LibreSSL 3.2.0 Cryptographic Library Kutulutsidwa

OpenBSD Project Madivelopa zoperekedwa kutulutsidwa kwa mtundu wonyamula wa phukusi LibreSSL 3.2.0, mkati momwe foloko ya OpenSSL ikupangidwira, cholinga chake ndi kupereka chitetezo chapamwamba. Pulojekiti ya LibreSSL ikuyang'ana pa chithandizo chapamwamba cha ndondomeko za SSL / TLS pochotsa ntchito zosafunikira, kuwonjezera zina zowonjezera chitetezo, ndikuyeretsa kwambiri ndi kukonzanso maziko a code. Kutulutsidwa kwa LibreSSL 3.2.0 kumatengedwa ngati kumasulidwa koyesera komwe kumapanga zinthu zomwe zidzaphatikizidwe mu OpenBSD 6.8.

Mawonekedwe a LibreSSL 3.2.0:

• Mbali ya seva imayatsidwa mwachisawawa TLS 1.3 kuwonjezera pa gawo lamakasitomala lomwe laperekedwa kale. Kukhazikitsidwa kwa TLS 1.3 kumamangidwa pamaziko a makina atsopano a boma ndi kagawo kakang'ono kogwirira ntchito ndi zolemba. API yogwirizana ya OpenSSL TLS 1.3 sinapezekebe, koma zosankha zokhudzana ndi TLS 1.3 zawonjezedwa ku lamulo la openssl.
• M'kagawo kakang'ono kakuwongolera, TLS 1.3 kuwunika kukula kwamunda kwasinthidwa ndipo chenjezo likuwonetsedwa ngati malire apitilira.
• Seva ya TLS imaonetsetsa kuti mayina ovomerezeka okha mu SNI omwe akugwirizana ndi zofunikira za RFC 5890 ndi RFC 6066 ndi omwe asinthidwa.
• Kukhazikitsa kwa TLS 1.3 kunawonjezera chithandizo cha SSL_MODE_AUTO_RETRY kuti itumizenso mauthenga olumikizana.
• Seva ya TLS 1.3 ndi kasitomala adawonjezera thandizo potumiza zopempha za satifiketi pogwiritsa ntchito kukulitsa Kuchulukitsa kwa OCSP (yankho la OCSP lotsimikiziridwa ndi akuluakulu a certification limaperekedwa ndi seva yomwe ikutumizira tsambalo pokambirana ndi TLS).
• I/O ikayatsidwa mwachisawawa, SSL_MODE_AUTO_RETRY imayatsidwa, mofanana ndi zotulutsa zatsopano za OpenSSL.
• Mayeso ocheperako owonjezera kutengera tlsfuzzer.
• Lamulo la "openssl x509" limapereka chisonyezero cha tsiku lolakwika lotha ntchito.
• TLS 1.3 yokhala ndi RSA imalola ma signature a digito a PSS okha.

Source: opennet.ru