{"id":83619,"date":"2020-06-02T01:42:03","date_gmt":"2020-06-01T23:42:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0"},"modified":"2020-06-02T01:42:03","modified_gmt":"2020-06-01T23:42:03","slug":"vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0","title":{"rendered":"Publication de la biblioth\u00e8que cryptographique LibreSSL 3.2.0.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>D\u00e9veloppeurs du projet OpenBSD <noindex><a rel=\"nofollow\" href=\"https:\/\/www.mail-archive.com\/announce@openbsd.org\/msg00315.html\">a \u00e9t\u00e9 pr\u00e9sent\u00e9e<\/a><\/noindex> publication d'une \u00e9dition portable du paquet <noindex><a rel=\"nofollow\" href=\"http:\/\/www.libressl.org\/\">LibreSSL 3.2.0<\/a><\/noindex>, dans le cadre duquel se d\u00e9veloppe un fork d'OpenSSL, visant \u00e0 offrir un niveau de s\u00e9curit\u00e9 sup\u00e9rieur. Le projet LibreSSL se concentre sur le soutien qualitatif des protocoles SSL\/TLS en \u00e9liminant les fonctionnalit\u00e9s superflues, en ajoutant des moyens de protection suppl\u00e9mentaires et en proc\u00e9dant \u00e0 un nettoyage et une refonte significatifs de la base de code. La sortie de LibreSSL 3.2.0 est consid\u00e9r\u00e9e comme exp\u00e9rimentale, o\u00f9 se d\u00e9veloppent des fonctionnalit\u00e9s qui seront int\u00e9gr\u00e9es dans OpenBSD 6.8. <\/p>\n<p>Caract\u00e9ristiques de LibreSSL 3.2.0 :\n<\/p>\n<ul>\n<li class=\"l\"> La partie serveur est activ\u00e9e par d\u00e9faut <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=49126\">TLS 1.3<\/a><\/noindex> en plus de la partie client pr\u00e9c\u00e9demment propos\u00e9e. L'impl\u00e9mentation de TLS 1.3 repose sur un nouvel automate d'\u00e9tat et sur un sous-syst\u00e8me de gestion des enregistrements. Une API TLS 1.3 compatible avec OpenSSL n'est pas encore disponible, mais des options li\u00e9es \u00e0 TLS 1.3 ont \u00e9t\u00e9 ajout\u00e9es \u00e0 l'\u00e9quipe OpenSSL.\n<li class=\"l\"> Dans le sous-syst\u00e8me de gestion des enregistrements, la v\u00e9rification de la taille des champs TLS 1.3 a \u00e9t\u00e9 am\u00e9lior\u00e9e et un avertissement est d\u00e9sormais affich\u00e9 en cas de d\u00e9passement des limites.\n<li class=\"l\"> Le serveur TLS ne traite que les noms d'h\u00f4te valides dans SNI, conformes aux exigences de la RFC 5890 et de la RFC 6066.\n<li class=\"l\"> Dans l'impl\u00e9mentation de TLS 1.3, le mode SSL_MODE_AUTO_RETRY a \u00e9t\u00e9 ajout\u00e9 pour la renvoi automatique des messages de n\u00e9gociation de connexion.\n<li class=\"l\"> Dans les serveurs et clients TLS 1.3, le support de l'envoi de demandes de v\u00e9rification de l'\u00e9tat des certificats a \u00e9t\u00e9 ajout\u00e9, en utilisant l'extension <noindex><a rel=\"nofollow\" href=\"https:\/\/en.wikipedia.org\/wiki\/OCSP_stapling\">OCSP stapling<\/a><\/noindex> (la r\u00e9ponse OCSP certifi\u00e9e par l'autorit\u00e9 de certification est transmise par le serveur qui g\u00e8re le site lors de l'\u00e9tablissement de la connexion TLS).\n<li class=\"l\"> Lors de l'entr\u00e9e\/sortie, le mode SSL_MODE_AUTO_RETRY est activ\u00e9 par d\u00e9faut, \u00e0 l'instar des nouvelles versions d'OpenSSL.\n<li class=\"l\"> Des tests de r\u00e9gression ont \u00e9t\u00e9 ajout\u00e9s bas\u00e9s sur  <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/tomato42\/tlsfuzzer\">tlsfuzzer<\/a><\/noindex>.\n<li class=\"l\"> L'\u00e9quipe &#171;openssl x509&#187; a mis en place une marque pour un moment d'expiration de certificat incorrect.\n<li class=\"l\"> Dans TLS 1.3 avec RSA, l'utilisation uniquement de signatures num\u00e9riques PSS est autoris\u00e9e.\n<\/ul>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Source : <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=53066\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430 LibreSSL 3.2.0, \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043a\u043e\u0442\u043e\u0440\u043e\u0433\u043e \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0444\u043e\u0440\u043a OpenSSL, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u044b\u0439 \u043d\u0430 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0435 \u0431\u043e\u043b\u0435\u0435 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438. \u041f\u0440\u043e\u0435\u043a\u0442 LibreSSL \u043e\u0440\u0438\u0435\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d \u043d\u0430 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u0443\u044e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0441 \u0443\u0434\u0430\u043b\u0435\u043d\u0438\u0435\u043c \u0438\u0437\u043b\u0438\u0448\u043d\u0435\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u0438, \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u0437\u0430\u0449\u0438\u0442\u044b \u0438 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u0435\u043c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0447\u0438\u0441\u0442\u043a\u0438 \u0438 \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b. \u0412\u044b\u043f\u0443\u0441\u043a LibreSSL 3.2.0 \u0440\u0430\u0441\u0441\u043c\u0430\u0442\u0440\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u0435\u0440\u0438\u043c\u0435\u043d\u0442\u0430\u043b\u044c\u043d\u044b\u0439, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-83619","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"fr_FR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LibreSSL 3.2.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-01T23:42:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-01T23:42:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Lancement de la biblioth\u00e8que cryptographique LibreSSL 3.2.0 | ProHoster","description":"Les d\u00e9veloppeurs du projet OpenBSD ont pr\u00e9sent\u00e9 une version portable du package","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 LibreSSL 3.2.0 | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenBSD \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0435\u0440\u0435\u043d\u043e\u0441\u0438\u043c\u043e\u0439 \u0440\u0435\u0434\u0430\u043a\u0446\u0438\u0438 \u043f\u0430\u043a\u0435\u0442\u0430","og:url":"https:\/\/prohoster.info\/fr\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-2-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-01T23:42:03+00:00","article:modified_time":"2020-06-01T23:42:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"83619","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 15:14:36","updated":"2022-09-29 00:29:55","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/83619","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=83619"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/83619\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=83619"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=83619"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=83619"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}