{"id":115650,"date":"2024-05-09T13:52:08","date_gmt":"2024-05-09T11:52:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx"},"modified":"2024-05-09T13:52:08","modified_gmt":"2024-05-09T11:52:08","slug":"v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/v-rustls-obespechena-sovmestimost-s-openssl-i-nginx","title":{"rendered":"Rustls has been made compatible with OpenSSL and nginx.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
The organization ISRG (Internet Security Research Group), which is the founder of the Let's Encrypt project and promotes the development of technologies to enhance internet security, has announced the release of the rustls-openssl-compat layer, allowing the Rustls library to be used as a transparent replacement for OpenSSL. Currently, the project has provided the rustls-libssl implementation that ensures compatibility with libssl, and a libcrypto implementation is under development. <\/p>\n
The functionality present in the layer is sufficient to enable nginx to run on Rustls. To migrate nginx to Rustls, one simply needs to replace the libraries without the need for recompiling or modifying nginx. Among the near-term plans for Rustls development is a performance optimization in areas where Rustls currently lags behind OpenSSL, and ensuring support for RFC 8879 for certificate compression. Additionally, the announcement mentions plans to transition the infrastructure elements of the Let's Encrypt certificate authority from OpenSSL to Rustls. <\/p>\n
The Rustls project develops client and server implementations of TLS 1.2 and TLS 1.3 protocols for use in applications written in Rust. Rustls does not provide its own implementation of cryptographic primitives but uses pluggable cryptographic function providers (supporting algorithms like ECDSA, Ed25519, RSA, ChaCha20-Poly1305, AES128-GCM, and AES256-GCM). By default, Rustls uses a cryptographic provider based on the aws-lc-rs library, which is developed by Amazon and based on BoringSSL's C++ code, maintained by Google's OpenSSL fork. The ring library, partially based on BoringSSL and combining code in assembly, C++, and Rust, can also be used as a cryptographic provider. <\/p>\n
Notably, nginx has built-in support for building with BoringSSL, which allows this library to be used directly without additional layers. In addition to the built-in support in Rustls for the aws-lc-rs and ring libraries based on BoringSSL code, several third-party cryptographic providers are also being developed for Rustls, allowing the use of mbedtls (C code), BoringSSL (C++), and RustCrypto (Rust) libraries. \n Source: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"