151333164e Change license to the Apache License v2.0 4 months ago
README.ENGINE f39a5501ce Remove bsd_cryptodev engine 1 year ago
README.FIPS 700b4a4ae7 Remove more (rest?) of FIPS build stuff. 3 years ago
appveyor.yml 986caf9e34 CI config: no need to make both install and install_docs 11 months ago
build.info 861b8f8747 Add the provider_algs.h internal header file 1 week ago
config df4439186f Remove unnecessary trailing whitespace 2 months ago
config.com 402dd5585e Following the license change, modify the boilerplates in last few 4 months ago
e_os.h 596521f488 Limit DEVRANDOM_WAIT to linux 1 month ago

README


OpenSSL 3.0.0-dev

Copyright (c) 1998-2018 The OpenSSL Project
Copyright (c) 1995-1998 Eric A. Young, Tim J. Hudson
All rights reserved.

DESCRIPTION
-----------

The OpenSSL Project is a collaborative effort to develop a robust,
commercial-grade, fully featured, and Open Source toolkit implementing the
Transport Layer Security (TLS) protocols (including SSLv3) as well as a
full-strength general purpose cryptographic library.

OpenSSL is descended from the SSLeay library developed by Eric A. Young
and Tim J. Hudson.

The OpenSSL toolkit is licensed under the Apache License 2.0, which means
that you are free to get and use it for commercial and non-commercial
purposes as long as you fulfill its conditions.

OVERVIEW
--------

The OpenSSL toolkit includes:

libssl (with platform specific naming):
Provides the client and server-side implementations for SSLv3 and TLS.

libcrypto (with platform specific naming):
Provides general cryptographic and X.509 support needed by SSL/TLS but
not logically part of it.

openssl:
A command line tool that can be used for:
Creation of key parameters
Creation of X.509 certificates, CSRs and CRLs
Calculation of message digests
Encryption and decryption
SSL/TLS client and server tests
Handling of S/MIME signed or encrypted mail
And more...

INSTALLATION
------------

See the appropriate file:
INSTALL Linux, Unix, Windows, OpenVMS, ...
NOTES.* INSTALL addendums for different platforms

SUPPORT
-------

See the OpenSSL website www.openssl.org for details on how to obtain
commercial technical support. Free community support is available through the
openssl-users email list (see
https://www.openssl.org/community/mailinglists.html for further details).

If you have any problems with OpenSSL then please take the following steps
first:

- Download the latest version from the repository
to see if the problem has already been addressed
- Configure with no-asm
- Remove compiler optimization flags

If you wish to report a bug then please include the following information
and create an issue on GitHub:

- OpenSSL version: output of 'openssl version -a'
- Configuration data: output of 'perl configdata.pm --dump'
- OS Name, Version, Hardware platform
- Compiler Details (name, version)
- Application Details (name, version)
- Problem Description (steps that will reproduce the problem, if known)
- Stack Traceback (if the application dumps core)

Just because something doesn't work the way you expect does not mean it
is necessarily a bug in OpenSSL. Use the openssl-users email list for this type
of query.

HOW TO CONTRIBUTE TO OpenSSL
----------------------------

See CONTRIBUTING

LEGALITIES
----------

A number of nations restrict the use or export of cryptography. If you
are potentially subject to such restrictions you should seek competent
professional legal advice before attempting to develop or distribute
cryptographic code.