{"id":101224,"date":"2021-09-08T16:23:07","date_gmt":"2021-09-08T14:23:07","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0"},"modified":"2021-09-08T16:23:07","modified_gmt":"2021-09-08T14:23:07","slug":"vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","title":{"rendered":"Megjelent az OpenSSL 3.0.0 kriptogr\u00e1fiai k\u00f6nyvt\u00e1r","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>H\u00e1rom \u00e9v fejleszt\u00e9s \u00e9s 19 tesztkiad\u00e1s ut\u00e1n meg\u00e9rkezett az OpenSSL 3.0.0 k\u00f6nyvt\u00e1r\u00e1nak v\u00e9gleges kiad\u00e1sa, amely az SSL\/TLS protokollok \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 titkos\u00edt\u00e1si algoritmusok megval\u00f3s\u00edt\u00e1s\u00e1t tartalmazza. Az \u00faj \u00e1gon olyan v\u00e1ltoz\u00e1sok k\u00f6vetkeznek be, amelyek megs\u00e9rtik az API \u00e9s ABI visszafel\u00e9 kompatibilit\u00e1s\u00e1t, de ezek a v\u00e1ltoz\u00e1sok a legt\u00f6bb alkalmaz\u00e1s m\u0171k\u00f6d\u00e9s\u00e9re nem lesznek hat\u00e1ssal, amelyek \u00e1t\u00e1ll\u00edt\u00e1sa az OpenSSL 1.1.1-r\u0151l elegend\u0151 a ford\u00edt\u00e1s \u00fajb\u00f3li elk\u00e9sz\u00edt\u00e9se. Az OpenSSL 1.1.1 kor\u00e1bbi \u00e1ga t\u00e1mogatva lesz 2023 szeptember\u00e9ig.    <\/p>\n<p>A jelent\u0151s verzi\u00f3sz\u00e1m-v\u00e1ltoz\u00e1s a hagyom\u00e1nyos \"Major.Minor.Patch\" sz\u00e1moz\u00e1sra val\u00f3 \u00e1tt\u00e9r\u00e9ssel j\u00e1r. Az els\u0151 sz\u00e1m (Major) a verzi\u00f3sz\u00e1mban ezent\u00fal csak API\/ABI szint\u0171 inkompatibilit\u00e1s eset\u00e9n fog v\u00e1ltozni, m\u00edg a m\u00e1sodik sz\u00e1m (Minor) a funkcionalit\u00e1s n\u00f6vel\u00e9s\u00e9n\u00e9l, API\/ABI m\u00f3dos\u00edt\u00e1sa n\u00e9lk\u00fcl. A hibajav\u00edt\u00f3 friss\u00edt\u00e9sek a harmadik sz\u00e1m (Patch) v\u00e1ltoztat\u00e1s\u00e1val \u00e9rkeznek. A 3.0.0 verzi\u00f3sz\u00e1mot az 1.1.1 ut\u00e1n v\u00e1lasztott\u00e1k, hogy elker\u00fclj\u00e9k a folyamatban l\u00e9v\u0151 FIPS-modul \u00f6ssze\u00fctk\u00f6z\u00e9s\u00e9t az OpenSSL-hez, amely a 2.x sz\u00e1moz\u00e1st alkalmazta.      <\/p>\n<p>A projekt szempontj\u00e1b\u00f3l fontos m\u00e1sodik v\u00e1ltoz\u00e1s a dupla licencr\u0151l (OpenSSL \u00e9s SSLeay) az Apache 2.0 licencre val\u00f3 \u00e1tt\u00e9r\u00e9s. A kor\u00e1bban alkalmazott OpenSSL saj\u00e1t licenc\u00e9nek alapja a m\u00e1r elavult Apache 1.0 licenc sz\u00f6vege volt, \u00e9s megk\u00f6vetelte az OpenSSL expl\u00edcit eml\u00edt\u00e9s\u00e9t a rekl\u00e1manyagokban az OpenSSL k\u00f6nyvt\u00e1rak felhaszn\u00e1l\u00e1sa eset\u00e9n, valamint k\u00fcl\u00f6n megjegyz\u00e9s hozz\u00e1ad\u00e1s\u00e1t, ha az OpenSSL-t egy term\u00e9k r\u00e9szek\u00e9nt sz\u00e1ll\u00edtj\u00e1k. Az ilyen k\u00f6vetelm\u00e9nyek miatt a r\u00e9gi licenc \u00f6sszeegyeztethetetlenn\u00e9 tette a GPL-lel, ami neh\u00e9zs\u00e9geket okozott az OpenSSL GPL licenccel rendelkez\u0151 projektekben t\u00f6rt\u00e9n\u0151 haszn\u00e1lat\u00e1n\u00e1l. A GPL-akkal val\u00f3 ilyen \u00f6sszeegyeztethetetlens\u00e9g elker\u00fcl\u00e9s\u00e9vel a GPL-projekteknek speci\u00e1lis licencszerz\u0151d\u00e9seket kellett alkalmazniuk, amelyekben a GPL f\u0151 sz\u00f6veg\u00e9t kieg\u00e9sz\u00edtett\u00e9k egy ponttal, amely egy\u00e9rtelm\u0171en lehet\u0151v\u00e9 tette az alkalmaz\u00e1s OpenSSL k\u00f6nyvt\u00e1rral val\u00f3 \u00f6sszekapcsol\u00e1s\u00e1t, \u00e9s eml\u00edtette, hogy a GPL k\u00f6vetelm\u00e9nyei nem vonatkoznak az OpenSSL-lel val\u00f3 \u00f6sszekapcsol\u00e1sra.         <\/p>\n<p>Az OpenSSL 1.1.1-hez k\u00e9pest az OpenSSL 3.0.0 t\u00f6bb mint 7500 m\u00f3dos\u00edt\u00e1st tartalmaz, amelyeket 350 fejleszt\u0151 k\u00e9sz\u00edtett. Az OpenSSL 3.0.0 f\u0151bb \u00fajdons\u00e1gai:  <\/p>\n<ul>\n<li class=\"l\"> \u00daj FIPS modul ker\u00fclt javaslatra, amely a FIPS 140-2 biztons\u00e1gi szabv\u00e1nynak megfelel\u0151 kriptogr\u00e1fiai algoritmusok megval\u00f3s\u00edt\u00e1s\u00e1t tartalmazza (a modul tan\u00fas\u00edt\u00e1si folyamat\u00e1t a h\u00f3napban tervezik megkezdeni, a FIPS 140-2 tan\u00fas\u00edtv\u00e1ny megszerz\u00e9se a k\u00f6vetkez\u0151 \u00e9vre v\u00e1rhat\u00f3). Az \u00faj modul jelent\u0151sen k\u00f6nnyebb haszn\u00e1lni, \u00e9s a sok alkalmaz\u00e1shoz val\u00f3 csatlakoztat\u00e1sa nem bonyolultabb, mint a konfigur\u00e1ci\u00f3s f\u00e1jl m\u00f3dos\u00edt\u00e1sa. Alap\u00e9rtelmez\u00e9s szerint a FIPS modul ki van kapcsolva, \u00e9s az enable-fips opci\u00f3 megad\u00e1s\u00e1t ig\u00e9nyli a aktiv\u00e1l\u00e1shoz.\n<li class=\"l\"> A libcrypto a csatlakoztathat\u00f3 szolg\u00e1ltat\u00f3k koncepci\u00f3j\u00e1t val\u00f3s\u00edtotta meg, amely a motorok (ENGINE API) koncepci\u00f3j\u00e1t v\u00e1ltja fel (a ENGINE API elavultnak sz\u00e1m\u00edt). A szolg\u00e1ltat\u00f3k seg\u00edts\u00e9g\u00e9vel saj\u00e1t algoritmusok megval\u00f3s\u00edt\u00e1sait lehet hozz\u00e1adni olyan m\u0171veletekhez, mint az titkos\u00edt\u00e1s, visszafejt\u00e9s, kulcsok gener\u00e1l\u00e1sa, MAC sz\u00e1m\u00edt\u00e1sa, digit\u00e1lis al\u00e1\u00edr\u00e1sok l\u00e9trehoz\u00e1sa \u00e9s ellen\u0151rz\u00e9se. \u00daj szolg\u00e1ltat\u00f3k csatlakoztat\u00e1sa \u00e9s m\u00e1r t\u00e1mogatott algoritmusok alternat\u00edv megval\u00f3s\u00edt\u00e1sainak l\u00e9trehoz\u00e1sa is lehets\u00e9ges (alap\u00e9rtelmez\u00e9s szerint most minden algoritmushoz az OpenSSL be\u00e9p\u00edtett szolg\u00e1ltat\u00f3ja haszn\u00e1latos).\n<li class=\"l\"> Hozz\u00e1adva a CMP (Certificate Management Protocol, RFC 4210) tan\u00fas\u00edtv\u00e1nykezel\u00e9si protokoll t\u00e1mogat\u00e1sa, amely k\u00e9rhet\u0151 tan\u00fas\u00edtv\u00e1nyok ig\u00e9nyl\u00e9s\u00e9re szolg\u00e1l <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hu\/server\/dts-los-angeles\/\"   title=\"a szerver\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"3745\">a szerver<\/a> hiteles\u00edt\u00e9sszolg\u00e1ltat\u00f3t\u00f3l, tan\u00fas\u00edtv\u00e1nyok friss\u00edt\u00e9s\u00e9re \u00e9s visszavon\u00e1s\u00e1ra. A CMP-vel val\u00f3 munka az \u00faj openssl-cmp seg\u00e9deszk\u00f6z seg\u00edts\u00e9g\u00e9vel t\u00f6rt\u00e9nik, amely a CRMF (RFC 4211) form\u00e1tum \u00e9s a HTTP\/HTTPS (RFC 6712) protokollokon kereszt\u00fcli k\u00e9r\u00e9s\u00e1tvitel t\u00e1mogat\u00e1s\u00e1t is megval\u00f3s\u00edtja.\n<li class=\"l\"> Teljes funkcionalit\u00e1s\u00fa kliens lett megval\u00f3s\u00edtva HTTP \u00e9s HTTPS protokollokhoz, amely t\u00e1mogatja a GET \u00e9s POST met\u00f3dusokat, a k\u00e9r\u00e9sek \u00e1tir\u00e1ny\u00edt\u00e1s\u00e1t, proxy-n kereszt\u00fcli m\u0171k\u00f6d\u00e9st, ASN.1 k\u00f3dol\u00e1st \u00e9s id\u0151korl\u00e1tok kezel\u00e9s\u00e9t.\n<li class=\"l\"> \u00daj EVP_MAC (Message Authentication Code API) API ker\u00fclt hozz\u00e1ad\u00e1sra, amely megk\u00f6nny\u00edti az \u00faj imitoszt\u00e1sok megval\u00f3s\u00edt\u00e1s\u00e1t.\n<li class=\"l\"> \u00daj kulcsgener\u00e1l\u00f3 API-t javasoltak - EVP_KDF (Key Derivation Function API), amely megk\u00f6nny\u00edti \u00faj KDF \u00e9s PRF megval\u00f3s\u00edt\u00e1sok hozz\u00e1ad\u00e1s\u00e1t. A r\u00e9gi API, az EVP_PKEY, amelyen kereszt\u00fcl el\u00e9rhet\u0151ek voltak az scrypt, TLS1 PRF \u00e9s HKDF algoritmusok, \u00e1tdolgoz\u00e1sra ker\u00fclt, \u00e9s most az EVP_KDF \u00e9s EVP_MAC API-k f\u00f6l\u00f6tti r\u00e9tegk\u00e9nt val\u00f3sult meg.\n<li class=\"l\"> A TLS protokoll megval\u00f3s\u00edt\u00e1s\u00e1ban lehet\u0151s\u00e9g ny\u00edlik a Linux kernelbe integr\u00e1lt TLS kliens \u00e9s szerver haszn\u00e1lat\u00e1ra az oper\u00e1ci\u00f3k felgyors\u00edt\u00e1sa \u00e9rdek\u00e9ben. A Linux kernel \u00e1ltal biztos\u00edtott TLS implement\u00e1ci\u00f3 haszn\u00e1lat\u00e1hoz az \"SSL_OP_ENABLE_KTLS\" opci\u00f3t kell aktiv\u00e1lni, vagy az \"enable-ktls\" be\u00e1ll\u00edt\u00e1st m\u00f3dos\u00edtani.\n<li class=\"l\"> \u00daj algoritmusok t\u00e1mogat\u00e1sa ker\u00fclt hozz\u00e1ad\u00e1sra:\n<ul>\n<li class=\"l\"> A kulcsgener\u00e1l\u00f3 algoritmusok (KDF) - \"SINGLE STEP\" \u00e9s \"SSH\".\n<li class=\"l\"> A MAC algoritmusok - \"GMAC\" \u00e9s \"KMAC\".\n<li class=\"l\"> Az RSA kulcsbe\u00e1gyaz\u00f3 algoritmus (KEM) - \"RSASVE\".\n<li class=\"l\"> A \"AES-SIV\" titkos\u00edt\u00f3 algoritmus (RFC-8452).\n<li class=\"l\"> Az EVP API-hoz sz\u00e1mos \u00faj h\u00edv\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra az inverz titkos\u00edt\u00e1s t\u00e1mogat\u00e1s\u00e1val, amelyek az AES algoritmust haszn\u00e1lj\u00e1k a kulcsok titkos\u00edt\u00e1s\u00e1ra (Key Wrap): \"AES-128-WRAP-INV\", \"AES-192-WRAP-INV\", \"AES-256-WRAP-INV\", \"AES-128-WRAP-PAD-INV\", \"AES-192-WRAP-PAD-INV\" \u00e9s \"AES-256-WRAP-PAD-INV\".\n<li class=\"l\"> Az EVP API-hoz hozz\u00e1adt\u00e1k a titkos\u00edtott sz\u00f6veg k\u00f6lcs\u00f6nz\u00e9si (CTS) algoritmusok t\u00e1mogat\u00e1s\u00e1t: \"AES-128-CBC-CTS\", \"AES-192-CBC-CTS\", \"AES-256-CBC-CTS\", \"CAMELLIA-128-CBC-CTS\", \"CAMELLIA-192-CBC-CTS\" \u00e9s \"CAMELLIA-256-CBC-CTS\".\n<li class=\"l\"> Hozz\u00e1adva a CAdES-BES digit\u00e1lis al\u00e1\u00edr\u00e1sok t\u00e1mogat\u00e1sa (RFC 5126).\n<li class=\"l\"> Az AES_GCM-ben megval\u00f3sult az AuthEnvelopedData param\u00e9ter (RFC 5083), amely lehet\u0151v\u00e9 teszi az AES GCM m\u00f3d haszn\u00e1lat\u00e1val titkos\u00edtott \u00e9s hiteles\u00edtett \u00fczenetek titkos\u00edt\u00e1s\u00e1t \u00e9s visszafejt\u00e9s\u00e9t.  <\/ul>\n<li class=\"l\"> A nyilv\u00e1nos API-ba \u00e1thelyezve a PKCS7_get_octet_string \u00e9s PKCS7_type_is_other funkci\u00f3k.\n<li class=\"l\"> A PKCS#12 API-ban a PKCS12_create() funkci\u00f3ban alap\u00e9rtelmezetten haszn\u00e1lt algoritmusokat PBKDF2 \u00e9s AES-ra cser\u00e9lt\u00e9k, a MAC kisz\u00e1m\u00edt\u00e1s\u00e1hoz pedig a SHA-256 algoritmus lett bevonva. A r\u00e9gi m\u0171k\u00f6d\u00e9s helyre\u00e1ll\u00edt\u00e1s\u00e1hoz el\u00e9rhet\u0151 egy \"-legacy\" opci\u00f3. Sz\u00e1mos \u00faj kiterjesztett h\u00edv\u00e1s ker\u00fclt hozz\u00e1ad\u00e1sra a PKCS12_*_ex, PKCS5_*_ex \u00e9s PKCS8_*_ex funkci\u00f3khoz, p\u00e9ld\u00e1ul a PKCS12_add_key_ex(), PKCS12_create_ex() \u00e9s PKCS12_decrypt_skey_ex().\n<li class=\"l\"> Windows platformra hozz\u00e1adva a sz\u00e1lak szinkroniz\u00e1l\u00e1s\u00e1nak t\u00e1mogat\u00e1sa SRWLock mechanizmus seg\u00edts\u00e9g\u00e9vel.\n<li class=\"l\"> \u00daj API ker\u00fclt hozz\u00e1ad\u00e1sra a nyomk\u00f6vet\u00e9shez, amelyet az enable-trace param\u00e9ter aktiv\u00e1l\u00e1s\u00e1val lehet bekapcsolni.\n<li class=\"l\"> B\u0151v\u00fclt a EVP_PKEY_public_check() \u00e9s EVP_PKEY_param_check() funkci\u00f3k \u00e1ltal t\u00e1mogatott kulcsok k\u00f6re: RSA, DSA, ED25519, X25519, ED448 \u00e9s X448.\n<li class=\"l\"> A RAND_DRBG alrendszert elt\u00e1vol\u00edtott\u00e1k, helyette az EVP_RAND API javasolt. Elt\u00e1vol\u00edtott\u00e1k a FIPS_mode() \u00e9s FIPS_mode_set() funkci\u00f3kat.\n<li class=\"l\"> Az API jelent\u0151s r\u00e9sze elavultk\u00e9nt van megjel\u00f6lve \u2013 az elavult h\u00edv\u00e1sok k\u00f3dba val\u00f3 beilleszt\u00e9se figyelmeztet\u00e9st fog gener\u00e1lni a ford\u00edt\u00e1s sor\u00e1n. Az alacsony szint\u0171 API-k, amelyek egyes algoritmusok (p\u00e9ld\u00e1ul AES_set_encrypt_key \u00e9s AES_encrypt) v\u00e9grehajt\u00e1s\u00e1hoz kapcsol\u00f3dnak, hivatalosan is elavultnak lettek nyilv\u00e1n\u00edtva. Az OpenSSL 3.0.0-ban hivatalosan m\u00e1r csak a magasszint\u0171 EVP API-k sz\u00e1m\u00e1ra biztos\u00edtanak t\u00e1mogat\u00e1st, amelyek el vannak vonatkoztatva a k\u00fcl\u00f6nb\u00f6z\u0151 algoritmus t\u00edpusokt\u00f3l (ide tartoznak p\u00e9ld\u00e1ul az EVP_EncryptInit_ex, EVP_EncryptUpdate \u00e9s EVP_EncryptFinal funkci\u00f3k). Az elk\u00f6vetkez\u0151 jelent\u0151s kiad\u00e1sok egyik\u00e9ben az elavult API-k elt\u00e1vol\u00edt\u00e1sra ker\u00fclnek. Az olyan elavult algoritmusok, mint az MD2 \u00e9s a DES, amelyek el\u00e9rhet\u0151k az EVP API-n kereszt\u00fcl, egy k\u00fcl\u00f6n \"legacy\" modulba lettek \u00e1thelyezve, amely alap\u00e9rtelmez\u00e9s szerint ki van kapcsolva.\n<li class=\"l\"> Jelent\u0151sen kib\u0151v\u00fclt a dokument\u00e1ci\u00f3 \u00e9s a tesztk\u00e9szlet. Az 1.1.1-es \u00e1ggal \u00f6sszehasonl\u00edtva a dokument\u00e1ci\u00f3 terjedelme 94%-kal, m\u00edg a tesztk\u00e9szlet k\u00f3dm\u00e9rete 54%-kal n\u0151tt.  <\/ul>\n<p>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=55760\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 19 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041d\u043e\u0432\u0430\u044f \u0432\u0435\u0442\u043a\u0430 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0435 \u043e\u0431\u0440\u0430\u0442\u043d\u0443\u044e \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c \u043d\u0430 \u0443\u0440\u043e\u0432\u043d\u0435 API \u0438 ABI, \u043d\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0435 \u043f\u043e\u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439, \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0432\u043e\u0434\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0441 OpenSSL 1.1.1 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043f\u0435\u0440\u0435\u0441\u0431\u043e\u0440\u043a\u0438. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u0432\u0435\u0442\u043a\u0438 OpenSSL 1.1.1 \u0431\u0443\u0434\u0435\u0442 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-101224","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 19 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 19 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2021-09-08T14:23:07+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2021-09-08T14:23:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Az OpenSSL 3.0.0 Kriptogr\u00e1fiai K\u00f6nyvt\u00e1r Kiad\u00e1sa | ProHoster","description":"H\u00e1rom \u00e9v fejleszt\u00e9s \u00e9s 19 tesztkiad\u00e1s ut\u00e1n megjelent az OpenSSL 3.0.0 k\u00f6nyvt\u00e1r, amely az SSL\/TLS protokollok \u00e9s k\u00fcl\u00f6nb\u00f6z\u0151 titkos\u00edt\u00f3 algoritmusok megval\u00f3s\u00edt\u00e1s\u00e1t tartalmazza.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0442\u0440\u0451\u0445 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0438 19 \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0445 \u0432\u044b\u043f\u0443\u0441\u043a\u043e\u0432 \u0441\u043e\u0441\u0442\u043e\u044f\u043b\u0441\u044f \u0440\u0435\u043b\u0438\u0437 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0438 OpenSSL 3.0.0 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 SSL\/TLS \u0438 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-openssl-3-0-0","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-09-08T14:23:07+00:00","article:modified_time":"2021-09-08T14:23:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"101224","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-09-08 14:38:48","updated":"2026-02-22 15:30:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/101224","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=101224"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/101224\/revisions"}],"predecessor-version":[{"id":162273,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/101224\/revisions\/162273"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=101224"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=101224"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=101224"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}